Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
File: 8TWf8QwVZEIel0VzrOG6YjM7gqc.mft (raw, json)
Hash identifier: /eo0IVjppycmoDPd0Ib0lO3/8tvAPynpyF3KFz1GjUU=
Subject key identifier: A1:54:9F:A2:62:81:9C:E5:52:0B:30:0A:12:45:C0:69:FA:43:53:14
Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
Certificate issuer: /CN=f1359ff10c1564421e974573ace1ba62333b82a7
Certificate serial: 019CACB4E7077495F356873023FE3FCF4DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
Manifest number: 14DC
Signing time: Mon 02 Mar 2026 04:01:02 +0000
Manifest this update: Mon 02 Mar 2026 04:01:02 +0000
Manifest next update: Tue 03 Mar 2026 04:01:02 +0000
Files and hashes: 1: 8TWf8QwVZEIel0VzrOG6YjM7gqc.crl (hash: u5O4tKPU70BXJ87Z5yO3sAvG3ISOSJckUHFYjqHPpCs=)
2: pC6yrC521DUSFdHvnN6nZBgdl4c.roa (hash: z+BhB5WQOVSUH87uyCcKJiZh6jGZu+fv92loh3SKjUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:e7:07:74:95:f3:56:87:30:23:fe:3f:cf:4d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7
Validity
Not Before: Mar 2 04:01:02 2026 GMT
Not After : Mar 3 04:01:02 2026 GMT
Subject: CN=a1549fa262819ce5520b300a1245c069fa435314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d8:a6:3c:17:af:b7:be:62:58:8c:01:70:ae:
20:e7:5c:3d:9f:7b:ea:9e:41:34:e1:af:d6:f4:3a:
47:f1:6a:53:ba:db:b6:f1:f4:e8:95:18:1f:92:e9:
a3:05:a9:87:ec:a5:28:18:aa:0a:f1:11:86:60:ed:
4e:58:ab:dd:bc:a7:0c:35:f1:a2:41:9b:57:5b:64:
0b:d9:aa:60:5e:88:59:65:49:5b:2f:88:c5:ee:04:
14:9c:45:c3:c8:7b:25:00:3d:d4:8d:56:32:70:c5:
b1:a5:07:b6:cf:5d:2d:87:73:95:92:19:ac:7e:a6:
bd:c1:01:32:3f:19:ff:a4:c9:52:46:df:35:0d:84:
1c:06:89:92:87:5a:96:23:3e:ad:5d:67:39:db:35:
44:6b:ab:bb:75:6e:86:9f:04:a8:79:a1:d8:39:4b:
de:86:00:8c:e9:7d:fb:53:5f:31:23:ff:96:a7:99:
f8:6b:3f:c0:ee:65:80:f9:42:f1:b2:cf:f0:ac:e4:
66:a3:d2:f8:30:bf:7e:d0:e3:51:0a:e7:c0:fb:cd:
6d:90:0e:12:42:d6:fb:8f:fb:74:c3:22:bf:40:94:
d7:f2:20:b6:76:96:18:31:05:e6:c0:fd:48:66:d9:
4d:52:08:40:65:21:19:67:09:b4:bf:27:a4:9c:33:
e1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:54:9F:A2:62:81:9C:E5:52:0B:30:0A:12:45:C0:69:FA:43:53:14
X509v3 Authority Key Identifier:
keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4f:6a:6c:6f:0a:82:0f:fd:98:c2:de:d6:95:41:02:54:7e:
8c:41:32:b5:a7:b7:84:cd:e8:25:58:e6:b3:57:2e:9c:b3:5c:
34:9c:2a:1c:82:04:92:21:07:cf:58:27:b6:af:f2:69:f3:f8:
fe:a3:58:f2:cb:eb:cd:8f:c1:99:c3:13:1d:dd:f1:b7:26:81:
2c:2a:eb:78:cb:22:11:fa:06:7d:22:7b:e4:18:ee:b7:bb:3f:
2e:b7:53:56:87:34:de:14:99:70:67:a2:d4:79:16:4d:44:e0:
26:ad:9b:69:dc:5e:01:ff:ae:c6:16:b0:ea:d0:b1:36:6f:87:
6d:6e:e1:2c:2a:f6:84:dd:97:76:11:ac:8d:05:02:d4:e1:d2:
93:20:72:1a:a5:52:df:99:b3:c3:35:31:27:c3:c9:d5:3f:f7:
fa:b9:59:42:95:05:6a:67:34:00:ba:c7:80:30:24:f0:d1:e7:
32:04:cd:7c:5a:3c:23:60:f7:80:89:35:e8:d5:c8:75:c8:e9:
41:43:35:4f:1d:98:b5:cf:d8:b2:26:be:97:3f:27:b6:1c:8d:
00:21:61:30:3f:aa:4f:f5:0b:4b:85:05:36:0a:e9:d0:9b:a5:
51:af:24:7f:2e:ff:04:8f:71:fd:2f:5d:4d:d2:b3:5a:9a:14:
14:a0:9a:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystOcHdJXzVocwI/4/z03gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzU5ZmYxMGMxNTY0NDIxZTk3NDU3M2FjZTFiYTYyMzMz
YjgyYTcwHhcNMjYwMzAyMDQwMTAyWhcNMjYwMzAzMDQwMTAyWjAzMTEwLwYDVQQD
EyhhMTU0OWZhMjYyODE5Y2U1NTIwYjMwMGExMjQ1YzA2OWZhNDM1MzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NimPBevt75iWIwBcK4g51w9n3vq
nkE04a/W9DpH8WpTutu28fTolRgfkumjBamH7KUoGKoK8RGGYO1OWKvdvKcMNfGi
QZtXW2QL2apgXohZZUlbL4jF7gQUnEXDyHslAD3UjVYycMWxpQe2z10th3OVkhms
fqa9wQEyPxn/pMlSRt81DYQcBomSh1qWIz6tXWc52zVEa6u7dW6GnwSoeaHYOUve
hgCM6X37U18xI/+Wp5n4az/A7mWA+ULxss/wrORmo9L4ML9+0ONRCufA+81tkA4S
Qtb7j/t0wyK/QJTX8iC2dpYYMQXmwP1IZtlNUghAZSEZZwm0vyeknDPhwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFUn6JigZzlUgswChJFwGn6Q1MUMB8GA1UdIwQY
MBaAFPE1n/EMFWRCHpdFc6zhumIzO4KnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mOGRmZjktNmRhYy00MzEzLTk5ODAt
YWI0YmEzMzJmZTE1LzEvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9mOGRmZjktNmRhYy00MzEzLTk5ODAtYWI0YmEzMzJmZTE1
LzEvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPU9qbG8K
gg/9mMLe1pVBAlR+jEEytae3hM3oJVjms1cunLNcNJwqHIIEkiEHz1gntq/yafP4
/qNY8svrzY/BmcMTHd3xtyaBLCrreMsiEfoGfSJ75Bjut7s/LrdTVoc03hSZcGei
1HkWTUTgJq2badxeAf+uxhaw6tCxNm+HbW7hLCr2hN2XdhGsjQUC1OHSkyByGqVS
35mzwzUxJ8PJ1T/3+rlZQpUFamc0ALrHgDAk8NHnMgTNfFo8I2D3gIk16NXIdcjp
QUM1Tx2Ytc/Ysia+lz8nthyNACFhMD+qT/ULS4UFNgrp0JulUa8kfy7/BI9x/S9d
TdKzWpoUFKCaZw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:45 2026 by rpki-client