Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
File: M8Ww18CpzSS3PNy5LIdG6FpKW48.mft (raw, json)
Hash identifier: 3lFWwhFYeV5r76NnlTeWJrw32sydBh+ED3t2w+Gv6CE=
Subject key identifier: 76:CF:AC:08:87:AD:7D:97:43:5E:F5:2F:13:C8:EE:29:88:26:4B:64
Authority key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
Certificate issuer: /CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Certificate serial: 019CAD599AFCFA53E0174860994813160A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
Manifest number: 0C6D
Signing time: Mon 02 Mar 2026 07:00:56 +0000
Manifest this update: Mon 02 Mar 2026 07:00:56 +0000
Manifest next update: Tue 03 Mar 2026 07:00:56 +0000
Files and hashes: 1: M8Ww18CpzSS3PNy5LIdG6FpKW48.crl (hash: RmxxH/tUE8qDVgahKDUNdXIGvSLW4xElgxWSYPfgYDU=)
2: ROpvBepIbgL1YB38sWe6DYyZ2hY.roa (hash: e7h0xATOBW6CdBIVhb27eeZ36b1QWdWkJWfktjBe1pA=)
3: gFtvV2Nf6aHPmzajQ5srlB1oKxU.roa (hash: I4oXKyNPDYtBodXHPnB3VP2AM/PrjjCBgXSPVTROeHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:9a:fc:fa:53:e0:17:48:60:99:48:13:16:0a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Validity
Not Before: Mar 2 07:00:56 2026 GMT
Not After : Mar 3 07:00:56 2026 GMT
Subject: CN=76cfac0887ad7d97435ef52f13c8ee2988264b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6e:a1:ed:df:f2:f9:bf:83:74:de:15:bd:aa:
64:41:54:6b:12:d6:5c:19:53:32:8c:f3:74:80:a9:
d1:c6:48:e0:6a:93:77:6d:44:58:80:70:a4:df:b5:
7a:5e:52:61:fe:c0:05:cb:da:e1:89:df:ad:cf:02:
e1:3c:04:8e:ef:31:33:0d:3a:a0:60:d5:a1:fa:9f:
8e:e3:0e:8a:7e:a1:01:f8:76:31:37:bf:70:b3:67:
08:10:c0:87:9e:c8:38:91:17:58:a3:f4:db:d7:df:
80:59:ad:b5:2a:35:d3:f9:1c:48:1f:17:35:cb:52:
46:66:5e:ee:45:1b:36:5c:fe:5d:98:05:ec:7f:36:
cc:3f:b7:7f:77:79:f7:cb:55:42:0b:62:fc:3e:eb:
6a:35:63:f5:ef:38:d3:f8:66:fd:ed:cb:5f:28:d2:
da:3a:1b:b6:22:f7:0a:f5:32:5f:6a:38:e9:dd:02:
7d:6b:a0:31:f5:89:85:bf:fd:8f:c4:0d:45:29:16:
e9:f8:7f:fa:20:a5:16:60:94:34:41:ff:7e:e0:a6:
42:42:6c:0a:0b:a4:e9:78:aa:a5:c6:ca:e4:2f:47:
cd:72:81:fe:42:f7:cf:2c:2a:38:59:1c:b1:50:60:
1a:b7:ec:28:64:69:d3:ef:ed:a2:db:63:ef:d9:45:
9c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CF:AC:08:87:AD:7D:97:43:5E:F5:2F:13:C8:EE:29:88:26:4B:64
X509v3 Authority Key Identifier:
keyid:33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:a0:9c:b5:ac:0a:a8:b4:ef:8f:69:d0:48:6d:96:30:5e:17:
