Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
File: 8hWid5SXEbLAHNxmnkDhcTlYVbs.mft (raw, json)
Hash identifier: 7Z/vIyYGe4q+517D78+6t7xqIY7Jk8PMaWTKzROV3sk=
Subject key identifier: 2F:07:E5:B5:8F:0C:44:37:F4:9F:F1:EB:BA:AE:35:BE:59:70:6D:4A
Authority key identifier: F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
Certificate issuer: /CN=f215a277949711b2c01cdc669e40e171395855bb
Certificate serial: 019CABD93D0FCC644ED3DA45DFE955583A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:06 +0000
Manifest this update: Mon 02 Mar 2026 00:01:06 +0000
Manifest next update: Tue 03 Mar 2026 00:01:06 +0000
Files and hashes: 1: 1-c2ltkv81E7EaN3If-RGRVyYa_4.roa (hash: qSMZzei9N2ZpotVQ68DijxfquLxjFkRKA3l/57HyNug=)
2: 8hWid5SXEbLAHNxmnkDhcTlYVbs.crl (hash: FiZSdDXK1UpVRfA9yS2ULRf+3MSG3PH1XJck+BXx9yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:3d:0f:cc:64:4e:d3:da:45:df:e9:55:58:3a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215a277949711b2c01cdc669e40e171395855bb
Validity
Not Before: Mar 2 00:01:06 2026 GMT
Not After : Mar 3 00:01:06 2026 GMT
Subject: CN=2f07e5b58f0c4437f49ff1ebbaae35be59706d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d0:e3:75:dd:4e:20:66:21:38:b5:68:7c:3a:
0d:09:66:84:04:d9:6b:16:ab:71:80:4a:7f:56:30:
76:16:30:b5:e5:ec:ef:73:61:78:79:52:f5:09:6d:
da:1a:c8:03:67:86:4d:4e:01:da:bc:d5:18:db:5a:
6a:0a:b6:85:1b:b0:f8:b0:3b:4f:42:83:f9:4a:ce:
71:8c:93:8a:d3:a0:72:dc:8b:1f:1a:51:7d:f9:3c:
ac:38:6b:7e:f9:0d:0c:b4:5e:e3:fe:73:a4:01:ba:
a8:72:22:87:13:8a:58:1f:7f:bf:61:b4:b9:e7:f2:
99:a9:c5:c8:96:3f:c1:3a:5a:29:41:6f:86:51:3b:
e2:ff:71:92:28:9a:85:65:7c:47:f3:18:b2:11:89:
67:00:b8:19:d6:ee:e8:d1:43:1b:2e:ec:91:b8:3b:
13:3e:a2:44:ca:20:b4:b7:fe:74:01:5e:8d:6d:4a:
36:fb:f0:d2:de:a7:fa:e5:03:89:0d:91:1c:72:64:
fd:61:50:18:1a:8d:a8:a5:20:49:5b:45:d5:bb:1f:
76:7c:29:20:6e:fa:27:32:d0:30:38:99:ea:f8:c0:
9f:50:c3:51:9c:7c:b0:5a:db:3f:e4:1f:40:c7:f9:
a6:ef:5c:88:2d:b6:c7:1e:c8:df:93:18:18:dd:a3:
6a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:07:E5:B5:8F:0C:44:37:F4:9F:F1:EB:BA:AE:35:BE:59:70:6D:4A
X509v3 Authority Key Identifier:
keyid:F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f4:30:8a:76:00:e1:df:63:66:63:3f:38:d0:7f:ae:72:f5:
d7:7f:5a:85:28:20:bc:e4:62:d6:1b:bc:98:b8:55:5c:f9:c5:
