Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.mft
File: u8v1S15m1hoXV2yMc2vyZy47mho.mft (raw, json)
Hash identifier: 3DQHqu9Un+fH27e7qeIp8bG6TQC2+8bbhz7ETURnvi8=
Subject key identifier: 40:1A:BF:ED:D2:43:BA:97:57:8B:B7:4F:75:A4:2D:67:28:94:32:30
Authority key identifier: BB:CB:F5:4B:5E:66:D6:1A:17:57:6C:8C:73:6B:F2:67:2E:3B:9A:1A
Certificate issuer: /CN=bbcbf54b5e66d61a17576c8c736bf2672e3b9a1a
Certificate serial: 019CAE35E8C3C4A807919D189DEA4C0AE906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8v1S15m1hoXV2yMc2vyZy47mho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.mft
Manifest number: 09A9
Signing time: Mon 02 Mar 2026 11:01:34 +0000
Manifest this update: Mon 02 Mar 2026 11:01:34 +0000
Manifest next update: Tue 03 Mar 2026 11:01:34 +0000
Files and hashes: 1: u8v1S15m1hoXV2yMc2vyZy47mho.crl (hash: X4SVFGj8Jhl3Bu7prWk9eoMSCqxEA/UtSAvAfMN5wSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8v1S15m1hoXV2yMc2vyZy47mho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:e8:c3:c4:a8:07:91:9d:18:9d:ea:4c:0a:e9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbcbf54b5e66d61a17576c8c736bf2672e3b9a1a
Validity
Not Before: Mar 2 11:01:34 2026 GMT
Not After : Mar 3 11:01:34 2026 GMT
Subject: CN=401abfedd243ba97578bb74f75a42d6728943230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:89:68:66:2e:8d:66:98:b4:8c:7c:e8:95:bd:
fa:d3:26:36:89:53:c7:bb:bc:9d:52:d8:3d:16:06:
45:fd:54:98:fa:3b:77:7e:c8:1f:2c:87:b5:db:f0:
0d:29:f6:1d:1b:4c:d5:b4:0d:51:94:96:e6:85:5c:
da:4c:a5:41:ea:88:97:94:1b:6b:61:b7:30:7e:87:
89:69:56:f9:19:b3:2d:fd:d2:61:d2:ca:77:d9:21:
56:7a:0b:e4:53:8a:ff:1e:a6:4b:70:c3:10:1e:d0:
13:a8:95:52:59:2e:37:95:4a:7e:15:ae:4d:2d:d7:
3b:40:f3:3a:a0:13:36:44:f1:8a:a7:97:d4:2b:1b:
e1:9b:5b:bd:64:4e:f6:15:7b:f5:71:2b:76:3b:9c:
81:28:67:3e:2d:c7:3d:89:8f:f3:38:c3:37:78:c0:
6c:9e:2c:da:ec:00:36:8d:c1:54:67:1d:0a:0f:4b:
ac:1c:58:8d:4c:f7:51:8d:11:9c:b4:d9:b9:6d:6d:
f0:d8:f4:24:68:94:14:95:bf:9f:b9:d7:fa:63:2a:
6d:63:9c:4f:bc:3a:31:7d:fe:ea:35:0d:e1:fc:a6:
6b:13:da:f5:8c:e8:ab:65:6a:91:3e:c3:7a:5f:4c:
c5:37:13:ba:6e:7a:86:3a:0c:96:db:95:2d:dc:61:
84:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1A:BF:ED:D2:43:BA:97:57:8B:B7:4F:75:A4:2D:67:28:94:32:30
X509v3 Authority Key Identifier:
keyid:BB:CB:F5:4B:5E:66:D6:1A:17:57:6C:8C:73:6B:F2:67:2E:3B:9A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8v1S15m1hoXV2yMc2vyZy47mho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:82:d0:90:56:50:92:4c:e3:b5:85:3b:56:d1:a3:ab:62:95:
