Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
File: 8v_48bgcLGFPw-lOsXy6CUAhGgE.mft (raw, json)
Hash identifier: a+NJcE1fNlwxWFcqAJsupINLIe+X8JemY5xsDnGqzCM=
Subject key identifier: 3E:BF:68:4D:AF:F7:B0:62:4E:03:AF:C2:AB:F2:39:E6:D2:51:A4:40
Authority key identifier: F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
Certificate issuer: /CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Certificate serial: 019CAED9EB553EE4C9D04104646BC08CE1C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 14:00:42 +0000
Manifest this update: Mon 02 Mar 2026 14:00:42 +0000
Manifest next update: Tue 03 Mar 2026 14:00:42 +0000
Files and hashes: 1: 8v_48bgcLGFPw-lOsXy6CUAhGgE.crl (hash: iSUsF9TAH7yWDU3BYwtzWTWyxsYY0D3nWb5AIrDOgj8=)
2: jRpXU9eqysmsAJR80B3Aax6y_BQ.roa (hash: XRM8W3BWblehC6PY0lBpqApKx5419cv1D4/Jksn00jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:eb:55:3e:e4:c9:d0:41:04:64:6b:c0:8c:e1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Validity
Not Before: Mar 2 14:00:42 2026 GMT
Not After : Mar 3 14:00:42 2026 GMT
Subject: CN=3ebf684daff7b0624e03afc2abf239e6d251a440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1e:84:5a:67:79:f3:27:09:cf:b0:dc:cf:3d:
26:b7:49:f6:dd:fa:7e:dd:cb:ec:78:17:fd:e9:2e:
fe:be:b4:91:77:fb:13:75:1b:ee:cf:69:d3:5b:fa:
1c:da:01:49:34:f7:1a:27:27:94:fd:0b:09:ed:7a:
8c:21:f9:76:1d:e6:7e:e0:95:d9:b4:d3:e4:7e:b9:
70:b7:01:24:0e:dc:b4:2c:0e:46:ce:cf:20:1c:31:
2b:a0:78:74:97:30:b4:87:7c:10:e3:64:80:1d:53:
bf:1f:34:16:1d:9b:81:94:34:e0:43:d9:b4:52:7e:
d8:57:ea:4d:8b:d6:20:99:36:66:68:df:c5:68:ba:
98:9f:a2:a5:59:65:a9:bf:71:8a:1f:a2:d9:bc:c3:
32:d3:ae:f1:5f:84:5d:d7:a0:d5:ca:eb:bf:39:22:
15:99:e6:d4:29:c7:e9:01:b0:e2:03:cc:e5:03:da:
d5:b5:e0:de:d8:a0:be:c1:0a:02:09:79:d1:e1:10:
c5:93:4c:12:ce:30:05:cb:c0:f4:5a:b1:09:82:63:
0f:1a:ab:56:af:1c:24:5f:7b:dd:14:04:a4:d3:59:
e7:c5:30:21:ae:e2:60:b9:31:3a:6a:c1:ec:72:4a:
10:88:15:45:f6:9f:57:09:0c:4b:a2:d6:f3:9e:62:
bf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BF:68:4D:AF:F7:B0:62:4E:03:AF:C2:AB:F2:39:E6:D2:51:A4:40
X509v3 Authority Key Identifier:
keyid:F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:91:6a:ad:da:df:0f:21:30:69:76:f2:d6:2f:52:e6:29:78:
7c:bd:01:19:ca:5a:67:5c:b6:fb:c4:8f:15:d8:cf:eb:f9:b5:
2b:6b:e2:34:61:27:7c:49:11:21:d6:20:eb:9d:64:47:df:ec:
