Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
File: 8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft (raw, json)
Hash identifier: +h7lzv8NtI5omwY2ePP/mwE9MpTCSAmwQG2trY6rkKM=
Subject key identifier: 8B:84:34:24:0F:EB:88:B4:DF:87:92:D7:E0:30:D3:8A:DD:AC:44:90
Authority key identifier: F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0
Certificate issuer: /CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
Certificate serial: 019CAAC64C5E22523D182BE10F30E9322960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 19:00:48 +0000
Manifest this update: Sun 01 Mar 2026 19:00:48 +0000
Manifest next update: Mon 02 Mar 2026 19:00:48 +0000
Files and hashes: 1: 8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl (hash: 16dMg0QRm3aEMSPToe2OHq3Fg2QxatTQfBc6J3cUkPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:4c:5e:22:52:3d:18:2b:e1:0f:30:e9:32:29:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
Validity
Not Before: Mar 1 19:00:48 2026 GMT
Not After : Mar 2 19:00:48 2026 GMT
Subject: CN=8b8434240feb88b4df8792d7e030d38addac4490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d1:54:44:2f:5b:1f:ef:d6:d6:9a:59:81:20:
60:fb:e6:07:3f:32:30:99:80:d5:98:8a:cf:15:f5:
b9:2a:4d:93:d3:c7:10:01:94:5e:0d:c8:49:7e:13:
45:c7:20:53:30:00:1d:ea:c9:ec:9a:fa:3b:0f:fc:
6e:4d:6e:e7:3c:58:e2:72:2b:bd:d6:59:d9:33:3e:
0b:3a:1b:c1:8d:a8:03:be:bd:a8:87:33:21:4f:36:
46:c2:63:2c:c6:94:47:cc:d9:2e:da:f0:1d:ea:27:
3c:5b:cd:f1:fa:5e:50:46:a8:36:10:9a:ca:9d:df:
e7:0e:c6:fb:98:65:c3:78:69:45:bc:04:88:1c:15:
a7:84:d1:06:21:88:f3:77:1e:ca:0a:45:56:eb:4c:
1e:86:25:72:72:f5:7e:73:53:e3:1a:d1:cf:04:47:
db:0c:66:aa:b4:7f:a7:f9:e6:08:e2:72:88:2f:5b:
ca:cc:23:0c:b9:65:e1:91:09:a6:32:eb:52:5c:0d:
a1:f3:82:30:dc:a2:18:cb:27:e6:e4:0d:ce:c7:37:
b2:8d:c3:d5:fd:32:c1:9d:5c:c0:cc:63:aa:5d:8f:
68:35:27:99:ec:d1:4f:e8:58:24:09:1f:5e:28:4b:
24:2f:fa:62:9d:77:67:13:42:3e:ad:2b:1d:d3:c5:
9f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:84:34:24:0F:EB:88:B4:DF:87:92:D7:E0:30:D3:8A:DD:AC:44:90
X509v3 Authority Key Identifier:
keyid:F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:91:35:b7:92:be:34:bf:20:5f:1c:b5:16:08:49:10:1e:68:
47:9b:f2:6b:6b:51:89:26:fb:dd:38:f5:41:43:2b:1d:11:94:
e8:6c:c5:7a:a8:2b:af:4e:15:b3:0e:93:34:4b:79:ab:84:d8:
16:06:f3:cf:69:f5:b3:bb:40:53:dd:fb:00:2d:14:f7:74:1d:
64:cd:f8:b3:b4:dd:7e:a2:a9:4b:ca:e5:72:65:4a:78:3b:c7:
56:b7:7d:a1:0d:db:46:83:d3:a4:4c:e1:90:64:3c:4f:65:a2:
97:d3:c9:13:81:42:ec:4c:52:e8:a9:e3:ff:94:44:09:71:02:
6a:d3:dd:f5:cc:42:36:f9:fc:2f:a2:f5:f2:81:53:e6:8c:ae:
8c:9b:d1:c2:c8:0c:06:fd:c2:c6:79:7a:e7:95:8a:28:72:22:
2c:a9:c8:d3:f2:13:49:8b:3e:aa:46:2e:b6:db:08:11:b8:29:
e5:ce:e1:1f:bb:fc:e5:85:bd:46:8a:7c:94:96:83:5b:db:1e:
26:4f:c0:8b:5b:d1:7e:50:dd:61:08:ca:f9:8a:c9:8d:cf:8c:
26:d6:59:9a:d2:c6:30:62:00:c4:5e:82:cf:94:a4:be:24:eb:
91:58:77:7a:19:83:a8:ba:18:36:fc:bb:2f:1e:64:2a:de:5d:
ee:e3:3e:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxkxeIlI9GCvhDzDpMilgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNDU0YWIzYzNlMDliNjU1Y2I0NzI1NTM5ZmY2ZTY5OTMx
YzQ2YjAwHhcNMjYwMzAxMTkwMDQ4WhcNMjYwMzAyMTkwMDQ4WjAzMTEwLwYDVQQD
Eyg4Yjg0MzQyNDBmZWI4OGI0ZGY4NzkyZDdlMDMwZDM4YWRkYWM0NDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dFURC9bH+/W1ppZgSBg++YHPzIw
mYDVmIrPFfW5Kk2T08cQAZReDchJfhNFxyBTMAAd6snsmvo7D/xuTW7nPFjiciu9
1lnZMz4LOhvBjagDvr2ohzMhTzZGwmMsxpRHzNku2vAd6ic8W83x+l5QRqg2EJrK
nd/nDsb7mGXDeGlFvASIHBWnhNEGIYjzdx7KCkVW60wehiVycvV+c1PjGtHPBEfb
DGaqtH+n+eYI4nKIL1vKzCMMuWXhkQmmMutSXA2h84Iw3KIYyyfm5A3OxzeyjcPV
/TLBnVzAzGOqXY9oNSeZ7NFP6FgkCR9eKEskL/pinXdnE0I+rSsd08WfawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuENCQP64i034eS1+Aw04rdrESQMB8GA1UdIwQY
MBaAFPFFSrPD4JtlXLRyVTn/bmmTHEawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVWS3M4UGdtMlZjdEhKVk9mOXVhWk1jUnJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kMzFlYWItMzFlMS00OTY0LTk2MmUt
ZTE1YmM5NjUwYWFiLzEvOFVWS3M4UGdtMlZjdEhKVk9mOXVhWk1jUnJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kMzFlYWItMzFlMS00OTY0LTk2MmUtZTE1YmM5NjUwYWFi
LzEvOFVWS3M4UGdtMlZjdEhKVk9mOXVhWk1jUnJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5E1t5K+
NL8gXxy1FghJEB5oR5vya2tRiSb73Tj1QUMrHRGU6GzFeqgrr04Vsw6TNEt5q4TY
Fgbzz2n1s7tAU937AC0U93QdZM34s7TdfqKpS8rlcmVKeDvHVrd9oQ3bRoPTpEzh
kGQ8T2Wil9PJE4FC7ExS6Knj/5RECXECatPd9cxCNvn8L6L18oFT5oyujJvRwsgM
Bv3Cxnl655WKKHIiLKnI0/ITSYs+qkYuttsIEbgp5c7hH7v85YW9Rop8lJaDW9se
Jk/Ai1vRflDdYQjK+YrJjc+MJtZZmtLGMGIAxF6Cz5SkviTrkVh3ehmDqLoYNvy7
Lx5kKt5d7uM+Bw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:59 2026 by rpki-client