Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
File: 8FAUfun2L5cEI8vYttUupfSg7aU.mft (raw, json)
Hash identifier: TfUePaYFw3zzPGEcdQfsD35EqxHPTe3/DfmYJ1FH8kw=
Subject key identifier: 9D:E8:49:1C:8E:48:0F:AE:1F:0B:E0:EF:58:CA:85:02:70:66:55:EE
Authority key identifier: F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5
Certificate issuer: /CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5
Certificate serial: 019CAE35E65714C96A3377E5A54E3C7E9879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
Manifest number: 0395
Signing time: Mon 02 Mar 2026 11:01:33 +0000
Manifest this update: Mon 02 Mar 2026 11:01:33 +0000
Manifest next update: Tue 03 Mar 2026 11:01:33 +0000
Files and hashes: 1: 8FAUfun2L5cEI8vYttUupfSg7aU.crl (hash: vjkj6I8xAtbA0s3YG7rKpr+tw5pOiU0p4WID54RarGQ=)
2: BrDWyRlSZn2CXtf4IPz2NecaGek.roa (hash: stEsjXO2Qw6gddDjn4syr8tHdGrYULyxkALHqMMCkng=)
3: UTz-CAu9udrXHC-2_mble0zxioE.roa (hash: khov/J99ODqiFOcvNEfOtWttZ4QbtF1bybuUhyPlZGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:e6:57:14:c9:6a:33:77:e5:a5:4e:3c:7e:98:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5
Validity
Not Before: Mar 2 11:01:33 2026 GMT
Not After : Mar 3 11:01:33 2026 GMT
Subject: CN=9de8491c8e480fae1f0be0ef58ca8502706655ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:df:f9:57:e4:7e:86:92:6c:fa:c8:85:6b:
02:97:0b:c7:bb:03:ef:7c:1d:bf:bd:9e:4e:e9:18:
80:f4:d3:bc:ae:d2:2c:f8:45:07:2f:6f:d2:f6:04:
2f:01:2b:53:52:1f:b3:d6:63:b9:8a:a0:a1:84:ee:
cc:05:e0:a4:54:dc:67:c2:f5:de:ab:20:11:a0:08:
a0:e1:07:63:35:95:0d:3f:26:f4:3c:00:bd:92:cb:
25:b1:d7:24:fd:ae:a9:4c:05:22:76:05:91:e7:25:
d8:35:5b:88:db:96:f0:2d:30:a5:a9:6a:ae:01:83:
48:bf:75:fb:76:3b:6a:01:08:03:4a:53:80:c7:eb:
59:00:b5:e6:6c:c2:3e:be:19:87:10:3f:49:50:39:
e2:66:b2:8d:78:e4:a3:10:49:74:a6:be:f0:36:fd:
78:6c:83:f2:1b:cd:77:a2:b3:d7:26:d6:b3:2d:0d:
6d:3d:32:b8:ef:15:29:af:09:e5:ad:14:12:c0:00:
12:fb:8f:29:54:1f:55:b9:52:6d:78:1b:8d:c9:dc:
b2:b0:23:33:2f:5f:d1:d6:84:44:17:5b:d9:dd:03:
9c:c5:dd:ab:df:38:77:82:7a:05:d2:9e:4e:e1:ba:
30:f3:ad:a3:1c:92:28:6a:fa:57:3e:9c:55:b3:26:
e6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E8:49:1C:8E:48:0F:AE:1F:0B:E0:EF:58:CA:85:02:70:66:55:EE
X509v3 Authority Key Identifier:
keyid:F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d8:04:3a:3b:59:66:c1:d1:5b:a5:99:2f:bf:8f:14:66:d5:
