Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
File: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft (raw, json)
Hash identifier: MsBhjrxbRjMQe/KpXDnC40mbP26gDIWPcH+1Pl9AmN8=
Subject key identifier: 13:4F:84:4F:87:FC:25:3C:CF:AD:1C:2B:A9:59:B0:30:B9:26:AD:43
Authority key identifier: F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
Certificate issuer: /CN=f9b16868f322ab679aec733702bf068e9637fc4f
Certificate serial: 019CAAC7173970D9023D1CDABCF7A28A61E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
Manifest number: 085B
Signing time: Sun 01 Mar 2026 19:01:40 +0000
Manifest this update: Sun 01 Mar 2026 19:01:40 +0000
Manifest next update: Mon 02 Mar 2026 19:01:40 +0000
Files and hashes: 1: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl (hash: hQ5HNThuANAxB0pFqjSamkB4GYuED7Uha6BZKPHOXuI=)
2: il7H5XRLlPOMcGmUaTO99BZFn2I.roa (hash: Df3NCzCkDFx+xfWB8WmONNlOHJhDormcIJSvLVXSXWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:17:39:70:d9:02:3d:1c:da:bc:f7:a2:8a:61:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9b16868f322ab679aec733702bf068e9637fc4f
Validity
Not Before: Mar 1 19:01:40 2026 GMT
Not After : Mar 2 19:01:40 2026 GMT
Subject: CN=134f844f87fc253ccfad1c2ba959b030b926ad43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b7:9a:bf:ec:85:d9:c6:9b:57:b2:4c:b8:56:
57:36:cf:8c:2f:21:af:06:4e:ad:b8:46:64:cd:ce:
06:67:4c:6d:2b:b3:ca:36:e1:96:f1:8b:ac:50:8b:
2e:c3:76:f5:a4:34:fd:ed:49:a8:b8:2c:ae:aa:49:
31:cb:3d:cf:7f:86:c5:87:5b:92:e6:aa:3e:b9:3b:
87:45:63:95:12:8c:4b:62:4a:0a:17:14:f2:a9:bc:
b4:c6:66:e3:40:22:57:f1:ca:a9:ee:56:60:64:00:
da:c5:5d:b8:41:1e:b9:a4:d2:fa:e2:5c:81:fd:bc:
12:02:fc:38:38:0c:ae:1e:ec:be:cf:22:fa:10:ef:
8c:0d:53:f1:8b:67:45:e5:f7:31:02:71:7f:36:cc:
7f:64:84:63:1a:73:49:94:d3:05:da:2c:e2:90:ab:
da:d0:2f:b7:af:11:75:1e:9b:7e:c7:8c:9e:bd:2b:
7e:55:f4:54:15:ae:ad:81:b1:44:dd:ff:e0:56:2d:
6f:c1:cb:89:4c:39:d1:ca:75:55:76:39:e9:f0:7d:
41:03:09:7b:d3:6f:63:69:47:1d:1b:78:d8:4d:1e:
c7:22:1d:74:e2:ef:7c:b8:9f:54:28:f3:04:9f:ec:
96:0a:2f:af:28:cd:c8:e9:40:28:de:6f:96:08:df:
ed:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4F:84:4F:87:FC:25:3C:CF:AD:1C:2B:A9:59:B0:30:B9:26:AD:43
X509v3 Authority Key Identifier:
keyid:F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:d7:9b:a5:ad:ac:27:96:9a:e8:fd:74:3d:30:0b:61:64:c5:
86:89:12:6a:ac:8e:18:1d:35:fa:b1:51:f4:22:cb:9b:4f:28:
31:6e:af:48:2b:a2:0a:d3:6c:b9:df:06:dd:c3:d8:a7:bd:74:
f5:23:a0:3b:a3:27:0f:e7:49:22:83:59:32:ff:b2:fc:87:b2:
8f:5c:7d:0e:d0:69:35:9c:64:52:09:66:0d:15:82:ad:bc:bf:
f4:b3:4b:bf:35:fe:2f:3d:2a:1c:f6:86:2e:dc:97:1a:8d:2c:
78:e2:23:7d:fe:63:65:68:93:5b:67:08:01:4b:8b:4a:3f:db:
df:c8:62:54:83:8c:da:f3:63:0f:fd:66:e3:4b:ca:c6:5a:19:
bf:be:60:21:35:13:21:c7:bb:5c:ac:88:46:25:ff:de:5a:87:
51:cf:b3:4d:a5:5f:c3:db:88:39:6a:a3:b6:35:3c:7a:68:88:
54:53:f4:67:33:95:cb:eb:19:e4:a5:01:4b:84:f8:f1:e3:58:
12:ec:f5:9d:c5:29:84:24:c3:af:26:68:42:e3:a2:be:55:d4:
6a:e2:1e:8d:e8:29:c7:9f:62:d7:fd:d1:22:e2:72:f3:c8:a0:
88:9a:b6:92:d2:36:a0:ff:83:8e:4c:25:e5:2e:03:43:27:50:
2b:70:65:af
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZyqxxc5cNkCPRzavPeiimHgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YjE2ODY4ZjMyMmFiNjc5YWVjNzMzNzAyYmYwNjhlOTYz
N2ZjNGYwHhcNMjYwMzAxMTkwMTQwWhcNMjYwMzAyMTkwMTQwWjAzMTEwLwYDVQQD
EygxMzRmODQ0Zjg3ZmMyNTNjY2ZhZDFjMmJhOTU5YjAzMGI5MjZhZDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7eav+yF2cabV7JMuFZXNs+MLyGv
Bk6tuEZkzc4GZ0xtK7PKNuGW8YusUIsuw3b1pDT97UmouCyuqkkxyz3Pf4bFh1uS
5qo+uTuHRWOVEoxLYkoKFxTyqby0xmbjQCJX8cqp7lZgZADaxV24QR65pNL64lyB
/bwSAvw4OAyuHuy+zyL6EO+MDVPxi2dF5fcxAnF/Nsx/ZIRjGnNJlNMF2izikKva
0C+3rxF1Hpt+x4yevSt+VfRUFa6tgbFE3f/gVi1vwcuJTDnRynVVdjnp8H1BAwl7
029jaUcdG3jYTR7HIh104u98uJ9UKPMEn+yWCi+vKM3I6UAo3m+WCN/tpwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBNPhE+H/CU8z60cK6lZsDC5Jq1DMB8GA1UdIwQY
MBaAFPmxaGjzIqtnmuxzNwK/Bo6WN/xPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1iRm9hUE1pcTJlYTdITTNBcjhHanBZM19FOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvOGI1Zjg4LTMwNzEtNGE0NC05ZjBj
LTI0MmEyOTQ1OTRlMC8xLzEtYkZvYVBNaXEyZWE3SE0zQXI4R2pwWTNfRTgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI0LzhiNWY4OC0zMDcxLTRhNDQtOWYwYy0yNDJhMjk0NTk0
ZTAvMS8xLWJGb2FQTWlxMmVhN0hNM0FyOEdqcFkzX0U4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv9eb
pa2sJ5aa6P10PTALYWTFhokSaqyOGB01+rFR9CLLm08oMW6vSCuiCtNsud8G3cPY
p7109SOgO6MnD+dJIoNZMv+y/Ieyj1x9DtBpNZxkUglmDRWCrby/9LNLvzX+Lz0q
HPaGLtyXGo0seOIjff5jZWiTW2cIAUuLSj/b38hiVIOM2vNjD/1m40vKxloZv75g
ITUTIce7XKyIRiX/3lqHUc+zTaVfw9uIOWqjtjU8emiIVFP0ZzOVy+sZ5KUBS4T4
8eNYEuz1ncUphCTDryZoQuOivlXUauIejegpx59i1/3RIuJy88igiJq2ktI2oP+D
jkwl5S4DQydQK3Blrw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:27 2026 by rpki-client