fd:c0:d8:ee:de:eb:03:67:da:01:24:40:7c:38:ef:1a:e3:ae:
83:1f:3e:43:01:94:49:3c:93:f7:52:ba:d9:b0:3f:62:d5:13:
93:2c:0e:ca:6a:23:a3:dc:8b:49:e9:0f:0f:24:7a:0b:07:79:
d6:ac:c6:86:78:a1:e9:85:30:d9:8e:3f:47:2b:c0:3e:bd:05:
b8:77:8c:63:37:d0:af:86:ec:43:0c:0b:dc:1a:22:ae:b1:ac:
d4:fb:0d:a7:49:2c:92:ae:5e:f5:91:35:d4:b6:bc:af:1b:26:
a1:66:29:83:be:81:c8:21:30:ce:ba:9a:48:6f:24:71:c1:09:
32:f0:27:a1:4c:56:9c:24:bc:f6:2c:21:f7:78:bc:31:ae:dd:
ba:89:64:8f:22:b7:90:dd:f2:64:a8:4d:3d:44:ef:87:bb:97:
5f:b2:30:53:b7:f4:4a:57:bd:bb:86:34:2c:ed:b4:6f:86:b8:
d6:f4:b6:8a:59:71:d7:05:8d:54:2e:b2:9f:02:6a:a6:66:87:
3b:18:39:7d:cf:18:08:7a:d8:e3:56:a2:2d:d5:a0:8d:a1:96:
7c:c5:d4:17:8f:09:24:18:04:a7:c6:cd:85:60:54:8e:29:c6:
2e:8d:53:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNejDxKgHkZ0YnepMCukGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiY2JmNTRiNWU2NmQ2MWExNzU3NmM4YzczNmJmMjY3MmUz
YjlhMWEwHhcNMjYwMzAyMTEwMTM0WhcNMjYwMzAzMTEwMTM0WjAzMTEwLwYDVQQD
Eyg0MDFhYmZlZGQyNDNiYTk3NTc4YmI3NGY3NWE0MmQ2NzI4OTQzMjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloloZi6NZpi0jHzolb360yY2iVPH
u7ydUtg9FgZF/VSY+jt3fsgfLIe12/ANKfYdG0zVtA1RlJbmhVzaTKVB6oiXlBtr
YbcwfoeJaVb5GbMt/dJh0sp32SFWegvkU4r/HqZLcMMQHtATqJVSWS43lUp+Fa5N
Ldc7QPM6oBM2RPGKp5fUKxvhm1u9ZE72FXv1cSt2O5yBKGc+Lcc9iY/zOMM3eMBs
niza7AA2jcFUZx0KD0usHFiNTPdRjRGctNm5bW3w2PQkaJQUlb+fudf6YyptY5xP
vDoxff7qNQ3h/KZrE9r1jOirZWqRPsN6X0zFNxO6bnqGOgyW25Ut3GGEiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAav+3SQ7qXV4u3T3WkLWcolDIwMB8GA1UdIwQY
MBaAFLvL9UteZtYaF1dsjHNr8mcuO5oaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTh2MVMxNW0xaG9YVjJ5TWMydnlaeTQ3bWhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85MTY3NDItNTFmOS00ZWI0LWExOTUt
MjlmZDgwYmE0YmYxLzEvdTh2MVMxNW0xaG9YVjJ5TWMydnlaeTQ3bWhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85MTY3NDItNTFmOS00ZWI0LWExOTUtMjlmZDgwYmE0YmYx
LzEvdTh2MVMxNW0xaG9YVjJ5TWMydnlaeTQ3bWhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYLQkFZQ
kkzjtYU7VtGjq2KV/cDY7t7rA2faASRAfDjvGuOugx8+QwGUSTyT91K62bA/YtUT
kywOymojo9yLSekPDyR6Cwd51qzGhnih6YUw2Y4/RyvAPr0FuHeMYzfQr4bsQwwL
3BoirrGs1PsNp0kskq5e9ZE11La8rxsmoWYpg76ByCEwzrqaSG8kccEJMvAnoUxW
nCS89iwh93i8Ma7duolkjyK3kN3yZKhNPUTvh7uXX7IwU7f0Sle9u4Y0LO20b4a4
1vS2illx1wWNVC6ynwJqpmaHOxg5fc8YCHrY41aiLdWgjaGWfMXUF48JJBgEp8bN
hWBUjinGLo1T7g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:43 2026 by rpki-client