88:fd:7b:bb:67:c0:26:2e:d3:0f:ea:e6:bd:c7:01:50:d8:93:
ee:d0:61:32:2a:dd:04:c8:6f:a2:1d:03:65:a1:f1:8a:7e:04:
0a:ba:61:8a:16:02:c9:d6:07:61:8a:31:dc:2c:2c:69:68:c8:
1b:82:a5:4b:da:d2:4f:58:5f:57:61:83:34:ef:ad:8a:b9:94:
a8:9d:ec:b7:a5:a6:92:76:b1:b8:52:43:d9:d0:0c:b5:1e:6b:
73:63:89:b4:cb:2c:46:22:2f:ea:b3:c5:73:75:cb:ad:2c:4d:
ff:cc:df:de:40:0c:be:e6:08:4c:c5:60:80:31:ed:92:3d:7b:
35:dd:a7:a2:0a:fc:a0:20:17:b5:7a:96:96:25:a8:5d:c8:a9:
8c:b4:02:13:5b:90:a6:3c:05:29:ef:0d:be:d8:74:1b:e8:48:
7a:15:81:93:87:cc:2b:0c:a7:68:af:cb:36:7e:9c:7c:e3:38:
55:3b:94:b4:42:ff:22:6d:7e:61:85:f7:c7:db:c8:96:b8:9e:
87:fa:23:bf:ca:92:db:99:11:56:40:ae:2e:e5:5d:b7:ce:bf:
0c:ed:46:c7:7d:50:d5:a8:9e:ba:c8:5d:6f:c6:6c:f8:42:38:
b3:70:a1:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNeZXFMlqM3flpU48fph5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNTAxNDdlZTlmNjJmOTcwNDIzY2JkOGI2ZDUyZWE1ZjRh
MGVkYTUwHhcNMjYwMzAyMTEwMTMzWhcNMjYwMzAzMTEwMTMzWjAzMTEwLwYDVQQD
Eyg5ZGU4NDkxYzhlNDgwZmFlMWYwYmUwZWY1OGNhODUwMjcwNjY1NWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6jf+VfkfoaSbPrIhWsClwvHuwPv
fB2/vZ5O6RiA9NO8rtIs+EUHL2/S9gQvAStTUh+z1mO5iqChhO7MBeCkVNxnwvXe
qyARoAig4QdjNZUNPyb0PAC9ksslsdck/a6pTAUidgWR5yXYNVuI25bwLTClqWqu
AYNIv3X7djtqAQgDSlOAx+tZALXmbMI+vhmHED9JUDniZrKNeOSjEEl0pr7wNv14
bIPyG813orPXJtazLQ1tPTK47xUprwnlrRQSwAAS+48pVB9VuVJteBuNydyysCMz
L1/R1oREF1vZ3QOcxd2r3zh3gnoF0p5O4bow862jHJIoavpXPpxVsybmyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3oSRyOSA+uHwvg71jKhQJwZlXuMB8GA1UdIwQY
MBaAFPBQFH7p9i+XBCPL2LbVLqX0oO2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEZBVWZ1bjJMNWNFSTh2WXR0VXVwZlNnN2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wNzIxMDUtNDllZi00OTAzLTk2OTUt
ZWViODY1ZDEwZGJhLzEvOEZBVWZ1bjJMNWNFSTh2WXR0VXVwZlNnN2FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8wNzIxMDUtNDllZi00OTAzLTk2OTUtZWViODY1ZDEwZGJh
LzEvOEZBVWZ1bjJMNWNFSTh2WXR0VXVwZlNnN2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9gEOjtZ
ZsHRW6WZL7+PFGbViP17u2fAJi7TD+rmvccBUNiT7tBhMirdBMhvoh0DZaHxin4E
CrphihYCydYHYYox3CwsaWjIG4KlS9rST1hfV2GDNO+tirmUqJ3st6WmknaxuFJD
2dAMtR5rc2OJtMssRiIv6rPFc3XLrSxN/8zf3kAMvuYITMVggDHtkj17Nd2nogr8
oCAXtXqWliWoXcipjLQCE1uQpjwFKe8Nvth0G+hIehWBk4fMKwynaK/LNn6cfOM4
VTuUtEL/Im1+YYX3x9vIlrieh/ojv8qS25kRVkCuLuVdt86/DO1Gx31Q1aieushd
b8Zs+EI4s3ChVg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:50 2026 by rpki-client