Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
File: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft (raw, json)
Hash identifier: ha1ApOLL0jrvoAFBfkij07kT3pBmE21P29r3yGtFaw4=
Subject key identifier: 2C:DC:ED:44:A9:BD:77:30:04:F4:55:45:BD:9B:7A:F4:FA:A5:13:17
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Certificate issuer: /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial: 019CA9459DBCB0A1233313BFCB2FF0B0348A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 12:00:37 +0000
Manifest this update: Sun 01 Mar 2026 12:00:37 +0000
Manifest next update: Mon 02 Mar 2026 12:00:37 +0000
Files and hashes: 1: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl (hash: QwmMqTEoy6WznUmGA/6t4f0EMG+QVVW6mLoQlUIuTZk=)
2: PLcdq8HBbATb33TrLOZuRDuXEVQ.roa (hash: XGsrxoZcwiWsioFa6/X1psR1kn5m17Bl9f4lBLZE5dk=)
3: yYbe2iJW7P_sCDhFY34_L0RrDto.roa (hash: a8JSg8aR8AsTXy0JLCDrOWelsw6IkJ4MgTxTFuy83io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:9d:bc:b0:a1:23:33:13:bf:cb:2f:f0:b0:34:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Validity
Not Before: Mar 1 12:00:37 2026 GMT
Not After : Mar 2 12:00:37 2026 GMT
Subject: CN=2cdced44a9bd773004f45545bd9b7af4faa51317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:33:dd:4b:f0:97:a4:15:71:33:74:e3:a9:
e7:1f:65:1b:e6:78:80:8e:1f:f4:73:d2:94:fa:8d:
9c:5f:b9:95:4c:60:41:6c:11:70:ba:c1:db:13:d9:
f9:ef:11:01:7f:a2:53:77:f8:58:d9:8c:34:7e:4f:
fd:75:83:07:6a:6c:92:c6:3b:3f:28:d7:d9:c8:b2:
2f:84:f5:27:38:fe:78:a9:2e:7b:89:d8:a2:c6:af:
8a:05:6a:d7:1a:21:23:fe:bf:b1:08:f9:60:06:be:
f7:93:d8:9e:34:fd:91:57:94:e5:ec:0e:69:bf:65:
0f:2e:34:27:a0:14:11:d2:82:ab:6a:b3:51:08:93:
a9:87:30:2b:7e:46:23:9a:8a:f5:6d:b4:aa:b0:00:
dc:73:dc:16:ae:46:14:63:4e:ab:23:9d:d7:d7:05:
fd:b2:5f:d3:e2:ec:a9:fb:d2:76:ea:4c:65:fc:e7:
cf:a6:d7:58:14:bc:12:0f:d9:13:d4:b1:b6:58:cc:
55:8f:8a:1b:39:ac:8b:ae:18:3d:99:be:23:60:a6:
73:ef:ac:ca:77:fa:28:8b:b9:43:7c:60:30:83:53:
19:82:5f:80:ef:e7:f3:de:1e:6e:a0:5d:da:18:b7:
19:d1:1b:25:ae:a1:a0:2d:83:e0:84:72:55:d4:ec:
04:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DC:ED:44:A9:BD:77:30:04:F4:55:45:BD:9B:7A:F4:FA:A5:13:17
X509v3 Authority Key Identifier:
keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fd:14:7b:d3:80:63:63:45:c5:76:3a:0e:0b:29:31:5c:a2:
ca:49:9c:55:03:ba:62:26:4f:60:53:e4:ad:78:9f:02:59:19:
4a:f4:9c:95:16:86:70:c9:99:3c:cd:50:64:43:21:e3:22:b8:
c7:36:3a:ac:c6:72:d4:9a:0c:0e:4c:9f:9f:cb:e6:c8:18:c0:
7d:7f:bf:05:40:05:5f:9d:7d:a9:11:b0:6f:d9:71:ac:47:d2:
34:d0:fd:0a:d2:15:59:3a:4a:3d:f4:d5:c7:bf:c3:7b:02:14:
41:fb:45:41:43:35:51:75:3e:86:bc:68:8b:2b:7f:1b:50:c8:
2d:dc:4b:4a:15:5f:97:86:eb:df:a7:59:f3:06:ce:40:59:62:
ab:a1:5c:64:ae:4d:91:06:26:0c:0c:eb:dc:f2:36:81:ba:a7:
10:20:73:02:f5:55:e0:b3:e0:1b:f4:3c:a1:03:9b:eb:08:e8:
62:c3:dc:a2:ad:7a:b0:05:6d:ce:5e:a6:32:f4:ad:e8:7c:9b:
f0:cf:0a:de:26:94:4a:b2:a0:bb:46:24:4c:24:63:22:a8:b8:
20:e2:e0:bb:3b:4c:ec:a7:7d:67:b5:dc:e0:6c:1c:0a:41:80:
0b:31:3b:45:9f:24:88:49:99:6f:09:55:b9:36:f2:39:2f:4d:
a6:c0:8b:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRZ28sKEjMxO/yy/wsDSKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMWM4OTk3YTM1NGJjN2Q0ZTVhNjBhOWY0MjQzOGExODJm
YTk5OGEwHhcNMjYwMzAxMTIwMDM3WhcNMjYwMzAyMTIwMDM3WjAzMTEwLwYDVQQD
EygyY2RjZWQ0NGE5YmQ3NzMwMDRmNDU1NDViZDliN2FmNGZhYTUxMzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjEz3Uvwl6QVcTN046nnH2Ub5niA
jh/0c9KU+o2cX7mVTGBBbBFwusHbE9n57xEBf6JTd/hY2Yw0fk/9dYMHamySxjs/
KNfZyLIvhPUnOP54qS57idiixq+KBWrXGiEj/r+xCPlgBr73k9ieNP2RV5Tl7A5p
v2UPLjQnoBQR0oKrarNRCJOphzArfkYjmor1bbSqsADcc9wWrkYUY06rI53X1wX9
sl/T4uyp+9J26kxl/OfPptdYFLwSD9kT1LG2WMxVj4obOayLrhg9mb4jYKZz76zK
d/ooi7lDfGAwg1MZgl+A7+fz3h5uoF3aGLcZ0RslrqGgLYPghHJV1OwEaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzc7USpvXcwBPRVRb2bevT6pRMXMB8GA1UdIwQY
MBaAFPAciZejVLx9TlpgqfQkOKGC+pmKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mYWE5NWYtM2IzMi00MWZlLWFiZTMt
YzI3YzRhNjEwYmQzLzEvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9mYWE5NWYtM2IzMi00MWZlLWFiZTMtYzI3YzRhNjEwYmQz
LzEvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWP0Ue9OA
Y2NFxXY6DgspMVyiykmcVQO6YiZPYFPkrXifAlkZSvSclRaGcMmZPM1QZEMh4yK4
xzY6rMZy1JoMDkyfn8vmyBjAfX+/BUAFX519qRGwb9lxrEfSNND9CtIVWTpKPfTV
x7/DewIUQftFQUM1UXU+hrxoiyt/G1DILdxLShVfl4br36dZ8wbOQFliq6FcZK5N
kQYmDAzr3PI2gbqnECBzAvVV4LPgG/Q8oQOb6wjoYsPcoq16sAVtzl6mMvSt6Hyb
8M8K3iaUSrKgu0YkTCRjIqi4IOLguztM7Kd9Z7Xc4GwcCkGACzE7RZ8kiEmZbwlV
uTbyOS9NpsCL1A==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:49 2026 by rpki-client