25:b8:18:13:f4:dc:0f:51:40:f8:28:af:c0:68:65:89:d4:8a:
e2:e8:d8:e4:a9:0d:43:47:68:3b:bc:33:c0:e0:52:0a:c7:f4:
84:28:bf:46:e2:fc:67:27:a6:d2:c9:6c:4b:64:93:d4:ca:52:
bd:19:11:42:85:2b:30:ad:43:d6:7d:b3:b2:16:7a:d4:67:66:
4c:2e:7d:8b:60:10:e1:ff:94:07:1f:17:51:4e:ab:cd:97:3f:
3c:ef:be:ce:71:5f:04:a5:3d:e8:69:49:c2:b0:af:83:50:a5:
6e:de:d2:80:37:5f:6a:3c:7e:4c:db:4c:63:93:c7:77:41:e7:
a8:bd:30:27:03:f5:53:d7:b4:ed:5a:a2:24:23:69:6a:74:45:
bb:ec:c4:0e:1d:e5:ec:ba:54:19:e8:be:98:61:87:bc:0d:06:
a5:d4:fd:89:22:22:10:94:fa:72:41:64:3c:24:ad:f6:52:16:
db:8b:d7:93:7e:d3:45:87:5e:fa:2e:1a:36:5f:51:67:75:1f:
dd:02:c7:ed:7e:fb:ab:80:1e:bd:51:f9:ff:74:ef:af:88:f1:
e5:3c:5a:b8:e3:90:d5:8b:c3:2a:f4:73:73:b1:78:d9:0e:51:
c8:1b:24:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWZr8+lPgF0hgmUgTFgoQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYzViMGQ3YzBhOWNkMjRiNzNjZGNiOTJjODc0NmU4NWE0
YTViOGYwHhcNMjYwMzAyMDcwMDU2WhcNMjYwMzAzMDcwMDU2WjAzMTEwLwYDVQQD
Eyg3NmNmYWMwODg3YWQ3ZDk3NDM1ZWY1MmYxM2M4ZWUyOTg4MjY0YjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG6h7d/y+b+DdN4VvapkQVRrEtZc
GVMyjPN0gKnRxkjgapN3bURYgHCk37V6XlJh/sAFy9rhid+tzwLhPASO7zEzDTqg
YNWh+p+O4w6KfqEB+HYxN79ws2cIEMCHnsg4kRdYo/Tb19+AWa21KjXT+RxIHxc1
y1JGZl7uRRs2XP5dmAXsfzbMP7d/d3n3y1VCC2L8PutqNWP17zjT+Gb97ctfKNLa
Ohu2IvcK9TJfajjp3QJ9a6Ax9YmFv/2PxA1FKRbp+H/6IKUWYJQ0Qf9+4KZCQmwK
C6TpeKqlxsrkL0fNcoH+QvfPLCo4WRyxUGAat+woZGnT7+2i22Pv2UWclQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbPrAiHrX2XQ171LxPI7imIJktkMB8GA1UdIwQY
MBaAFDPFsNfAqc0ktzzcuSyHRuhaSluPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNTgxZjQtODQxMC00YTQzLTkxODYt
MGZhYjIyNjllYThlLzEvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8yNTgxZjQtODQxMC00YTQzLTkxODYtMGZhYjIyNjllYThl
LzEvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx6CctawK
qLTvj2nQSG2WMF4XJbgYE/TcD1FA+CivwGhlidSK4ujY5KkNQ0doO7wzwOBSCsf0
hCi/RuL8Zyem0slsS2ST1MpSvRkRQoUrMK1D1n2zshZ61GdmTC59i2AQ4f+UBx8X
UU6rzZc/PO++znFfBKU96GlJwrCvg1Clbt7SgDdfajx+TNtMY5PHd0HnqL0wJwP1
U9e07VqiJCNpanRFu+zEDh3l7LpUGei+mGGHvA0GpdT9iSIiEJT6ckFkPCSt9lIW
24vXk37TRYde+i4aNl9RZ3Uf3QLH7X77q4AevVH5/3Tvr4jx5TxauOOQ1YvDKvRz
c7F42Q5RyBskbg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:52:34 2026 by rpki-client