Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
File: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft (raw, json)
Hash identifier: mwtawlGkrkkBMS4myuz79sXbUXFsPG/nh5L6/ZdF768=
Subject key identifier: 7B:62:74:2B:37:0C:65:CC:29:86:30:4F:2E:14:F9:B9:7F:7F:9B:07
Authority key identifier: F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
Certificate issuer: /CN=f32220b696e2e766516c05743d137dbbc17fd261
Certificate serial: 019CAD592B09494C1F689A9BA5CD379F3DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 07:00:27 +0000
Manifest this update: Mon 02 Mar 2026 07:00:27 +0000
Manifest next update: Tue 03 Mar 2026 07:00:27 +0000
Files and hashes: 1: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl (hash: WInZFpPPtH5Ai1JqCtX0GSRSu1ioy8Ytevj3y6ciNiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:2b:09:49:4c:1f:68:9a:9b:a5:cd:37:9f:3d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32220b696e2e766516c05743d137dbbc17fd261
Validity
Not Before: Mar 2 07:00:27 2026 GMT
Not After : Mar 3 07:00:27 2026 GMT
Subject: CN=7b62742b370c65cc2986304f2e14f9b97f7f9b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:08:bb:ae:00:3c:df:d9:99:64:9e:31:e3:e1:
2f:2d:eb:d8:89:4a:82:fe:01:a9:a8:bb:73:16:5a:
9a:44:76:83:d0:8c:1d:1b:03:5b:f2:69:c4:be:e8:
40:64:5f:07:d2:73:fd:62:f7:ab:c0:47:df:81:08:
b3:ca:03:db:08:1a:af:a0:d2:c4:55:48:19:53:35:
99:f7:ff:9c:43:83:f7:7f:da:c5:c4:8b:b5:bf:c3:
87:3b:e7:3c:9f:1b:e2:7b:69:74:4d:3b:8c:66:26:
e8:33:7e:4a:af:79:48:02:90:62:51:37:7d:9c:24:
c1:ba:6e:e1:36:c9:49:7f:4d:08:46:84:83:24:2f:
8d:93:77:04:6c:ba:76:0e:e7:51:35:02:14:b1:73:
25:9b:3d:f7:12:2f:5d:3d:09:35:00:1e:23:7c:68:
e9:6f:e1:df:90:fa:14:7f:67:8f:4b:d8:56:c9:f2:
7d:9b:1c:d4:32:b4:c2:1e:0f:96:25:e2:b5:31:29:
db:99:bb:5d:0a:e1:c4:14:c6:09:f8:e8:6c:4a:e3:
27:09:23:95:9a:8d:95:2c:26:17:0b:09:6c:b7:d9:
39:b3:70:99:dc:75:ce:a7:01:da:de:91:8a:ce:1e:
6a:eb:6b:bc:34:a2:69:66:b4:e4:49:e5:3e:07:5e:
78:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:62:74:2B:37:0C:65:CC:29:86:30:4F:2E:14:F9:B9:7F:7F:9B:07
X509v3 Authority Key Identifier:
keyid:F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a5:52:6e:70:3b:2d:aa:b6:32:f4:30:1b:d2:38:4d:5f:4d:
53:31:b9:05:05:2a:17:f3:c6:c2:88:1f:a6:f8:e0:d7:9b:07:
03:4e:0b:bd:31:29:dd:2f:a9:34:b5:1f:b3:74:a3:7b:c2:01:
b0:48:48:a2:05:73:04:42:13:41:94:01:40:c6:cc:a4:6e:80:
03:3f:27:21:52:95:7d:b5:a5:dd:c7:4a:31:f0:43:91:00:c7:
9d:7b:be:01:89:f7:ef:d3:fe:91:3c:07:22:4f:1d:28:93:2a:
79:77:9a:aa:c8:e0:3b:6a:78:39:cd:5b:51:79:59:39:bf:d1:
54:96:93:7f:d8:3b:fd:c2:1e:e8:ca:20:eb:00:a5:39:f0:aa:
8c:47:ef:88:ea:19:7a:37:ee:bb:69:7e:8c:31:e9:53:7c:18:
ed:6d:fe:c0:d2:b7:ea:db:9f:26:60:44:fd:71:e0:94:13:b9:
e6:34:22:f8:db:0f:40:1d:66:0e:f4:e5:4f:c6:20:11:e5:8a:
a4:fb:10:9b:09:8d:fc:9b:96:74:bd:47:7e:a5:da:4b:cd:52:
62:5e:a4:f5:df:ac:d2:3b:e8:1a:7a:53:79:5a:fb:35:b5:62:
a4:ca:28:ff:a4:a0:dc:2c:1c:ef:a8:5e:1e:3c:2f:43:d4:03:
20:5f:54:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWSsJSUwfaJqbpc03nz3XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMjIyMGI2OTZlMmU3NjY1MTZjMDU3NDNkMTM3ZGJiYzE3
ZmQyNjEwHhcNMjYwMzAyMDcwMDI3WhcNMjYwMzAzMDcwMDI3WjAzMTEwLwYDVQQD
Eyg3YjYyNzQyYjM3MGM2NWNjMjk4NjMwNGYyZTE0ZjliOTdmN2Y5YjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwi7rgA839mZZJ4x4+EvLevYiUqC
/gGpqLtzFlqaRHaD0IwdGwNb8mnEvuhAZF8H0nP9YverwEffgQizygPbCBqvoNLE
VUgZUzWZ9/+cQ4P3f9rFxIu1v8OHO+c8nxvie2l0TTuMZiboM35Kr3lIApBiUTd9
nCTBum7hNslJf00IRoSDJC+Nk3cEbLp2DudRNQIUsXMlmz33Ei9dPQk1AB4jfGjp
b+HfkPoUf2ePS9hWyfJ9mxzUMrTCHg+WJeK1MSnbmbtdCuHEFMYJ+OhsSuMnCSOV
mo2VLCYXCwlst9k5s3CZ3HXOpwHa3pGKzh5q62u8NKJpZrTkSeU+B154XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtidCs3DGXMKYYwTy4U+bl/f5sHMB8GA1UdIwQY
MBaAFPMiILaW4udmUWwFdD0TfbvBf9JhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHlJZ3RwYmk1MlpSYkFWMFBSTjl1OEZfMG1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80OTNlMjAtN2UxNy00NzU5LWIzNDUt
MGViMGIyNDBiOWI3LzEvOHlJZ3RwYmk1MlpSYkFWMFBSTjl1OEZfMG1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80OTNlMjAtN2UxNy00NzU5LWIzNDUtMGViMGIyNDBiOWI3
LzEvOHlJZ3RwYmk1MlpSYkFWMFBSTjl1OEZfMG1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqVSbnA7
Laq2MvQwG9I4TV9NUzG5BQUqF/PGwogfpvjg15sHA04LvTEp3S+pNLUfs3Sje8IB
sEhIogVzBEITQZQBQMbMpG6AAz8nIVKVfbWl3cdKMfBDkQDHnXu+AYn379P+kTwH
Ik8dKJMqeXeaqsjgO2p4Oc1bUXlZOb/RVJaTf9g7/cIe6Mog6wClOfCqjEfviOoZ
ejfuu2l+jDHpU3wY7W3+wNK36tufJmBE/XHglBO55jQi+NsPQB1mDvTlT8YgEeWK
pPsQmwmN/JuWdL1HfqXaS81SYl6k9d+s0jvoGnpTeVr7NbVipMoo/6Sg3Cwc76he
HjwvQ9QDIF9ULg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:58:53 2026 by rpki-client