Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json)
Hash identifier: 3RAAJvlw4YoDEIowZX8I3T9WNRcTngQHve5SDNIVM54=
Subject key identifier: 84:6F:04:16:29:B5:59:81:03:5F:47:69:2C:19:5C:80:91:A7:4A:A1
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 019CAA8F6121C2F435A5618AFEDBFE5C24AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
Manifest number: 110A
Signing time: Sun 01 Mar 2026 18:00:49 +0000
Manifest this update: Sun 01 Mar 2026 18:00:49 +0000
Manifest next update: Mon 02 Mar 2026 18:00:49 +0000
Files and hashes: 1: 7vuFGqZCxLzD91LmtcVrwRVipP0.roa (hash: exBwARjGLtxZJRWm9krMbKUblEEFQ4G0buGpMyQ+bjU=)
2: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: G4klS3rII7pherIHEDppV/v09jD3UgYKDDTLn2ho9lU=)
3: achjIHDKww_TLSJu-NnrKxU3--A.roa (hash: GHcbBAVqUMC4lX8HAJJpjhpVUyf1FlS4/jLemAj83YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:61:21:c2:f4:35:a5:61:8a:fe:db:fe:5c:24:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Mar 1 18:00:49 2026 GMT
Not After : Mar 2 18:00:49 2026 GMT
Subject: CN=846f041629b55981035f47692c195c8091a74aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2a:0e:02:fd:20:a4:ef:00:f0:a5:86:cd:90:
93:7f:f7:18:4d:49:e4:d2:21:4c:b7:c5:e2:23:76:
9a:2b:2f:33:f4:43:03:3c:c5:2e:bf:e3:86:b5:d4:
f0:e9:12:b8:d1:8e:c4:83:7c:13:da:e7:7a:bd:6b:
79:e8:e9:81:28:51:3e:dc:32:a6:1d:8b:ed:45:62:
20:e5:02:5f:f0:34:76:3b:75:14:31:bd:ea:0b:d8:
2f:1b:85:5d:33:e5:cf:76:60:12:f3:f1:45:d1:10:
7c:bc:be:51:77:e5:04:93:00:5e:3f:f0:b3:a8:7f:
64:37:41:30:59:b5:17:d4:48:96:92:50:f3:38:84:
f1:93:0b:8e:00:f4:f6:15:f4:ee:f6:73:44:ec:e1:
87:d0:50:f9:08:60:4e:72:a3:d0:f3:4a:c2:11:15:
f4:84:c4:ac:56:b6:8d:b9:93:1a:99:49:f9:25:2f:
d9:65:16:6c:af:33:38:1c:a7:03:e4:3c:20:88:03:
4e:29:27:06:74:b7:22:99:a3:13:17:5b:41:d9:54:
f6:52:ef:3c:d4:df:0f:ed:66:8b:b0:c8:73:7a:bc:
53:dc:cd:aa:cf:27:e0:00:14:54:bb:94:e5:2c:fa:
44:6f:96:2c:e0:85:dc:32:85:36:02:59:64:9a:1a:
a8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6F:04:16:29:B5:59:81:03:5F:47:69:2C:19:5C:80:91:A7:4A:A1
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ca:05:eb:74:b1:10:53:4a:62:5e:7f:62:7c:92:c8:c5:2b:
07:45:9b:44:89:5a:32:1c:45:4f:31:41:73:2e:08:b3:35:3d:
e1:94:7b:ea:c0:4a:86:f5:1b:92:75:e3:ed:68:e5:2e:5d:5e:
45:d7:a2:45:5d:c4:a7:83:23:51:47:95:91:0a:1a:0c:e0:18:
61:72:34:8b:11:83:8c:2c:42:ca:f4:71:23:a9:a2:95:59:95:
a6:c6:a4:7a:25:72:e4:bd:cd:45:14:b0:de:5b:e0:87:9c:19:
78:d8:72:78:21:f3:76:56:2d:97:08:cd:b0:ad:02:68:e0:4f:
16:bd:55:c3:a3:70:bb:97:91:3b:8a:13:7b:0f:44:1e:42:9a:
ac:9a:b3:61:73:e1:b8:9c:6f:4c:a4:0f:57:aa:df:d8:1b:dc:
31:f3:51:b1:07:51:c2:f4:f4:fd:02:88:59:d9:ee:d5:4a:8b:
ef:86:db:e2:28:f2:db:04:e2:ea:9b:cb:f9:8e:14:1d:0d:f1:
aa:e3:a9:48:ed:86:d0:b2:fd:f8:1b:07:a9:71:bf:14:21:24:
c6:36:ea:5f:63:be:37:eb:41:76:1e:2e:64:55:e6:57:cc:86:
9f:2e:24:ea:5f:4a:3a:c4:c8:91:b4:ea:0e:28:91:3e:8e:e8:
29:f1:86:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj2EhwvQ1pWGK/tv+XCSrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOGZiYTUyNjM1MTliN2MzYTIxNTVjNjk4NzgyMTc3NzZk
ZWZiYTAwHhcNMjYwMzAxMTgwMDQ5WhcNMjYwMzAyMTgwMDQ5WjAzMTEwLwYDVQQD
Eyg4NDZmMDQxNjI5YjU1OTgxMDM1ZjQ3NjkyYzE5NWM4MDkxYTc0YWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SoOAv0gpO8A8KWGzZCTf/cYTUnk
0iFMt8XiI3aaKy8z9EMDPMUuv+OGtdTw6RK40Y7Eg3wT2ud6vWt56OmBKFE+3DKm
HYvtRWIg5QJf8DR2O3UUMb3qC9gvG4VdM+XPdmAS8/FF0RB8vL5Rd+UEkwBeP/Cz
qH9kN0EwWbUX1EiWklDzOITxkwuOAPT2FfTu9nNE7OGH0FD5CGBOcqPQ80rCERX0
hMSsVraNuZMamUn5JS/ZZRZsrzM4HKcD5DwgiANOKScGdLcimaMTF1tB2VT2Uu88
1N8P7WaLsMhzerxT3M2qzyfgABRUu5TlLPpEb5Ys4IXcMoU2AllkmhqoDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRvBBYptVmBA19HaSwZXICRp0qhMB8GA1UdIwQY
MBaAFPCPulJjUZt8OiFVxph4IXd23vugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xYmIxYTItNjc2My00YjI0LWFkODgt
MDY0MTNjZWVmY2UwLzEvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xYmIxYTItNjc2My00YjI0LWFkODgtMDY0MTNjZWVmY2Uw
LzEvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMoF63Sx
EFNKYl5/YnySyMUrB0WbRIlaMhxFTzFBcy4IszU94ZR76sBKhvUbknXj7WjlLl1e
RdeiRV3Ep4MjUUeVkQoaDOAYYXI0ixGDjCxCyvRxI6milVmVpsakeiVy5L3NRRSw
3lvgh5wZeNhyeCHzdlYtlwjNsK0CaOBPFr1Vw6Nwu5eRO4oTew9EHkKarJqzYXPh
uJxvTKQPV6rf2BvcMfNRsQdRwvT0/QKIWdnu1UqL74bb4ijy2wTi6pvL+Y4UHQ3x
quOpSO2G0LL9+BsHqXG/FCEkxjbqX2O+N+tBdh4uZFXmV8yGny4k6l9KOsTIkbTq
DiiRPo7oKfGGVQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:11 2026 by rpki-client