f5:e1:90:b5:e4:be:f0:21:8b:5d:ba:80:41:7d:eb:33:94:8f:
11:86:eb:b0:8a:44:13:40:ed:cc:d6:69:da:22:c5:82:a3:68:
97:7f:2b:19:37:4e:cf:05:62:57:bd:66:10:4b:47:05:b7:28:
52:e7:a0:3f:0c:01:49:09:bd:11:b9:ea:25:51:8e:4e:dc:d8:
80:43:d4:d9:35:95:e4:fd:3a:3e:43:b9:d8:20:de:45:64:81:
7e:4d:89:68:37:f4:a2:09:2b:93:b3:be:dd:19:bb:03:c8:88:
2b:bc:5b:ab:16:a8:35:c7:48:dd:79:48:8a:fb:4b:e5:33:c1:
4a:68:82:2e:07:be:d2:2c:f3:d7:b6:a3:3c:eb:fa:dd:fd:e2:
24:49:5a:be:ae:8c:1b:0e:18:37:2c:5a:7c:5c:f2:96:76:14:
f6:e6:e1:8b:7d:31:39:03:9b:c1:6b:ec:53:c6:5b:30:bd:01:
91:bd:9e:5c:b0:1a:2a:e7:4c:fb:d2:4c:53:58:d8:5e:fe:b9:
8c:00:ae:98:44:ca:1d:3b:05:56:e6:d1:45:ad:69:aa:7b:32:
39:f3:ce:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2T0PzGRO09pF3+lVWDpfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMTVhMjc3OTQ5NzExYjJjMDFjZGM2NjllNDBlMTcxMzk1
ODU1YmIwHhcNMjYwMzAyMDAwMTA2WhcNMjYwMzAzMDAwMTA2WjAzMTEwLwYDVQQD
EygyZjA3ZTViNThmMGM0NDM3ZjQ5ZmYxZWJiYWFlMzViZTU5NzA2ZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tDjdd1OIGYhOLVofDoNCWaEBNlr
FqtxgEp/VjB2FjC15ezvc2F4eVL1CW3aGsgDZ4ZNTgHavNUY21pqCraFG7D4sDtP
QoP5Ss5xjJOK06By3IsfGlF9+TysOGt++Q0MtF7j/nOkAbqociKHE4pYH3+/YbS5
5/KZqcXIlj/BOlopQW+GUTvi/3GSKJqFZXxH8xiyEYlnALgZ1u7o0UMbLuyRuDsT
PqJEyiC0t/50AV6NbUo2+/DS3qf65QOJDZEccmT9YVAYGo2opSBJW0XVux92fCkg
bvonMtAwOJnq+MCfUMNRnHywWts/5B9Ax/mm71yILbbHHsjfkxgY3aNq5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8H5bWPDEQ39J/x67quNb5ZcG1KMB8GA1UdIwQY
MBaAFPIVoneUlxGywBzcZp5A4XE5WFW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGhXaWQ1U1hFYkxBSE54bW5rRGhjVGxZVmJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mMDhkNDUtNTQzYy00OWY3LTllNzgt
OTAzYzE5ODU5MGZhLzEvOGhXaWQ1U1hFYkxBSE54bW5rRGhjVGxZVmJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mMDhkNDUtNTQzYy00OWY3LTllNzgtOTAzYzE5ODU5MGZh
LzEvOGhXaWQ1U1hFYkxBSE54bW5rRGhjVGxZVmJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAivQwinYA
4d9jZmM/ONB/rnL1139ahSggvORi1hu8mLhVXPnF9eGQteS+8CGLXbqAQX3rM5SP
EYbrsIpEE0DtzNZp2iLFgqNol38rGTdOzwViV71mEEtHBbcoUuegPwwBSQm9Ebnq
JVGOTtzYgEPU2TWV5P06PkO52CDeRWSBfk2JaDf0ogkrk7O+3Rm7A8iIK7xbqxao
NcdI3XlIivtL5TPBSmiCLge+0izz17ajPOv63f3iJElavq6MGw4YNyxafFzylnYU
9ubhi30xOQObwWvsU8ZbML0Bkb2eXLAaKudM+9JMU1jYXv65jACumETKHTsFVubR
Ra1pqnsyOfPOBQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:16 2026 by rpki-client