Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
File: C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft (raw, json)
Hash identifier: AYfB6WBLEjU+mv3jpwJ3JkbGxHRkaDR7QuHKMi9Pm2I=
Subject key identifier: 6A:14:35:DB:3A:E6:F9:93:AD:7E:2D:73:11:20:88:8F:3B:A5:63:13
Authority key identifier: 0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52
Certificate issuer: /CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052
Certificate serial: 019CADC7A39ACAC8EC3BCDB5829FF4E4380F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
Manifest number: 1524
Signing time: Mon 02 Mar 2026 09:01:07 +0000
Manifest this update: Mon 02 Mar 2026 09:01:07 +0000
Manifest next update: Tue 03 Mar 2026 09:01:07 +0000
Files and hashes: 1: 2M7JFeYv6EU7baJDuclymj7aO3Y.roa (hash: iZc3yZisPC3PtWwp2J1EiFeb+q/jB92CE8gsAYVSbys=)
2: C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl (hash: ZiMo8xwHnP440wvd0a66uW7ILnKMiNKHF/lPq2VHfGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:a3:9a:ca:c8:ec:3b:cd:b5:82:9f:f4:e4:38:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052
Validity
Not Before: Mar 2 09:01:07 2026 GMT
Not After : Mar 3 09:01:07 2026 GMT
Subject: CN=6a1435db3ae6f993ad7e2d731120888f3ba56313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:4d:88:d9:94:f5:78:35:c9:c5:53:0d:31:
f3:6c:5b:1a:d5:79:f2:2e:8f:30:e0:74:ba:75:f7:
c6:53:6a:81:e8:77:98:d9:6d:43:01:d6:38:81:a0:
74:95:c5:c0:44:45:1d:62:56:4b:0b:d8:52:04:ed:
51:f3:20:f2:38:2a:a9:67:27:70:ca:e4:3f:29:20:
f6:5f:78:b2:a9:13:df:35:42:ed:30:7f:7c:8c:cf:
b8:8e:b0:4a:ca:24:2f:7c:1f:1e:e3:96:21:6a:b1:
0f:e3:3b:79:52:70:2b:20:87:49:b3:8f:69:c2:01:
85:b7:98:8c:d5:88:75:98:fa:59:8f:82:ae:e2:a3:
60:99:2f:d2:d8:f0:f3:2b:bb:8b:01:df:2e:3d:74:
6e:22:54:37:c7:9b:85:9a:0c:18:b5:57:12:b6:b4:
56:ed:ce:19:65:7b:38:ee:b5:08:ff:f8:8b:61:b1:
69:ea:ae:24:c3:8c:b7:8c:f8:8c:ef:c7:57:f5:7b:
ab:c6:29:fa:b4:d1:db:0f:aa:b5:8e:0d:70:40:24:
3f:9a:28:10:4f:e9:14:90:f1:a5:39:95:bd:25:06:
d7:d8:30:ba:22:60:74:46:ce:69:04:db:f2:e4:7f:
eb:9a:90:5f:97:ce:6f:71:ee:64:50:f1:da:74:a2:
be:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:14:35:DB:3A:E6:F9:93:AD:7E:2D:73:11:20:88:8F:3B:A5:63:13
X509v3 Authority Key Identifier:
keyid:0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1b:16:20:c5:e1:b9:94:82:a0:00:fc:48:0b:4f:4b:00:ff:
28:5c:f3:9c:44:7a:f1:ff:20:70:2c:4f:2a:df:2e:21:ea:81:
ff:49:40:3e:69:0a:cb:65:96:67:71:08:67:9f:ef:e9:29:42:
5c:2e:94:53:6e:aa:c8:0d:20:8f:f2:2b:42:67:0d:14:48:d1:
c3:8d:7a:3f:aa:0a:36:86:66:08:ae:89:e9:48:07:27:71:e2:
52:04:a9:b9:60:fd:33:cc:b7:eb:ea:94:a2:1a:5a:ee:3a:e7:
c1:7a:f9:38:73:4c:e2:4f:e2:47:b8:86:ed:e6:28:b9:a5:27:
84:26:d5:58:d0:8e:b8:f7:45:04:95:81:a1:ae:b0:71:ae:44:
55:35:b4:b6:4e:d6:ba:ee:0f:2a:10:5c:b9:42:84:15:b3:f5:
dc:f3:03:0a:4c:9b:98:d6:49:71:a2:a4:69:7b:bb:13:56:6e:
5a:03:77:99:b7:ad:fe:f5:49:31:cb:a8:2c:91:a7:56:17:26:
ca:d2:71:64:94:2c:df:40:c6:f0:07:ed:f8:d1:1f:08:d4:fc:
ee:dd:92:59:82:89:c7:87:f6:bf:14:ae:19:02:60:15:f2:60:
b7:9c:f5:3b:63:eb:cc:85:e0:f7:19:fa:45:a8:f9:74:e5:5a:
7f:ab:a6:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx6OaysjsO821gp/05DgPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiY2JmNzQ4ZTlmNDk5ODY4NWQwYzk2NWQyZGZkZjBmMzYy
YTUwNTIwHhcNMjYwMzAyMDkwMTA3WhcNMjYwMzAzMDkwMTA3WjAzMTEwLwYDVQQD
Eyg2YTE0MzVkYjNhZTZmOTkzYWQ3ZTJkNzMxMTIwODg4ZjNiYTU2MzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysFNiNmU9Xg1ycVTDTHzbFsa1Xny
Lo8w4HS6dffGU2qB6HeY2W1DAdY4gaB0lcXAREUdYlZLC9hSBO1R8yDyOCqpZydw
yuQ/KSD2X3iyqRPfNULtMH98jM+4jrBKyiQvfB8e45YharEP4zt5UnArIIdJs49p
wgGFt5iM1Yh1mPpZj4Ku4qNgmS/S2PDzK7uLAd8uPXRuIlQ3x5uFmgwYtVcStrRW
7c4ZZXs47rUI//iLYbFp6q4kw4y3jPiM78dX9Xurxin6tNHbD6q1jg1wQCQ/migQ
T+kUkPGlOZW9JQbX2DC6ImB0Rs5pBNvy5H/rmpBfl85vce5kUPHadKK+gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoUNds65vmTrX4tcxEgiI87pWMTMB8GA1UdIwQY
MBaAFAvL90jp9JmGhdDJZdLf3w82KlBSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzh2M1NPbjBtWWFGME1sbDB0X2ZEellxVUZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9lMjIxOTItYmUwMC00OGMwLWE3MTEt
N2Y5NmM5ZjA1ZjU0LzEvQzh2M1NPbjBtWWFGME1sbDB0X2ZEellxVUZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9lMjIxOTItYmUwMC00OGMwLWE3MTEtN2Y5NmM5ZjA1ZjU0
LzEvQzh2M1NPbjBtWWFGME1sbDB0X2ZEellxVUZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBsWIMXh
uZSCoAD8SAtPSwD/KFzznER68f8gcCxPKt8uIeqB/0lAPmkKy2WWZ3EIZ5/v6SlC
XC6UU26qyA0gj/IrQmcNFEjRw416P6oKNoZmCK6J6UgHJ3HiUgSpuWD9M8y36+qU
ohpa7jrnwXr5OHNM4k/iR7iG7eYouaUnhCbVWNCOuPdFBJWBoa6wca5EVTW0tk7W
uu4PKhBcuUKEFbP13PMDCkybmNZJcaKkaXu7E1ZuWgN3mbet/vVJMcuoLJGnVhcm
ytJxZJQs30DG8Aft+NEfCNT87t2SWYKJx4f2vxSuGQJgFfJgt5z1O2PrzIXg9xn6
Raj5dOVaf6umvw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:19:50 2026 by rpki-client