Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
File: V8H-gINkZ0mBatP6ZAmDRfth6fU.mft (raw, json)
Hash identifier: mJDNtRV6uGn+84l7Odxj+kA/dLiRLmQAAaiaiJBnX3s=
Subject key identifier: 8F:23:3A:70:EB:26:86:42:BF:23:20:41:64:6B:34:AB:AB:4E:F4:2F
Authority key identifier: 57:C1:FE:80:83:64:67:49:81:6A:D3:FA:64:09:83:45:FB:61:E9:F5
Certificate issuer: /CN=57c1fe8083646749816ad3fa64098345fb61e9f5
Certificate serial: 019CAA58639ECE07502534E7368437EB227C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
Manifest number: 184C
Signing time: Sun 01 Mar 2026 17:00:45 +0000
Manifest this update: Sun 01 Mar 2026 17:00:45 +0000
Manifest next update: Mon 02 Mar 2026 17:00:45 +0000
Files and hashes: 1: JHY0GDYKIt-9Vn4AUyhaDkdiW2w.roa (hash: it7x+UgEzab8l9txt69a/1I+wVvRxBXOQLBewnm6JCA=)
2: Q7BJcsQY7_3P4zXrcrrE9sBxSmk.roa (hash: toO4RVQNKW7VmbI8kxFH7ZrhAHouGuOO2lQDDPuxpqY=)
3: V8H-gINkZ0mBatP6ZAmDRfth6fU.crl (hash: kp0AdPiXmwWp4KU/oYUXp3iaZwEQCf2Rh3IseqTgIDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:63:9e:ce:07:50:25:34:e7:36:84:37:eb:22:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c1fe8083646749816ad3fa64098345fb61e9f5
Validity
Not Before: Mar 1 17:00:45 2026 GMT
Not After : Mar 2 17:00:45 2026 GMT
Subject: CN=8f233a70eb268642bf232041646b34abab4ef42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bc:55:af:3f:91:15:64:3f:3c:af:8f:3c:db:
7d:7b:f8:6e:71:88:22:13:c3:5c:cf:69:8f:ff:2e:
17:75:cb:33:4f:d1:18:c3:42:9a:fc:52:c5:aa:0a:
88:e1:0c:1b:19:3e:e2:ff:79:7a:d1:56:db:fb:a8:
58:1a:f6:7c:73:b4:56:02:49:62:e9:ad:5c:dc:46:
eb:ce:74:6e:24:aa:0e:14:8a:50:dc:2b:c5:4f:1a:
ca:00:6a:0c:6e:69:bd:1c:a4:b8:0a:8f:1c:81:88:
8c:00:1e:92:b9:36:da:fe:9d:49:13:34:90:12:37:
46:9e:c0:06:a6:f6:15:b1:1d:24:5c:05:fa:78:36:
73:39:77:89:c8:b1:97:41:15:a1:f8:97:06:56:96:
51:f5:d2:b8:ea:86:a1:20:b4:47:f2:c6:77:61:d4:
d6:4b:19:f1:ce:73:df:6f:ab:de:08:47:20:b0:d4:
4e:d8:c3:ec:08:bc:77:c2:5b:2b:8b:e3:99:b1:76:
a7:91:dc:a3:40:fe:27:de:83:00:92:2e:b9:d4:d5:
12:30:07:4f:18:87:fd:fc:3a:38:05:fb:8d:2d:76:
f4:3c:8e:aa:0d:04:86:3f:94:7b:b7:00:d2:4a:4f:
5c:12:d5:15:6c:07:d5:58:a6:05:d9:4f:06:67:d6:
d2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:23:3A:70:EB:26:86:42:BF:23:20:41:64:6B:34:AB:AB:4E:F4:2F
X509v3 Authority Key Identifier:
keyid:57:C1:FE:80:83:64:67:49:81:6A:D3:FA:64:09:83:45:FB:61:E9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a0:57:21:f3:8a:ce:74:b5:df:6a:fe:82:3e:fb:fc:cd:af:
