Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
File: 8qJTzfUHoD4fV50gLY3xHWj1w9c.mft (raw, json)
Hash identifier: GqbVt3iZx9y/UK4/tYjR8DzXsw8+OgAuvYosyzYioVg=
Subject key identifier: B3:D5:D2:77:4C:3B:B1:66:3F:3F:73:AF:47:65:51:5A:3E:8C:7F:15
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 019CAA8F81B2C191040DD7B038DDD5F3AE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
Manifest number: 1437
Signing time: Sun 01 Mar 2026 18:00:57 +0000
Manifest this update: Sun 01 Mar 2026 18:00:57 +0000
Manifest next update: Mon 02 Mar 2026 18:00:57 +0000
Files and hashes: 1: 8qJTzfUHoD4fV50gLY3xHWj1w9c.crl (hash: f8VJIChgeMezlaI07tEUKBsjye2xvFNpoXx0M8f05Mc=)
2: Fj143MGHKktmJd-EbkW5Fscgq7Q.roa (hash: qVq1ZDi68rbqJdslxCJ44DoiVXJKtqjpcHKrD37I/Xk=)
3: HxHmMC4hn6LUcbe8FZyQ9Bp9E7I.roa (hash: Lh+MTs7zk3xzxtVQ8DETff3QLgsLbSUualTWlhIFivY=)
4: ofUu4lRg92WUSco00177ziw81JU.roa (hash: htA+c0kcWkcBhio4o0E3T+qCJhv0CReLZ/At0DindSM=)
5: rSVWZGYoBERbKX00eTTj6GskQQY.roa (hash: kOS02MkC6Ky3Q2cl6xLkqgyvm3m1fLFrEvR8p8JJSnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:81:b2:c1:91:04:0d:d7:b0:38:dd:d5:f3:ae:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: Mar 1 18:00:57 2026 GMT
Not After : Mar 2 18:00:57 2026 GMT
Subject: CN=b3d5d2774c3bb1663f3f73af4765515a3e8c7f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:78:58:be:fd:09:b6:fa:a4:de:af:c0:58:8c:
15:66:d2:65:28:33:8d:3c:4a:6d:82:cf:5a:c3:ff:
13:0b:91:a3:39:82:d4:94:1a:86:59:d7:f1:f4:a5:
3b:46:15:1a:d6:ab:c6:4f:90:e5:f3:ce:87:f7:51:
ea:26:c5:65:73:82:29:06:b9:17:f9:0a:3f:44:09:
74:ac:c0:3d:f9:89:04:bd:01:44:ae:16:67:14:07:
3a:9f:1a:ac:06:c2:e8:8e:39:d7:c9:33:23:2d:8f:
cc:22:7a:26:1f:22:ea:6f:3c:7c:8d:15:e8:4c:f7:
4c:23:59:c7:6b:22:34:c3:5c:9f:f3:9c:16:6d:2b:
63:b3:ee:d5:30:bf:d1:af:80:b0:15:86:1e:1f:fc:
80:34:cb:02:e5:ca:39:69:98:48:d0:ff:17:24:83:
66:17:ed:75:f5:be:8f:b1:9e:bb:8a:90:90:3c:74:
1a:72:62:ed:31:f2:3c:71:9e:02:84:96:2b:d7:bb:
ab:5f:96:8c:43:e3:18:86:af:35:dd:ee:8d:c4:35:
bf:9f:b2:e3:8f:f2:a7:21:32:83:93:86:c7:49:2a:
28:98:26:40:de:b6:ed:b1:a5:65:cc:c9:af:c3:61:
b5:fb:29:54:6b:9c:c7:b6:55:7e:43:7d:f3:b3:4c:
69:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D5:D2:77:4C:3B:B1:66:3F:3F:73:AF:47:65:51:5A:3E:8C:7F:15
