Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
File: 8_su-07B6bb2xtC6JgdHqcPgrco.mft (raw, json)
Hash identifier: 2nT7eYG9i+6kQUOcVyLBpCNUnfySAlol/bABDmODmg0=
Subject key identifier: 9C:E0:81:AB:1B:4B:5D:19:02:A6:DD:5C:C5:C7:0C:22:4D:C3:74:28
Authority key identifier: F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
Certificate issuer: /CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Certificate serial: 019CABD8FF17DF164B9F0578242AE07C560B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
Manifest number: 0622
Signing time: Mon 02 Mar 2026 00:00:50 +0000
Manifest this update: Mon 02 Mar 2026 00:00:50 +0000
Manifest next update: Tue 03 Mar 2026 00:00:50 +0000
Files and hashes: 1: 8_su-07B6bb2xtC6JgdHqcPgrco.crl (hash: cnqfazEBQQb9aq5lf7xx9B12rBZhGrLiZPbd4JzkqDI=)
2: NpxIGcPNSR7M7Pg5DxBw4oq6qFc.roa (hash: /JiblaBoPoe2nZBA7SVm6e0ExqOkpFSs5xrzKMIO9LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:ff:17:df:16:4b:9f:05:78:24:2a:e0:7c:56:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Validity
Not Before: Mar 2 00:00:50 2026 GMT
Not After : Mar 3 00:00:50 2026 GMT
Subject: CN=9ce081ab1b4b5d1902a6dd5cc5c70c224dc37428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0e:fb:18:e9:c3:d9:fe:27:3b:6f:42:00:5d:
db:d9:38:31:a7:18:a6:1a:83:16:1f:a2:b6:7e:c0:
16:bb:a7:61:e4:1e:ed:84:0c:5f:23:69:c8:62:fc:
9e:5a:2b:44:24:12:ba:f0:60:1d:af:fb:74:8b:60:
66:c2:89:ee:78:06:a2:80:a0:00:02:1e:4b:4a:fd:
1a:bd:fa:28:34:e1:50:bb:c3:64:83:56:48:84:ad:
b7:98:75:ae:8b:e5:f7:b5:7b:dd:21:81:b9:15:83:
a6:71:14:80:c2:87:12:bb:7c:eb:5d:b0:4e:53:2d:
77:86:92:c9:1b:06:08:4e:36:d3:fc:1e:67:ba:0e:
82:8b:07:a6:8c:ff:74:0e:7e:0a:48:c6:3e:4d:92:
2e:ca:b9:fc:bf:18:c1:30:6b:11:47:48:1c:11:24:
32:f4:45:90:14:ee:8a:a7:98:cd:e8:27:f8:2a:46:
b0:d9:3f:e4:0c:f3:79:94:80:19:ae:3c:da:4f:ca:
09:ff:36:82:29:ea:23:97:98:3c:0f:84:c6:bf:f6:
dd:4a:98:e3:1d:98:09:3d:d8:e6:e9:56:c3:1d:0d:
c0:f5:df:46:1f:07:13:0e:ba:9f:59:35:4f:5d:a3:
b3:15:5d:07:10:df:d2:86:cd:3e:6c:14:e5:6e:e4:
30:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E0:81:AB:1B:4B:5D:19:02:A6:DD:5C:C5:C7:0C:22:4D:C3:74:28
X509v3 Authority Key Identifier:
keyid:F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8e:c7:23:9d:6b:3e:64:7b:03:5b:8b:d7:42:34:83:7f:07:
e6:c5:f0:19:c1:15:5a:14:6c:2d:26:c8:e2:77:0e:83:b7:ac:
fb:d6:23:26:8c:a1:44:eb:e7:81:74:3d:df:e5:c5:8f:e7:3c:
30:11:8c:e4:c9:9b:db:bc:91:10:a3:ca:5f:54:b5:93:6f:b3:
74:e1:1a:8d:b1:b5:ce:5f:52:de:29:02:68:39:c0:ce:c7:5b:
72:28:41:7e:87:c0:6c:5d:17:c4:72:0c:9e:f9:fe:69:e3:c9:
0c:2f:43:ac:46:ce:bc:01:33:89:54:49:a6:86:5a:d0:08:81:
52:7f:09:9f:19:eb:3b:43:63:6e:28:ae:64:a1:87:0f:73:74:
be:d6:e4:1c:5c:75:80:2a:cd:ba:86:40:3c:29:ae:58:67:82:
6d:37:cc:69:12:68:3e:32:07:cc:78:65:05:a0:a6:99:3d:3a:
d1:a9:9d:da:bb:9b:06:0e:12:47:77:28:49:ab:a7:de:a7:7f:
97:91:d8:0e:2b:eb:62:9a:98:a4:08:4c:da:43:38:83:52:0d:
cf:54:88:66:0f:68:5a:88:c3:81:9e:f6:72:94:03:78:36:bd:
f9:e4:fd:a3:4b:7c:61:2f:5a:8f:60:9d:f3:12:e8:58:60:19:
c1:6c:0a:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2P8X3xZLnwV4JCrgfFYLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZmIyZWZiNGVjMWU5YjZmNmM2ZDBiYTI2MDc0N2E5YzNl
MGFkY2EwHhcNMjYwMzAyMDAwMDUwWhcNMjYwMzAzMDAwMDUwWjAzMTEwLwYDVQQD
Eyg5Y2UwODFhYjFiNGI1ZDE5MDJhNmRkNWNjNWM3MGMyMjRkYzM3NDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ77GOnD2f4nO29CAF3b2Tgxpxim
GoMWH6K2fsAWu6dh5B7thAxfI2nIYvyeWitEJBK68GAdr/t0i2BmwonueAaigKAA
Ah5LSv0avfooNOFQu8Nkg1ZIhK23mHWui+X3tXvdIYG5FYOmcRSAwocSu3zrXbBO
Uy13hpLJGwYITjbT/B5nug6CiwemjP90Dn4KSMY+TZIuyrn8vxjBMGsRR0gcESQy
9EWQFO6Kp5jN6Cf4Kkaw2T/kDPN5lIAZrjzaT8oJ/zaCKeojl5g8D4TGv/bdSpjj
HZgJPdjm6VbDHQ3A9d9GHwcTDrqfWTVPXaOzFV0HEN/Shs0+bBTlbuQw0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzggasbS10ZAqbdXMXHDCJNw3QoMB8GA1UdIwQY
MBaAFPP7LvtOwem29sbQuiYHR6nD4K3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOF9zdS0wN0I2YmIyeHRDNkpnZEhxY1BncmNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9hOGY3NDItYWI5Yi00YjI5LThhZDQt
NmU5MTJkYjAyZjVkLzEvOF9zdS0wN0I2YmIyeHRDNkpnZEhxY1BncmNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9hOGY3NDItYWI5Yi00YjI5LThhZDQtNmU5MTJkYjAyZjVk
LzEvOF9zdS0wN0I2YmIyeHRDNkpnZEhxY1BncmNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjY7HI51r
PmR7A1uL10I0g38H5sXwGcEVWhRsLSbI4ncOg7es+9YjJoyhROvngXQ93+XFj+c8
MBGM5Mmb27yREKPKX1S1k2+zdOEajbG1zl9S3ikCaDnAzsdbcihBfofAbF0XxHIM
nvn+aePJDC9DrEbOvAEziVRJpoZa0AiBUn8JnxnrO0NjbiiuZKGHD3N0vtbkHFx1
gCrNuoZAPCmuWGeCbTfMaRJoPjIHzHhlBaCmmT060amd2rubBg4SR3coSaun3qd/
l5HYDivrYpqYpAhM2kM4g1INz1SIZg9oWojDgZ72cpQDeDa9+eT9o0t8YS9aj2Cd
8xLoWGAZwWwKtQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:49 2026 by rpki-client