Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
File: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft (raw, json)
Hash identifier: 6jtukdkCdlakXj7pzjLVVSlcTaNV8coebL6so+GUZo0=
Subject key identifier: B3:87:73:2C:47:64:70:43:1C:44:39:49:9F:20:1B:72:FF:E6:09:FF
Authority key identifier: F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
Certificate issuer: /CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Certificate serial: 019CABD95ED22CEEDECFB4FEF02C5477F073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
Manifest number: 0AFF
Signing time: Mon 02 Mar 2026 00:01:15 +0000
Manifest this update: Mon 02 Mar 2026 00:01:15 +0000
Manifest next update: Tue 03 Mar 2026 00:01:15 +0000
Files and hashes: 1: 1e3-ee_DDB8uKbq4DDF2oeY9brA.roa (hash: d1HzxXfkVXwQpykJbxZZ+w5Pxsb18cIOczK6ype9Npo=)
2: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl (hash: Z835DnoAkTa0A+cmTIF0nm/dQ4UNvBU2QoS38xmj2Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:5e:d2:2c:ee:de:cf:b4:fe:f0:2c:54:77:f0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Validity
Not Before: Mar 2 00:01:15 2026 GMT
Not After : Mar 3 00:01:15 2026 GMT
Subject: CN=b387732c476470431c4439499f201b72ffe609ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:08:66:98:3e:94:3e:3a:35:3f:9a:42:ff:46:
39:e4:f8:18:27:3d:48:6c:36:aa:86:fe:62:75:b2:
8c:68:f0:f1:b8:b6:c9:13:32:c7:04:27:95:35:b8:
c2:c4:a5:b6:e1:75:67:c2:c6:1b:7b:ef:3b:b0:a8:
00:2f:3d:59:46:3b:4c:f2:c5:a1:2f:57:cd:16:47:
d9:92:4d:08:5b:b3:05:c9:5f:d5:a9:60:57:d7:9b:
64:63:91:0c:82:f9:f2:33:cc:3e:57:8d:03:07:4b:
99:af:0b:3c:62:0d:8d:bf:7f:61:93:32:f0:38:9c:
b7:27:ad:be:d4:a7:14:79:a6:a5:38:c9:26:5b:85:
15:c2:9d:d0:c0:c1:51:03:b0:75:8b:61:41:9f:72:
a7:99:55:56:1d:2c:49:35:0a:de:6d:fe:b1:3b:cb:
c2:57:6d:7b:2c:86:24:eb:4b:97:13:45:95:2e:bd:
5e:97:d1:22:09:27:35:16:f0:ff:8d:12:7c:29:ac:
4f:8d:53:a5:c3:7b:cf:50:e9:08:92:b3:91:6e:6a:
70:a0:da:a4:50:43:11:da:1c:70:05:d9:be:c8:7a:
80:82:78:fb:4b:b5:f0:43:77:49:60:05:69:04:b2:
8f:fc:e7:e1:41:e6:6e:40:ed:b9:5e:bf:c5:51:74:
a1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:87:73:2C:47:64:70:43:1C:44:39:49:9F:20:1B:72:FF:E6:09:FF
X509v3 Authority Key Identifier:
keyid:F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:54:c9:d1:0a:cf:22:40:73:d4:90:03:6b:f4:16:e7:92:91:
e6:66:d7:9d:44:d6:ea:7e:6c:ae:13:14:9c:ff:e8:c6:f5:ba:
e9:49:78:bf:73:25:3b:5f:22:56:34:47:80:b8:04:76:2d:f2:
3a:6a:26:f4:cf:db:cc:4c:ce:d5:d0:8f:65:f7:7a:2c:2d:78:
66:8f:b9:da:a7:f1:f7:51:94:93:cf:fd:6e:a9:f6:c9:f8:89:
85:25:b7:3d:e8:f1:06:64:89:a1:13:ed:c7:c2:a5:64:5e:32:
b9:75:6e:d1:39:da:b5:a3:fd:d4:8c:8a:6f:30:07:05:fc:09:
9e:59:2e:6a:54:e5:c7:15:62:31:56:fc:7a:6a:92:5f:cd:2c:
26:50:09:09:9d:68:f4:3b:73:f4:8e:72:90:65:5e:95:ac:3b:
2b:1d:b5:f7:d9:00:3c:7c:31:ad:c9:d2:af:3d:58:49:46:5a:
72:5e:24:ed:1f:c2:c9:21:44:f5:d9:44:05:81:32:f5:f5:5c:
10:8b:31:e8:43:b4:91:0a:74:5c:de:93:b2:61:94:ff:65:ca:
7a:f1:ac:fe:31:d2:2c:82:82:8b:95:22:b2:4d:f5:cb:28:a4:
f0:89:46:e3:ac:51:31:89:c8:c4:fb:00:2e:88:ff:ea:ec:30:
62:09:9f:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2V7SLO7ez7T+8CxUd/BzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjVlMDE4MWM0YmJhZTVjMDkwYWIxNTlkMDY1NjJmMTMy
MmUyNzgwHhcNMjYwMzAyMDAwMTE1WhcNMjYwMzAzMDAwMTE1WjAzMTEwLwYDVQQD
EyhiMzg3NzMyYzQ3NjQ3MDQzMWM0NDM5NDk5ZjIwMWI3MmZmZTYwOWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+whmmD6UPjo1P5pC/0Y55PgYJz1I
bDaqhv5idbKMaPDxuLbJEzLHBCeVNbjCxKW24XVnwsYbe+87sKgALz1ZRjtM8sWh
L1fNFkfZkk0IW7MFyV/VqWBX15tkY5EMgvnyM8w+V40DB0uZrws8Yg2Nv39hkzLw
OJy3J62+1KcUeaalOMkmW4UVwp3QwMFRA7B1i2FBn3KnmVVWHSxJNQrebf6xO8vC
V217LIYk60uXE0WVLr1el9EiCSc1FvD/jRJ8KaxPjVOlw3vPUOkIkrORbmpwoNqk
UEMR2hxwBdm+yHqAgnj7S7XwQ3dJYAVpBLKP/OfhQeZuQO25Xr/FUXShGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOHcyxHZHBDHEQ5SZ8gG3L/5gn/MB8GA1UdIwQY
MBaAFPH14BgcS7rlwJCrFZ0GVi8TIuJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yOTQ2ODMtNTc0Ny00ZWExLWI3N2Mt
OWJlYmY3ZGNjMWE2LzEvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yOTQ2ODMtNTc0Ny00ZWExLWI3N2MtOWJlYmY3ZGNjMWE2
LzEvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXlTJ0QrP
IkBz1JADa/QW55KR5mbXnUTW6n5srhMUnP/oxvW66Ul4v3MlO18iVjRHgLgEdi3y
Omom9M/bzEzO1dCPZfd6LC14Zo+52qfx91GUk8/9bqn2yfiJhSW3PejxBmSJoRPt
x8KlZF4yuXVu0TnataP91IyKbzAHBfwJnlkualTlxxViMVb8emqSX80sJlAJCZ1o
9Dtz9I5ykGVelaw7Kx2199kAPHwxrcnSrz1YSUZacl4k7R/CySFE9dlEBYEy9fVc
EIsx6EO0kQp0XN6TsmGU/2XKevGs/jHSLIKCi5Uisk31yyik8IlG46xRMYnIxPsA
Loj/6uwwYgmfVA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:07 2026 by rpki-client