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:73:62:e1:e6:e9:41:6b:eb:6a:4c:06:e7:2c:27:23:85:b9:
32:c1:59:73:1a:a8:53:7c:e3:fc:d4:82:df:96:a5:7a:16:76:
e5:03:d9:2e:37:55:a3:a5:27:80:c2:85:fb:e1:f5:79:10:22:
be:ed:90:60:0f:ee:70:26:3d:17:65:92:78:79:7b:f1:95:a1:
83:9c:1d:a1:bc:58:a3:86:33:6f:e7:c9:96:ec:ae:1f:f3:c5:
70:39:b2:7c:94:64:e9:c9:a5:9f:c2:b7:fb:c8:78:2a:79:15:
31:3b:67:4e:52:ba:8f:d6:d0:42:e6:1a:13:b9:1d:7a:4b:79:
59:41:23:01:31:8b:ae:cb:e9:b6:0e:1f:25:16:74:7c:b1:0f:
b4:9b:01:a6:fc:0a:06:73:17:a2:fd:af:7a:3c:75:0e:af:0c:
73:7d:48:5e:67:c0:d0:60:a5:51:ad:e3:ae:b7:19:ff:1a:d5:
18:9b:30:ce:3b:5f:c5:ad:c6:67:2f:a1:65:16:94:5d:53:49:
83:4f:23:d9:30:f2:1d:4b:32:c8:8c:cd:97:2a:9e:d7:6f:96:
7f:d5:18:50:26:82:b9:5c:6a:56:dd:8d:b6:e9:3d:7b:65:cd:
b6:0b:a7:d7:c6:f8:00:0b:ef:a3:b6:a1:ab:c9:19:a9:86:77:
b7:02:f3:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj4GywZEEDdewON3V865iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYTI1M2NkZjUwN2EwM2UxZjU3OWQyMDJkOGRmMTFkNjhm
NWMzZDcwHhcNMjYwMzAxMTgwMDU3WhcNMjYwMzAyMTgwMDU3WjAzMTEwLwYDVQQD
EyhiM2Q1ZDI3NzRjM2JiMTY2M2YzZjczYWY0NzY1NTE1YTNlOGM3ZjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonhYvv0Jtvqk3q/AWIwVZtJlKDON
PEptgs9aw/8TC5GjOYLUlBqGWdfx9KU7RhUa1qvGT5Dl886H91HqJsVlc4IpBrkX
+Qo/RAl0rMA9+YkEvQFErhZnFAc6nxqsBsLojjnXyTMjLY/MInomHyLqbzx8jRXo
TPdMI1nHayI0w1yf85wWbStjs+7VML/Rr4CwFYYeH/yANMsC5co5aZhI0P8XJINm
F+119b6PsZ67ipCQPHQacmLtMfI8cZ4ChJYr17urX5aMQ+MYhq813e6NxDW/n7Lj
j/KnITKDk4bHSSoomCZA3rbtsaVlzMmvw2G1+ylUa5zHtlV+Q33zs0xpLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPV0ndMO7FmPz9zr0dlUVo+jH8VMB8GA1UdIwQY
MBaAFPKiU831B6A+H1edIC2N8R1o9cPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjct
YmU0ZDVkMDlkNzEwLzEvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjctYmU0ZDVkMDlkNzEw
LzEvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnNi4ebp
QWvrakwG5ywnI4W5MsFZcxqoU3zj/NSC35alehZ25QPZLjdVo6UngMKF++H1eRAi
vu2QYA/ucCY9F2WSeHl78ZWhg5wdobxYo4Yzb+fJluyuH/PFcDmyfJRk6cmln8K3
+8h4KnkVMTtnTlK6j9bQQuYaE7kdekt5WUEjATGLrsvptg4fJRZ0fLEPtJsBpvwK
BnMXov2vejx1Dq8Mc31IXmfA0GClUa3jrrcZ/xrVGJswzjtfxa3GZy+hZRaUXVNJ
g08j2TDyHUsyyIzNlyqe12+Wf9UYUCaCuVxqVt2Ntuk9e2XNtgun18b4AAvvo7ah
q8kZqYZ3twLzlw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:28 2026 by rpki-client