Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
File: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json)
Hash identifier: 0H3EWqA/8R7yhe+846EGKJ0o2CZcdfbbnVb5DhV/k5A=
Subject key identifier: FD:5C:88:32:AC:84:8F:7E:3E:75:E3:09:B5:AE:6F:C7:1F:2D:9B:BE
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Certificate issuer: /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial: 019CAC46890A82BB3E8C89124ADBF97CB498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
Manifest number: 0F3E
Signing time: Mon 02 Mar 2026 02:00:29 +0000
Manifest this update: Mon 02 Mar 2026 02:00:29 +0000
Manifest next update: Tue 03 Mar 2026 02:00:29 +0000
Files and hashes: 1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: 1QWdKek0xBgpbTdWMzvonJwSy32yoWCzzTOpOe1csMM=)
2: cnrJlx8I7NXdM3vCOpIC2LhJ_Y8.roa (hash: PEnciQKvDww0pGR7AqTRA4YTGpE9TeNFX/n52nV6jQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:89:0a:82:bb:3e:8c:89:12:4a:db:f9:7c:b4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Validity
Not Before: Mar 2 02:00:29 2026 GMT
Not After : Mar 3 02:00:29 2026 GMT
Subject: CN=fd5c8832ac848f7e3e75e309b5ae6fc71f2d9bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:63:a0:bb:0f:2e:a0:3c:14:73:18:96:e8:
d3:8a:0c:f4:7f:69:ba:ee:89:ba:58:fc:e7:74:f6:
38:3f:fa:e2:de:83:e7:93:25:0d:4a:a2:03:9c:1e:
a6:60:59:d7:f2:59:0c:fb:4b:cc:98:28:0f:f8:46:
03:fc:89:a0:a2:64:ac:09:01:6f:3b:5b:48:1e:eb:
08:e5:f9:ff:f8:91:19:7c:41:0b:a6:32:c2:a3:78:
e9:16:2a:de:87:c9:a5:0b:61:7c:b6:a6:79:72:a9:
36:61:29:d2:52:6c:83:00:71:c3:a4:13:6f:44:d6:
31:49:2b:62:e4:e4:40:e1:e4:0f:d3:59:86:fd:72:
4b:89:2d:5d:bd:18:37:d2:2a:f0:74:29:83:1e:00:
f7:30:0f:db:e6:91:f0:e9:60:a9:06:a7:b9:d4:24:
0c:d5:f9:9b:63:85:d3:89:dd:36:6a:c4:45:5b:08:
0d:a4:8e:ba:7d:00:7c:f5:77:9f:de:03:35:fe:01:
3b:3b:d9:7e:a8:38:83:35:0c:e0:7c:86:ca:54:b1:
44:35:e7:9a:e2:71:79:cf:9d:07:ba:7a:8d:58:fc:
b0:3e:d5:e3:fe:ca:48:9e:4d:9a:8c:91:37:7f:df:
97:4a:94:31:96:0d:d5:7e:06:5d:74:ef:d2:f3:d4:
7d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5C:88:32:AC:84:8F:7E:3E:75:E3:09:B5:AE:6F:C7:1F:2D:9B:BE
X509v3 Authority Key Identifier:
keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:1a:4e:1f:7c:8c:bc:c6:8a:a7:b3:a4:47:76:11:9b:bd:21:
c6:ad:8a:a6:22:18:41:d6:0a:8a:92:cd:f6:d7:cb:39:5a:96:
da:86:26:2d:0f:88:c3:b0:db:c7:ee:54:3a:2f:0d:f2:37:e8:
8d:75:22:8e:82:b5:fd:84:79:3e:a7:28:58:d3:7c:fa:19:46:
50:47:fc:e2:c8:fd:c1:21:4d:11:f1:e0:60:7f:97:bd:02:95:
c7:5a:82:b7:ea:a3:68:e4:cd:e4:2c:d5:e4:6d:d4:82:12:85:
8d:a9:cd:86:fe:c3:e4:e5:38:66:cf:70:71:e6:6a:63:af:fa:
85:30:f1:c4:9f:da:59:74:5d:82:42:28:59:29:69:b5:b8:2a:
6c:87:1a:1b:35:d5:e2:c6:74:57:8e:67:b4:a4:6b:51:33:c1:
81:b3:17:51:3c:0d:38:93:71:92:ee:2a:a7:6b:8d:13:3a:ac:
71:4a:74:0d:2d:e5:61:6c:09:c5:93:fa:ab:04:6b:83:45:08:
48:57:7e:5c:5f:31:3e:f0:5c:86:a1:b0:2c:b8:63:8c:08:23:
bb:6c:3a:11:11:63:1d:40:e8:86:ac:68:45:da:a2:0f:6f:8f:
d4:95:40:f0:96:31:f7:49:f1:b3:ca:bd:5c:a2:db:c8:53:86:
cb:cc:09:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRokKgrs+jIkSStv5fLSYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNDVkNDRhMWVlMDU4NTNjZDU4OTI2NTQzMzRiMWYyMWNl
ODI2ZDQwHhcNMjYwMzAyMDIwMDI5WhcNMjYwMzAzMDIwMDI5WjAzMTEwLwYDVQQD
EyhmZDVjODgzMmFjODQ4ZjdlM2U3NWUzMDliNWFlNmZjNzFmMmQ5YmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/VjoLsPLqA8FHMYlujTigz0f2m6
7om6WPzndPY4P/ri3oPnkyUNSqIDnB6mYFnX8lkM+0vMmCgP+EYD/ImgomSsCQFv
O1tIHusI5fn/+JEZfEELpjLCo3jpFireh8mlC2F8tqZ5cqk2YSnSUmyDAHHDpBNv
RNYxSSti5ORA4eQP01mG/XJLiS1dvRg30irwdCmDHgD3MA/b5pHw6WCpBqe51CQM
1fmbY4XTid02asRFWwgNpI66fQB89Xef3gM1/gE7O9l+qDiDNQzgfIbKVLFENeea
4nF5z50HunqNWPywPtXj/spInk2ajJE3f9+XSpQxlg3VfgZddO/S89R9SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1ciDKshI9+PnXjCbWub8cfLZu+MB8GA1UdIwQY
MBaAFPFF1Eoe4FhTzViSZUM0sfIc6CbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80ZjgxMzUtYWEyNC00NGE0LWE1NDYt
M2RiY2RmNzc5ZjI0LzEvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80ZjgxMzUtYWEyNC00NGE0LWE1NDYtM2RiY2RmNzc5ZjI0
LzEvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRpOH3yM
vMaKp7OkR3YRm70hxq2KpiIYQdYKipLN9tfLOVqW2oYmLQ+Iw7Dbx+5UOi8N8jfo
jXUijoK1/YR5PqcoWNN8+hlGUEf84sj9wSFNEfHgYH+XvQKVx1qCt+qjaOTN5CzV
5G3UghKFjanNhv7D5OU4Zs9wceZqY6/6hTDxxJ/aWXRdgkIoWSlptbgqbIcaGzXV
4sZ0V45ntKRrUTPBgbMXUTwNOJNxku4qp2uNEzqscUp0DS3lYWwJxZP6qwRrg0UI
SFd+XF8xPvBchqGwLLhjjAgju2w6ERFjHUDohqxoRdqiD2+P1JVA8JYx90nxs8q9
XKLbyFOGy8wJ/w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:16:59 2026 by rpki-client