Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
File: f8lWpStzUEpPH_NFRxmSl6f13p0.mft (raw, json)
Hash identifier: jnYEKFk86nxgVM8LsfrMsybXZZI91+loZy2DLADDBz4=
Subject key identifier: 0E:CB:3B:52:4D:A2:6B:71:5E:55:CB:41:E4:A1:F1:03:2D:BF:18:93
Authority key identifier: 7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D
Certificate issuer: /CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
Certificate serial: 019CAAFD1A94FDD80D48BD6EC42953365E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
Manifest number: 0BF9
Signing time: Sun 01 Mar 2026 20:00:39 +0000
Manifest this update: Sun 01 Mar 2026 20:00:39 +0000
Manifest next update: Mon 02 Mar 2026 20:00:39 +0000
Files and hashes: 1: UJVP39MP0a98z-vs1ITaLznv-Ng.roa (hash: VF6p8kiAtBBS2svfl/i9xWe417imO3ZaV515/+Pjex8=)
2: f8lWpStzUEpPH_NFRxmSl6f13p0.crl (hash: 1yYBzXAV2mlR2VGRWSIxo04bNAj3MmA+rRYCtwpXf5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:1a:94:fd:d8:0d:48:bd:6e:c4:29:53:36:5e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
Validity
Not Before: Mar 1 20:00:39 2026 GMT
Not After : Mar 2 20:00:39 2026 GMT
Subject: CN=0ecb3b524da26b715e55cb41e4a1f1032dbf1893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:57:93:e9:40:3b:ed:46:f4:b1:87:17:a0:0c:
01:bf:77:89:c4:c5:11:8c:54:c8:81:68:7b:0e:07:
29:18:f1:84:9c:2f:b4:4a:59:7a:e9:77:fa:63:49:
65:f2:2c:9f:ef:f3:d5:a4:19:93:91:c3:01:30:6e:
74:ef:73:6d:19:9d:a7:58:b7:0b:e9:0a:77:ec:6b:
60:22:75:71:18:be:c5:09:0e:95:f2:68:3e:4a:4d:
5a:61:58:6b:95:5d:ff:32:22:20:12:56:b4:95:4b:
cc:e1:fa:8e:95:a2:de:1a:3a:40:b9:f0:08:42:95:
09:12:3c:ab:15:09:cb:a9:f3:03:6c:a7:51:cc:03:
a9:9a:4d:5f:9c:99:7d:47:0f:48:2c:be:11:8f:4c:
9f:6e:47:32:07:40:84:60:30:13:4c:d2:77:9e:6d:
fe:03:ad:44:bc:58:2a:6c:ed:01:b3:b5:c7:bf:b7:
75:ca:0d:6d:24:97:84:fc:43:8c:8e:dd:72:3a:d5:
45:f4:7f:26:f9:d7:ef:b1:41:87:ed:3d:12:42:86:
ff:df:74:b4:76:19:02:22:01:ed:7d:0b:02:77:90:
8a:ba:44:d8:47:f8:9f:85:fd:47:7f:b1:24:2c:f1:
e3:b8:d7:27:73:53:28:73:40:5a:5b:ee:65:d6:f6:
08:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CB:3B:52:4D:A2:6B:71:5E:55:CB:41:E4:A1:F1:03:2D:BF:18:93
X509v3 Authority Key Identifier:
keyid:7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ac:a1:a1:28:e5:b3:20:ae:d5:09:f2:00:19:9e:18:71:74:
a6:1a:bf:3d:57:7d:4e:bf:5f:da:53:e7:a9:15:48:fe:b9:ef:
b1:14:00:9b:87:23:71:71:84:7e:20:ff:a3:1e:8d:e2:b5:da:
c2:4c:4d:51:73:2b:6d:5c:25:d2:ec:59:93:20:7c:71:59:e9:
f2:b1:b7:04:a5:85:1a:8e:f0:66:ab:19:02:9c:20:c3:44:d2:
9c:74:69:f8:21:08:6a:ee:3f:45:64:e0:6e:a5:b5:c3:2b:5c:
fd:82:b0:e5:23:b3:fe:56:db:69:80:24:4b:be:b2:d5:86:39:
d2:bd:be:24:ad:36:15:68:b2:02:12:43:5e:aa:08:fc:7a:7c:
cd:e6:a2:8b:90:fb:e7:4e:c4:34:73:5b:bd:eb:61:eb:4a:c1:
2c:ca:cd:ae:c6:4f:60:f0:13:12:d7:dc:5c:fd:98:dd:56:85:
14:11:3a:41:96:e2:f6:47:71:be:c7:29:45:ff:74:68:31:05:
12:b2:22:53:45:17:a7:1d:13:f3:8a:e6:10:b0:02:64:a5:9c:
1b:68:28:09:54:96:0a:4e:ef:b3:b8:0d:b3:41:9f:83:55:d4:
c2:ae:a4:ae:f9:76:7a:0b:af:b5:ad:29:11:cf:0f:96:4f:b4:
4f:a5:b0:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/RqU/dgNSL1uxClTNl5qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmYzk1NmE1MmI3MzUwNGE0ZjFmZjM0NTQ3MTk5Mjk3YTdm
NWRlOWQwHhcNMjYwMzAxMjAwMDM5WhcNMjYwMzAyMjAwMDM5WjAzMTEwLwYDVQQD
EygwZWNiM2I1MjRkYTI2YjcxNWU1NWNiNDFlNGExZjEwMzJkYmYxODkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0leT6UA77Ub0sYcXoAwBv3eJxMUR
jFTIgWh7DgcpGPGEnC+0Sll66Xf6Y0ll8iyf7/PVpBmTkcMBMG5073NtGZ2nWLcL
6Qp37GtgInVxGL7FCQ6V8mg+Sk1aYVhrlV3/MiIgEla0lUvM4fqOlaLeGjpAufAI
QpUJEjyrFQnLqfMDbKdRzAOpmk1fnJl9Rw9ILL4Rj0yfbkcyB0CEYDATTNJ3nm3+
A61EvFgqbO0Bs7XHv7d1yg1tJJeE/EOMjt1yOtVF9H8m+dfvsUGH7T0SQob/33S0
dhkCIgHtfQsCd5CKukTYR/ifhf1Hf7EkLPHjuNcnc1Moc0BaW+5l1vYIDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7LO1JNomtxXlXLQeSh8QMtvxiTMB8GA1UdIwQY
MBaAFH/JVqUrc1BKTx/zRUcZkpen9d6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83MWFiNjktNjk2NS00YjcwLTk2OGQt
YmI1N2E0ZWY3MTUzLzEvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS83MWFiNjktNjk2NS00YjcwLTk2OGQtYmI1N2E0ZWY3MTUz
LzEvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlayhoSjl
syCu1QnyABmeGHF0phq/PVd9Tr9f2lPnqRVI/rnvsRQAm4cjcXGEfiD/ox6N4rXa
wkxNUXMrbVwl0uxZkyB8cVnp8rG3BKWFGo7wZqsZApwgw0TSnHRp+CEIau4/RWTg
bqW1wytc/YKw5SOz/lbbaYAkS76y1YY50r2+JK02FWiyAhJDXqoI/Hp8zeaii5D7
507ENHNbveth60rBLMrNrsZPYPATEtfcXP2Y3VaFFBE6QZbi9kdxvscpRf90aDEF
ErIiU0UXpx0T84rmELACZKWcG2goCVSWCk7vs7gNs0Gfg1XUwq6krvl2eguvta0p
Ec8Plk+0T6WwAg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:10 2026 by rpki-client