Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
File: c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft (raw, json)
Hash identifier: e01/YUem5eGILaJAxx8YuA0mGe4bfXC3TwAs59J9EXs=
Subject key identifier: 13:A2:E3:18:92:C2:45:FB:9C:6E:FC:91:44:E4:3F:D2:55:45:7F:05
Authority key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
Certificate issuer: /CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Certificate serial: 019CAC1035C61FD9672C4CA19F60C7723C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
Manifest number: 11AD
Signing time: Mon 02 Mar 2026 01:01:09 +0000
Manifest this update: Mon 02 Mar 2026 01:01:09 +0000
Manifest next update: Tue 03 Mar 2026 01:01:09 +0000
Files and hashes: 1: c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl (hash: MSvlN4wmpGSrpOMTopplxLBbkT6GmXcol7tqpmb4ETY=)
2: n4jCcgfnjIRQBuc83E5OKmqoWsg.roa (hash: VbvW5BuZ6bctb7kCqPvJChCxCthWd5ZrUCoerfivWps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:35:c6:1f:d9:67:2c:4c:a1:9f:60:c7:72:3c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Validity
Not Before: Mar 2 01:01:09 2026 GMT
Not After : Mar 3 01:01:09 2026 GMT
Subject: CN=13a2e31892c245fb9c6efc9144e43fd255457f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:2b:d8:58:6f:1d:e2:c0:59:ec:70:ce:88:
98:43:cf:29:ff:28:7d:0e:43:04:42:cf:00:f8:39:
6a:78:ae:ce:33:f3:a3:a4:36:4c:6b:8c:c8:e4:4e:
e5:cd:c2:6d:06:c1:bb:9d:60:45:f2:d0:71:49:4b:
0b:b9:1c:7b:3f:ac:2f:fb:17:a2:4f:35:73:b3:8a:
96:09:e9:83:2d:06:2f:49:e8:dc:49:4b:76:e1:69:
f1:98:c7:f4:2c:1d:43:d9:7a:a4:42:a3:98:75:7b:
05:de:23:14:1c:82:86:f4:91:c1:65:fd:d0:c6:9a:
cf:85:f7:89:4f:a4:5b:ec:af:83:f6:82:c4:d1:45:
91:9b:71:de:07:a8:ec:86:37:93:8e:b1:21:20:ce:
b9:86:6c:e6:06:f5:5c:f7:2f:74:b6:05:04:75:21:
35:fc:b8:42:64:b2:ec:84:8f:64:f7:da:4a:8b:da:
20:47:cf:9e:61:bc:ef:0a:c7:37:e8:93:f5:1e:59:
ad:30:c8:89:b0:40:4b:0f:8f:90:5d:7d:50:f8:0c:
b2:c2:fc:52:ea:6b:01:b1:14:82:b9:03:ee:eb:13:
2c:51:29:d1:4d:80:c7:2f:a1:46:cb:d4:fa:6f:61:
41:ee:9b:18:6b:79:46:51:ec:c5:21:86:80:e2:a6:
93:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A2:E3:18:92:C2:45:FB:9C:6E:FC:91:44:E4:3F:D2:55:45:7F:05
X509v3 Authority Key Identifier:
keyid:73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:07:75:07:75:2a:77:d2:c3:3a:1f:9c:ff:fd:b3:ad:33:eb:
b5:cb:49:e6:34:8d:cd:50:fa:6e:5f:cb:83:ce:68:a6:7b:e0:
87:35:64:2d:8e:38:6b:86:99:88:bb:16:05:fb:d7:da:3b:ab:
46:ff:96:ad:ab:5d:b3:66:c4:06:59:4a:38:c8:dd:8a:f1:91:
65:9b:44:54:75:47:67:21:14:cd:23:40:15:91:71:83:91:5f:
5e:5f:3d:f6:67:9a:f3:f1:2a:f5:7c:cc:41:c4:19:06:66:31:
7f:81:a8:46:47:1d:6f:c4:c3:a8:5e:f8:06:97:21:6f:6f:1b:
ae:25:40:41:1d:cc:51:d6:04:d5:11:26:e9:33:07:72:7d:44:
e8:40:5d:17:0d:2d:d1:ce:c2:12:27:6f:2f:a7:56:84:23:77:
db:af:e0:80:b2:ac:ba:1c:d9:e1:d1:23:77:34:3b:bb:8b:ba:
10:91:10:6a:dd:2c:09:27:0e:87:ec:b2:cd:d5:86:3f:2c:53:
66:ec:ea:2c:c6:d0:43:95:43:bc:22:47:9e:50:38:e8:01:36:
cf:73:a0:0a:68:87:86:22:ec:f7:af:54:a9:d5:c4:fa:36:af:
7d:f4:5a:85:08:02:28:a5:45:91:b1:cb:d9:ce:91:70:bf:a9:
24:80:3c:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEDXGH9lnLEyhn2DHcjxyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzkwYWQxNTFkNDMyNmE2ZDYyZTEzMDQ2ZDc4OGY4NWJm
ODJlOTQwHhcNMjYwMzAyMDEwMTA5WhcNMjYwMzAzMDEwMTA5WjAzMTEwLwYDVQQD
EygxM2EyZTMxODkyYzI0NWZiOWM2ZWZjOTE0NGU0M2ZkMjU1NDU3ZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXAr2FhvHeLAWexwzoiYQ88p/yh9
DkMEQs8A+DlqeK7OM/OjpDZMa4zI5E7lzcJtBsG7nWBF8tBxSUsLuRx7P6wv+xei
TzVzs4qWCemDLQYvSejcSUt24WnxmMf0LB1D2XqkQqOYdXsF3iMUHIKG9JHBZf3Q
xprPhfeJT6Rb7K+D9oLE0UWRm3HeB6jshjeTjrEhIM65hmzmBvVc9y90tgUEdSE1
/LhCZLLshI9k99pKi9ogR8+eYbzvCsc36JP1HlmtMMiJsEBLD4+QXX1Q+AyywvxS
6msBsRSCuQPu6xMsUSnRTYDHL6FGy9T6b2FB7psYa3lGUezFIYaA4qaTYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOi4xiSwkX7nG78kUTkP9JVRX8FMB8GA1UdIwQY
MBaAFHPJCtFR1DJqbWLhMEbXiPhb+C6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85YmUyYTAtMTA2MC00MWM3LWI4ZTIt
YmE2MjZkMzI1ZDU5LzEvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi85YmUyYTAtMTA2MC00MWM3LWI4ZTItYmE2MjZkMzI1ZDU5
LzEvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAd1B3Uq
d9LDOh+c//2zrTPrtctJ5jSNzVD6bl/Lg85opnvghzVkLY44a4aZiLsWBfvX2jur
Rv+Wratds2bEBllKOMjdivGRZZtEVHVHZyEUzSNAFZFxg5FfXl899mea8/Eq9XzM
QcQZBmYxf4GoRkcdb8TDqF74Bpchb28briVAQR3MUdYE1REm6TMHcn1E6EBdFw0t
0c7CEidvL6dWhCN326/ggLKsuhzZ4dEjdzQ7u4u6EJEQat0sCScOh+yyzdWGPyxT
ZuzqLMbQQ5VDvCJHnlA46AE2z3OgCmiHhiLs969UqdXE+javffRahQgCKKVFkbHL
2c6RcL+pJIA8dQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:13 2026 by rpki-client