Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
File: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft (raw, json)
Hash identifier: P0/2ETyd5ruV3UMu1y6OKhjfq9S/nLh7jUWf78TYkzY=
Subject key identifier: 1E:35:AB:7F:FA:FA:EF:DF:F0:29:89:E6:3B:C0:D5:D4:D2:EB:0A:BF
Authority key identifier: D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
Certificate issuer: /CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Certificate serial: 019CAB6AD69DE278D82173282FB70A88F298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
Manifest number: 1501
Signing time: Sun 01 Mar 2026 22:00:31 +0000
Manifest this update: Sun 01 Mar 2026 22:00:31 +0000
Manifest next update: Mon 02 Mar 2026 22:00:31 +0000
Files and hashes: 1: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl (hash: WLMByz8AMYVM57KPW80O+kcwbN8MQtfDRug8epFRJy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:d6:9d:e2:78:d8:21:73:28:2f:b7:0a:88:f2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Validity
Not Before: Mar 1 22:00:31 2026 GMT
Not After : Mar 2 22:00:31 2026 GMT
Subject: CN=1e35ab7ffafaefdff02989e63bc0d5d4d2eb0abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:6f:96:ca:9b:0d:da:2f:b6:52:20:9a:06:
76:9e:74:b6:96:b6:0a:ec:97:84:84:fb:03:05:d0:
51:f2:34:b7:ab:16:f9:44:4f:ca:92:64:3c:8e:b0:
d0:4f:db:f0:d7:84:98:f1:1e:c6:42:95:47:9c:40:
1f:ff:18:fb:e7:d9:51:ec:be:9e:e9:a0:1f:c7:ca:
17:6d:e1:02:5c:6e:67:8e:71:33:70:4b:02:79:cf:
92:7e:39:e4:8a:41:d0:08:7d:62:8a:82:25:f8:ca:
3e:7b:e1:82:9c:16:aa:71:7a:09:09:25:69:7f:88:
ea:99:eb:f7:fb:21:a7:b9:10:a4:3b:eb:9d:28:1f:
36:5a:d9:c5:b8:a4:0e:c0:05:39:31:e4:06:ef:cf:
86:7f:b7:37:b5:8a:11:81:e5:aa:54:53:18:66:e6:
8c:ce:8c:c3:b5:8b:32:a5:ac:3d:e5:31:2a:ee:f4:
11:1c:32:d4:30:e8:d5:18:d4:7c:68:f8:d4:b6:82:
02:6e:a3:e5:cd:b9:5f:0a:f5:82:8f:a1:6b:fa:b4:
b8:1c:ad:87:40:95:e3:78:e5:20:ef:ec:4d:29:44:
30:fe:7a:6c:0c:04:4f:de:22:4a:1f:e6:4a:fc:0d:
c6:f9:83:1a:ef:7c:af:c0:58:cb:6c:9a:ff:5f:bd:
c5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:35:AB:7F:FA:FA:EF:DF:F0:29:89:E6:3B:C0:D5:D4:D2:EB:0A:BF
X509v3 Authority Key Identifier:
keyid:D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d6:4c:34:e4:40:33:55:1e:c7:cd:72:43:e0:c2:17:b0:84:
7d:ea:08:25:42:09:4d:fc:bf:7c:11:6a:b8:b6:d1:c7:5f:ca:
fe:17:69:9b:94:40:c2:c2:e5:2b:1e:e4:83:ad:3b:40:22:3e:
49:74:89:21:76:8e:cf:90:5f:77:73:80:2a:d1:2f:15:16:03:
39:a5:cf:0b:f4:00:a4:a3:ba:98:25:a0:f9:a0:7c:c0:f7:58:
bb:c3:83:a9:0f:2f:0c:4d:ef:41:2f:00:12:a3:b2:4a:55:df:
c8:77:76:06:cf:a7:97:98:91:41:3b:15:a6:46:21:5b:08:3e:
f9:46:44:44:05:08:1c:09:08:9d:88:7a:36:78:26:33:75:fa:
b1:1d:c9:79:a9:58:02:58:87:5a:8c:76:45:84:b0:58:17:34:
d2:bb:23:77:b7:40:dd:ca:c5:2e:93:e1:ac:3c:28:40:a3:9a:
29:99:43:82:7c:34:39:47:3a:5e:ba:15:48:bb:2b:06:1e:62:
11:e3:97:73:20:22:1b:c7:c1:33:76:66:bb:0a:37:91:60:11:
c2:72:82:4b:00:67:8f:1c:0a:a1:68:dc:1d:21:74:ef:a4:dd:
7d:68:ef:b7:d7:35:23:6d:f1:3d:cc:99:4c:ae:33:9f:3b:15:
ce:65:5c:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyratad4njYIXMoL7cKiPKYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMmYyOWZjMDdlZDRiNTIxOGNkMTI3ZGEyYWM1N2ZhMDYz
NDUyZDkwHhcNMjYwMzAxMjIwMDMxWhcNMjYwMzAyMjIwMDMxWjAzMTEwLwYDVQQD
EygxZTM1YWI3ZmZhZmFlZmRmZjAyOTg5ZTYzYmMwZDVkNGQyZWIwYWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmBvlsqbDdovtlIgmgZ2nnS2lrYK
7JeEhPsDBdBR8jS3qxb5RE/KkmQ8jrDQT9vw14SY8R7GQpVHnEAf/xj759lR7L6e
6aAfx8oXbeECXG5njnEzcEsCec+SfjnkikHQCH1iioIl+Mo+e+GCnBaqcXoJCSVp
f4jqmev3+yGnuRCkO+udKB82WtnFuKQOwAU5MeQG78+Gf7c3tYoRgeWqVFMYZuaM
zozDtYsypaw95TEq7vQRHDLUMOjVGNR8aPjUtoICbqPlzblfCvWCj6Fr+rS4HK2H
QJXjeOUg7+xNKUQw/npsDARP3iJKH+ZK/A3G+YMa73yvwFjLbJr/X73FuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB41q3/6+u/f8CmJ5jvA1dTS6wq/MB8GA1UdIwQY
MBaAFNEvKfwH7UtSGM0SfaKsV/oGNFLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jOTQ1YjktNGJlZi00NzEzLWE4OGEt
ZTBkODIxZTQ1ZmZjLzEvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9jOTQ1YjktNGJlZi00NzEzLWE4OGEtZTBkODIxZTQ1ZmZj
LzEvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9ZMNORA
M1Uex81yQ+DCF7CEfeoIJUIJTfy/fBFquLbRx1/K/hdpm5RAwsLlKx7kg607QCI+
SXSJIXaOz5Bfd3OAKtEvFRYDOaXPC/QApKO6mCWg+aB8wPdYu8ODqQ8vDE3vQS8A
EqOySlXfyHd2Bs+nl5iRQTsVpkYhWwg++UZERAUIHAkInYh6NngmM3X6sR3JealY
AliHWox2RYSwWBc00rsjd7dA3crFLpPhrDwoQKOaKZlDgnw0OUc6XroVSLsrBh5i
EeOXcyAiG8fBM3Zmuwo3kWARwnKCSwBnjxwKoWjcHSF076TdfWjvt9c1I23xPcyZ
TK4znzsVzmVceA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:30 2026 by rpki-client