Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
File: 8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json)
Hash identifier: WXLSu6/SfzZNIXn9YWUqfWo/ue1Frw6c4f/Jnc2eNso=
Subject key identifier: E4:E0:1F:82:ED:D2:D4:0A:28:2A:9F:FD:F0:2A:ED:22:A3:5B:16:63
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Certificate issuer: /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial: 019CAA217BB748F2304D328D119DA2C04DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
Manifest number: 0FD3
Signing time: Sun 01 Mar 2026 16:00:46 +0000
Manifest this update: Sun 01 Mar 2026 16:00:46 +0000
Manifest next update: Mon 02 Mar 2026 16:00:46 +0000
Files and hashes: 1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: FgmJ+k/dpwUlYdf4n96v+kPf+s3QxOIVMkMBOuV/9W0=)
2: kAZmzQ0U-tWvr0f-02x69bXjUAU.roa (hash: 5WlvJHiQOeb7v4dnN4FdtefOtV8drHOu9JZO31PSCrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:7b:b7:48:f2:30:4d:32:8d:11:9d:a2:c0:4d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Validity
Not Before: Mar 1 16:00:46 2026 GMT
Not After : Mar 2 16:00:46 2026 GMT
Subject: CN=e4e01f82edd2d40a282a9ffdf02aed22a35b1663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:b4:37:84:b4:71:af:66:f0:01:1a:7a:72:
b2:73:be:8d:7b:e5:86:ee:77:ae:28:9e:26:3b:3c:
8b:13:3a:ce:fd:85:da:f0:ff:bb:0a:92:f1:92:86:
a2:2c:cd:13:3c:1c:12:1c:be:5e:88:63:37:15:be:
1e:e3:16:0e:b2:13:c0:a8:fa:d6:e6:5f:67:2b:04:
69:4f:c1:44:14:da:29:c1:6a:52:35:76:7f:04:ee:
51:bc:99:56:f2:fe:18:3c:1a:45:66:8f:49:50:0a:
fe:e3:16:4b:c2:4b:9f:a2:39:9f:ea:ca:94:3f:56:
1e:9b:78:59:9e:c1:5b:11:a2:97:5d:54:8e:3c:be:
3e:80:0f:32:5b:09:b3:93:a8:e8:e4:34:75:b9:c8:
4d:0f:96:9f:4b:b7:6d:15:04:51:e6:0e:17:5c:70:
de:92:0a:0f:1b:e1:fa:08:01:06:c0:77:45:e5:42:
6c:24:37:8d:15:c5:cc:7e:c8:ce:aa:bf:a3:5b:b5:
a0:ba:42:35:42:13:ca:c3:3e:cb:66:40:b2:1b:63:
c2:a0:b1:cd:2c:26:ea:26:0a:b1:f8:ee:dc:31:f2:
f8:e2:26:02:80:3e:54:a6:c9:25:f0:0f:5a:f1:be:
29:e7:c8:60:68:f1:37:73:e1:21:8f:cb:e3:08:10:
45:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E0:1F:82:ED:D2:D4:0A:28:2A:9F:FD:F0:2A:ED:22:A3:5B:16:63
X509v3 Authority Key Identifier:
keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2b:ae:ad:ca:d4:b1:f8:6a:f2:58:97:75:5b:ac:bf:05:86:
5d:07:cf:83:4e:bc:78:af:e2:d1:b1:ae:04:89:2a:07:69:1f:
e5:2f:e0:fe:cd:16:78:9b:1d:5d:7e:6d:da:39:db:fb:66:85:
e9:62:66:ae:f4:a6:97:ed:aa:6f:7b:4c:52:56:ec:c6:d7:22:
0c:4e:77:07:bb:08:1c:ff:40:53:a9:84:5f:a7:7d:48:dd:2a:
ee:55:74:d0:bf:1f:a6:79:8a:ae:2f:e1:8e:10:49:c5:f7:cb:
e4:30:c3:ae:8f:cd:75:86:bc:ca:b4:d8:9f:70:bf:c1:83:b3:
2f:c5:e3:c0:9f:a7:6c:16:84:57:fe:3f:e2:08:64:af:b4:99:
52:9b:d0:90:b4:7e:61:43:97:0f:f6:50:ec:d5:78:bb:f3:e6:
e8:3f:4e:44:f7:ac:7f:56:dd:c3:f7:15:d2:ca:bf:d0:02:f7:
a3:d2:37:cd:82:f7:04:ed:b5:f5:c6:5e:3c:cb:a3:99:5b:cc:
f4:2a:d7:89:33:b1:31:7a:f2:00:1a:3d:25:26:ba:4d:97:48:
55:4e:12:82:4c:01:6d:33:1a:2c:b2:e6:37:f3:50:84:55:25:
8e:38:5d:85:ef:4c:72:4f:fc:d0:29:44:86:69:f3:3e:34:d1:
40:11:93:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIXu3SPIwTTKNEZ2iwE3bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDVkZmRkZTRkNjc5YzcxMWNjZTA2ZWRmNDAzNmNhNGU1
Y2MxMDMwHhcNMjYwMzAxMTYwMDQ2WhcNMjYwMzAyMTYwMDQ2WjAzMTEwLwYDVQQD
EyhlNGUwMWY4MmVkZDJkNDBhMjgyYTlmZmRmMDJhZWQyMmEzNWIxNjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszW0N4S0ca9m8AEaenKyc76Ne+WG
7neuKJ4mOzyLEzrO/YXa8P+7CpLxkoaiLM0TPBwSHL5eiGM3Fb4e4xYOshPAqPrW
5l9nKwRpT8FEFNopwWpSNXZ/BO5RvJlW8v4YPBpFZo9JUAr+4xZLwkufojmf6sqU
P1Yem3hZnsFbEaKXXVSOPL4+gA8yWwmzk6jo5DR1uchND5afS7dtFQRR5g4XXHDe
kgoPG+H6CAEGwHdF5UJsJDeNFcXMfsjOqr+jW7WgukI1QhPKwz7LZkCyG2PCoLHN
LCbqJgqx+O7cMfL44iYCgD5Upskl8A9a8b4p58hgaPE3c+Ehj8vjCBBF0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTgH4Lt0tQKKCqf/fAq7SKjWxZjMB8GA1UdIwQY
MBaAFPDV393k1nnHEczgbt9ANspOXMEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mMmVjZjgtN2M1Yy00NWFiLTgzZjct
ZTc0ZDQ0OTBhZjZjLzEvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9mMmVjZjgtN2M1Yy00NWFiLTgzZjctZTc0ZDQ0OTBhZjZj
LzEvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSuurcrU
sfhq8liXdVusvwWGXQfPg068eK/i0bGuBIkqB2kf5S/g/s0WeJsdXX5t2jnb+2aF
6WJmrvSml+2qb3tMUlbsxtciDE53B7sIHP9AU6mEX6d9SN0q7lV00L8fpnmKri/h
jhBJxffL5DDDro/NdYa8yrTYn3C/wYOzL8XjwJ+nbBaEV/4/4ghkr7SZUpvQkLR+
YUOXD/ZQ7NV4u/Pm6D9ORPesf1bdw/cV0sq/0AL3o9I3zYL3BO219cZePMujmVvM
9CrXiTOxMXryABo9JSa6TZdIVU4SgkwBbTMaLLLmN/NQhFUljjhdhe9Mck/80ClE
hmnzPjTRQBGTwg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:16 2026 by rpki-client