01:68:b4:a6:20:7a:9a:3c:8e:af:9d:8d:35:28:11:a4:bd:e9:
92:95:ef:a8:87:fc:30:31:f8:65:e3:a3:fc:37:a4:8c:dc:a3:
25:80:c8:d1:07:08:07:0e:c7:a1:6d:b9:27:d6:65:d2:f9:8f:
c3:3d:92:95:8e:3b:f6:38:55:06:eb:2d:42:1f:bc:d6:32:12:
02:9b:34:9c:37:2f:28:4f:54:01:8c:71:52:b6:d1:d6:6f:0f:
cc:d1:c0:62:7d:46:d5:78:52:f3:20:88:f4:91:45:28:36:c0:
52:c5:ab:e5:4e:cd:7c:06:c3:64:af:ee:d3:d3:23:e4:e0:ae:
e1:f8:bd:6c:cb:d0:5a:4b:91:8c:8d:bf:26:2f:cc:ef:ba:a5:
7b:d8:4b:5a:2e:7a:25:ba:9a:89:ef:9b:b4:fa:2f:c3:4e:2b:
ca:a5:2c:86:f0:bf:2a:d8:6f:c3:70:a0:6e:89:8f:a6:9a:c4:
59:0c:b9:f9:31:44:43:c1:bd:1d:24:a4:60:6f:07:41:ad:2e:
f4:e6:b5:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyu2etVPuTJ0EEEZGvAjOHDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZmZmOGYxYjgxYzJjNjE0ZmMzZTk0ZWIxN2NiYTA5NDAy
MTFhMDEwHhcNMjYwMzAyMTQwMDQyWhcNMjYwMzAzMTQwMDQyWjAzMTEwLwYDVQQD
EygzZWJmNjg0ZGFmZjdiMDYyNGUwM2FmYzJhYmYyMzllNmQyNTFhNDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B6EWmd58ycJz7Dczz0mt0n23fp+
3cvseBf96S7+vrSRd/sTdRvuz2nTW/oc2gFJNPcaJyeU/QsJ7XqMIfl2HeZ+4JXZ
tNPkfrlwtwEkDty0LA5Gzs8gHDEroHh0lzC0h3wQ42SAHVO/HzQWHZuBlDTgQ9m0
Un7YV+pNi9YgmTZmaN/FaLqYn6KlWWWpv3GKH6LZvMMy067xX4Rd16DVyuu/OSIV
mebUKcfpAbDiA8zlA9rVteDe2KC+wQoCCXnR4RDFk0wSzjAFy8D0WrEJgmMPGqtW
rxwkX3vdFASk01nnxTAhruJguTE6asHsckoQiBVF9p9XCQxLotbznmK/EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6/aE2v97BiTgOvwqvyOebSUaRAMB8GA1UdIwQY
MBaAFPL/+PG4HCxhT8PpTrF8uglAIRoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHZfNDhiZ2NMR0ZQdy1sT3NYeTZDVUFoR2dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yMDAyYzQtZWIwYS00NzAwLTkwNzYt
MTc0NDFiZmU1NmNmLzEvOHZfNDhiZ2NMR0ZQdy1sT3NYeTZDVUFoR2dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8yMDAyYzQtZWIwYS00NzAwLTkwNzYtMTc0NDFiZmU1NmNm
LzEvOHZfNDhiZ2NMR0ZQdy1sT3NYeTZDVUFoR2dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJFqrdrf
DyEwaXby1i9S5il4fL0BGcpaZ1y2+8SPFdjP6/m1K2viNGEnfEkRIdYg651kR9/s
AWi0piB6mjyOr52NNSgRpL3pkpXvqIf8MDH4ZeOj/DekjNyjJYDI0QcIBw7HoW25
J9Zl0vmPwz2SlY479jhVBustQh+81jISAps0nDcvKE9UAYxxUrbR1m8PzNHAYn1G
1XhS8yCI9JFFKDbAUsWr5U7NfAbDZK/u09Mj5OCu4fi9bMvQWkuRjI2/Ji/M77ql
e9hLWi56Jbqaie+btPovw04ryqUshvC/Kthvw3CgbomPpprEWQy5+TFEQ8G9HSSk
YG8HQa0u9Oa16A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:20 2026 by rpki-client