
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
File: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft (raw, json)
Hash identifier: rA0VoWYKiU/hZBFANTau47DFN4x0bgECRB+OmDyF9LA=
Subject key identifier: 9A:C5:B1:5B:D0:C6:94:E7:2F:93:B4:16:C3:7D:C5:87:89:23:50:4D
Authority key identifier: F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
Certificate issuer: /CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Certificate serial: 019CAA214360577C3C88DBEC299F039C1692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
Manifest number: 072F
Signing time: Sun 01 Mar 2026 16:00:32 +0000
Manifest this update: Sun 01 Mar 2026 16:00:32 +0000
Manifest next update: Mon 02 Mar 2026 16:00:32 +0000
Files and hashes: 1: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl (hash: hN7yH/tQp5Un8m0XMQ6PKdBLr9NT+4lNI2d1329kvnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:43:60:57:7c:3c:88:db:ec:29:9f:03:9c:16:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Validity
Not Before: Mar 1 16:00:32 2026 GMT
Not After : Mar 2 16:00:32 2026 GMT
Subject: CN=9ac5b15bd0c694e72f93b416c37dc5878923504d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:44:9a:4b:40:fa:a6:7c:ff:bd:b3:eb:04:0b:
bc:29:76:90:ea:69:4d:9a:22:4a:e0:78:a9:ec:44:
e4:72:63:c8:d0:6a:45:61:f4:88:7c:cb:d7:5f:46:
7f:b3:a9:7e:67:db:5e:56:ca:73:40:a2:48:4d:90:
5c:d5:ed:de:66:f0:f8:37:9f:6c:89:2c:75:0f:73:
3f:4b:d4:4f:55:63:6d:5d:ce:f6:d8:b4:e5:4b:75:
8b:c6:a8:cb:b2:6c:72:c2:0b:77:b6:ec:a3:1d:fa:
b4:0a:e2:8b:13:c5:31:4a:bf:1e:c2:85:7a:3b:ba:
8b:0c:7b:ef:b1:b9:95:4b:69:08:91:f6:5e:2d:be:
d8:f4:11:44:90:ff:79:9d:bb:ff:43:9e:1f:a4:01:
92:63:a8:c3:9f:15:57:ac:bd:5a:6d:d5:c9:dc:e1:
ea:ac:36:2b:b8:71:1c:fe:07:05:94:7f:6f:2f:b9:
b5:6b:28:31:78:10:9a:69:5e:8e:88:0d:af:8f:f5:
d2:28:ef:05:24:79:01:de:d4:67:d4:ca:93:f6:c1:
93:ae:f3:81:30:4a:04:ce:f2:29:c1:39:83:f7:73:
27:a3:90:a4:81:7c:3b:85:07:87:6c:ae:ca:8d:13:
3f:ad:23:e1:43:87:60:b3:c6:7b:0d:4e:96:d8:a9:
aa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C5:B1:5B:D0:C6:94:E7:2F:93:B4:16:C3:7D:C5:87:89:23:50:4D
X509v3 Authority Key Identifier:
keyid:F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:20:eb:48:ec:28:33:a6:6d:7b:ca:b3:83:45:df:21:62:9c:
c9:b0:4c:63:27:21:ec:a8:61:10:b8:c0:0a:8a:66:e1:b0:27:
f6:f8:e1:54:19:0d:9e:a1:03:47:43:c2:c2:86:86:27:28:1e:
f2:85:5e:35:2d:ce:8c:c5:7d:8b:d5:47:c5:de:20:2c:3e:61:
76:51:51:e8:d3:05:ea:d9:61:b3:d4:81:40:04:43:cf:4d:aa:
ff:9b:fe:33:2b:51:4b:63:67:87:0e:f1:43:a2:a5:fc:83:33:
0b:78:23:42:49:7c:2c:34:cd:78:9c:97:67:b8:a9:0e:ad:cf:
ac:b8:db:8a:96:ed:90:f0:42:8c:eb:a4:3d:30:e0:8b:35:02:
05:4a:cf:39:cf:6a:25:a0:15:37:30:e8:ab:dd:15:2f:16:fd:
cd:63:2a:39:27:9e:b9:0d:54:4f:2e:40:7c:86:86:49:12:ed:
f5:ab:f4:ef:d7:c0:b9:00:46:b6:18:28:0c:37:d9:19:85:56:
fb:50:0c:e7:26:1b:b1:ac:93:b4:09:35:83:de:c7:ef:a9:83:
71:da:92:ba:58:a1:e9:5d:b6:8f:a0:a4:0a:23:5e:ee:91:10:
e2:64:e3:c5:26:03:f8:b9:8d:50:53:37:24:80:82:1e:0d:ba:
1a:b7:a7:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIUNgV3w8iNvsKZ8DnBaSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwM2YxZjMzNWM3ZDA0YjM2MDhmZDE5MTRhOWMwNTNiMDRh
N2ZjYjkwHhcNMjYwMzAxMTYwMDMyWhcNMjYwMzAyMTYwMDMyWjAzMTEwLwYDVQQD
Eyg5YWM1YjE1YmQwYzY5NGU3MmY5M2I0MTZjMzdkYzU4Nzg5MjM1MDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqESaS0D6pnz/vbPrBAu8KXaQ6mlN
miJK4Hip7ETkcmPI0GpFYfSIfMvXX0Z/s6l+Z9teVspzQKJITZBc1e3eZvD4N59s
iSx1D3M/S9RPVWNtXc722LTlS3WLxqjLsmxywgt3tuyjHfq0CuKLE8UxSr8ewoV6
O7qLDHvvsbmVS2kIkfZeLb7Y9BFEkP95nbv/Q54fpAGSY6jDnxVXrL1abdXJ3OHq
rDYruHEc/gcFlH9vL7m1aygxeBCaaV6OiA2vj/XSKO8FJHkB3tRn1MqT9sGTrvOB
MEoEzvIpwTmD93Mno5CkgXw7hQeHbK7KjRM/rSPhQ4dgs8Z7DU6W2KmqcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrFsVvQxpTnL5O0FsN9xYeJI1BNMB8GA1UdIwQY
MBaAFPA/HzNcfQSzYI/RkUqcBTsEp/y5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84OTdjZjctYjM4Ni00Yzg3LTg0MWYt
MzM4YTA3ZThlYmQ2LzEvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84OTdjZjctYjM4Ni00Yzg3LTg0MWYtMzM4YTA3ZThlYmQ2
LzEvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSDrSOwo
M6Zte8qzg0XfIWKcybBMYych7KhhELjACopm4bAn9vjhVBkNnqEDR0PCwoaGJyge
8oVeNS3OjMV9i9VHxd4gLD5hdlFR6NMF6tlhs9SBQARDz02q/5v+MytRS2Nnhw7x
Q6Kl/IMzC3gjQkl8LDTNeJyXZ7ipDq3PrLjbipbtkPBCjOukPTDgizUCBUrPOc9q
JaAVNzDoq90VLxb9zWMqOSeeuQ1UTy5AfIaGSRLt9av079fAuQBGthgoDDfZGYVW
+1AM5yYbsayTtAk1g97H76mDcdqSulih6V22j6CkCiNe7pEQ4mTjxSYD+LmNUFM3
JICCHg26GrenYw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:15 2026 by rpki-client