78:e2:93:e3:9b:fa:59:ed:6e:ae:43:5f:3c:4c:cb:88:01:b1:
55:fd:af:ed:1c:a0:b7:13:45:dd:9e:8b:8d:54:3f:10:02:d7:
39:2b:cf:fd:12:a2:8e:dc:73:2a:2f:7d:b3:25:0b:81:0f:4c:
55:1a:3c:0e:eb:e7:3b:b9:d3:37:da:99:b0:5b:fa:96:d6:d8:
2f:94:2a:17:5e:28:b4:cc:13:dc:62:70:90:c2:d1:30:22:62:
40:8d:09:ee:50:84:5a:75:17:e9:2c:d3:9a:34:1f:d6:3c:48:
0e:78:f7:85:fb:c3:a8:07:a1:a4:4f:30:cc:73:12:8f:bf:01:
cf:f5:f9:ca:a6:2c:97:77:56:7c:ef:e9:70:70:5a:e3:56:05:
23:8b:37:9a:dd:b0:54:ef:49:f1:b7:f7:6c:c1:34:5b:32:37:
2d:09:0b:f7:49:cb:c5:78:05:78:39:bb:60:08:fa:54:72:82:
6b:6a:e6:41:3f:e3:00:66:7c:f2:6d:d5:2c:dc:8c:9a:da:9a:
a3:20:73:a2:62:9b:27:6d:54:51:f7:dc:47:9d:50:05:6d:bc:
d0:47:6b:b2:bc:bb:21:12:b2:32:06:ea:f6:44:39:92:e9:d2:
f0:89:6c:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWGOezgdQJTTnNoQ36yJ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzFmZTgwODM2NDY3NDk4MTZhZDNmYTY0MDk4MzQ1ZmI2
MWU5ZjUwHhcNMjYwMzAxMTcwMDQ1WhcNMjYwMzAyMTcwMDQ1WjAzMTEwLwYDVQQD
Eyg4ZjIzM2E3MGViMjY4NjQyYmYyMzIwNDE2NDZiMzRhYmFiNGVmNDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7xVrz+RFWQ/PK+PPNt9e/hucYgi
E8Ncz2mP/y4XdcszT9EYw0Ka/FLFqgqI4QwbGT7i/3l60Vbb+6hYGvZ8c7RWAkli
6a1c3EbrznRuJKoOFIpQ3CvFTxrKAGoMbmm9HKS4Co8cgYiMAB6SuTba/p1JEzSQ
EjdGnsAGpvYVsR0kXAX6eDZzOXeJyLGXQRWh+JcGVpZR9dK46oahILRH8sZ3YdTW
SxnxznPfb6veCEcgsNRO2MPsCLx3wlsri+OZsXankdyjQP4n3oMAki651NUSMAdP
GIf9/Do4BfuNLXb0PI6qDQSGP5R7twDSSk9cEtUVbAfVWKYF2U8GZ9bSXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8jOnDrJoZCvyMgQWRrNKurTvQvMB8GA1UdIwQY
MBaAFFfB/oCDZGdJgWrT+mQJg0X7Yen1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhILWdJTmtaMG1CYXRQNlpBbURSZnRoNmZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xYjQ3MDgtZWVmOS00OWRlLWI4ODct
ZjMyMDY5ZWM0ZWU1LzEvVjhILWdJTmtaMG1CYXRQNlpBbURSZnRoNmZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8xYjQ3MDgtZWVmOS00OWRlLWI4ODctZjMyMDY5ZWM0ZWU1
LzEvVjhILWdJTmtaMG1CYXRQNlpBbURSZnRoNmZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6BXIfOK
znS132r+gj77/M2veOKT45v6We1urkNfPEzLiAGxVf2v7RygtxNF3Z6LjVQ/EALX
OSvP/RKijtxzKi99syULgQ9MVRo8DuvnO7nTN9qZsFv6ltbYL5QqF14otMwT3GJw
kMLRMCJiQI0J7lCEWnUX6SzTmjQf1jxIDnj3hfvDqAehpE8wzHMSj78Bz/X5yqYs
l3dWfO/pcHBa41YFI4s3mt2wVO9J8bf3bME0WzI3LQkL90nLxXgFeDm7YAj6VHKC
a2rmQT/jAGZ88m3VLNyMmtqaoyBzomKbJ21UUffcR51QBW280Edrsry7IRKyMgbq
9kQ5kunS8IlsUw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:55 2026 by rpki-client