Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
File: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json)
Hash identifier: fUvGGY2FuyHQ/pNjqgnOMwy4YraqTkoeHQljfUnRcjs=
Subject key identifier: 71:AF:B8:18:16:A0:2A:96:AF:F3:8C:DC:AD:B0:CD:4B:87:CB:8F:04
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial: 019CAC46CF29F9E390873E92FB6E2C29506B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
Manifest number: 07F2
Signing time: Mon 02 Mar 2026 02:00:47 +0000
Manifest this update: Mon 02 Mar 2026 02:00:47 +0000
Manifest next update: Tue 03 Mar 2026 02:00:47 +0000
Files and hashes: 1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: OGezkYXKrW20b/tCJwvQnO2i/qVo4CHHyTtooKHH99Y=)
2: wiI82FzKN8vwB6F4isg7_RvCxHg.roa (hash: riiq1OTIvoc7oa6B3EfI2fFnF1gD9CxZmEkDu3QsQ0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:cf:29:f9:e3:90:87:3e:92:fb:6e:2c:29:50:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Validity
Not Before: Mar 2 02:00:47 2026 GMT
Not After : Mar 3 02:00:47 2026 GMT
Subject: CN=71afb81816a02a96aff38cdcadb0cd4b87cb8f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a9:34:9d:df:87:67:ea:ad:9c:a6:72:6c:93:
83:31:1b:d0:f1:50:1a:58:1c:53:7a:06:0b:d1:5b:
81:75:09:0a:2a:56:04:1e:cc:f6:ed:84:33:8a:63:
e8:be:59:4c:5b:90:df:13:0e:1e:49:f2:9a:4a:d0:
82:25:b2:80:77:3a:dd:ee:c4:75:5f:76:9f:7b:24:
94:96:e6:31:da:96:fa:25:2d:1c:c5:e3:97:30:ac:
f6:60:03:a1:a1:b1:b7:88:28:4a:dc:4b:43:a8:80:
6c:4d:e1:c4:a7:4c:5c:dd:39:50:96:d2:63:c7:29:
7c:54:a8:4d:e7:20:56:07:96:ea:22:27:29:2e:a1:
95:87:b4:ad:af:0b:ae:59:88:c6:22:90:66:35:1c:
ba:20:7c:a4:2a:be:1b:e8:08:e0:ef:07:38:d9:00:
ee:89:85:9e:31:b1:fd:ce:0d:db:32:79:63:1c:d1:
27:c2:a3:a9:06:79:79:e9:85:c8:11:67:2f:34:92:
d6:59:36:08:72:da:fa:70:8a:8a:bc:0a:87:3d:46:
25:9b:37:0c:32:c6:0d:3d:52:0c:8c:9b:e1:a1:1b:
15:66:43:36:cd:43:92:28:b8:fb:43:3e:a2:4b:58:
7e:96:e9:8a:2e:c2:2d:5c:d0:cb:95:d4:28:31:f3:
42:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AF:B8:18:16:A0:2A:96:AF:F3:8C:DC:AD:B0:CD:4B:87:CB:8F:04
X509v3 Authority Key Identifier:
keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:29:ce:08:97:58:a4:44:22:c1:7a:9f:d2:14:1f:7d:2e:2a:
93:8c:8a:1d:68:d8:a5:4f:52:16:10:37:a8:c7:be:69:63:78:
48:80:7f:c9:c6:ae:8a:59:65:c5:4a:1e:5e:a9:b1:57:6e:06:
33:b8:e7:7d:1f:99:dc:4a:02:26:b7:c4:05:12:63:f5:ac:a1:
ac:ff:3d:e0:58:4e:7e:67:72:53:b6:40:a1:63:67:d9:a0:b6:
a2:00:8f:27:98:28:ce:b7:d5:aa:84:95:19:c4:f8:a9:88:df:
3a:bd:a5:7e:03:d7:03:1d:63:e2:9a:e4:be:78:19:b6:73:8a:
cc:1d:d9:da:e8:fa:8f:93:1b:5d:55:bd:46:d8:62:ec:3d:65:
d6:e7:7a:e2:06:86:91:9f:21:86:c3:49:e2:77:b2:a3:39:9a:
d8:3a:be:73:f2:3e:95:f8:81:ae:ef:b9:2c:6f:be:c9:49:8a:
5e:56:fc:da:2a:9c:f1:56:53:5d:2c:d2:34:53:bb:06:68:14:
ee:f5:91:c7:9b:77:92:93:40:57:90:ce:bb:2d:e2:ab:97:f0:
1a:f9:f4:4c:e6:df:60:5c:a0:e5:ff:d7:c8:0c:88:a7:dd:fe:
e7:94:43:43:b9:8d:1e:25:2d:55:34:82:ad:70:d8:f2:34:89:
e6:52:c0:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRs8p+eOQhz6S+24sKVBrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMmQ1ZjE3NjM2YTFmMTRlZmE4YTBlNDA5OWIzZDMzNWZm
ODRkZDMwHhcNMjYwMzAyMDIwMDQ3WhcNMjYwMzAzMDIwMDQ3WjAzMTEwLwYDVQQD
Eyg3MWFmYjgxODE2YTAyYTk2YWZmMzhjZGNhZGIwY2Q0Yjg3Y2I4ZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKk0nd+HZ+qtnKZybJODMRvQ8VAa
WBxTegYL0VuBdQkKKlYEHsz27YQzimPovllMW5DfEw4eSfKaStCCJbKAdzrd7sR1
X3afeySUluYx2pb6JS0cxeOXMKz2YAOhobG3iChK3EtDqIBsTeHEp0xc3TlQltJj
xyl8VKhN5yBWB5bqIicpLqGVh7StrwuuWYjGIpBmNRy6IHykKr4b6Ajg7wc42QDu
iYWeMbH9zg3bMnljHNEnwqOpBnl56YXIEWcvNJLWWTYIctr6cIqKvAqHPUYlmzcM
MsYNPVIMjJvhoRsVZkM2zUOSKLj7Qz6iS1h+lumKLsItXNDLldQoMfNCgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGvuBgWoCqWr/OM3K2wzUuHy48EMB8GA1UdIwQY
MBaAFPItXxdjah8U76ig5AmbPTNf+E3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zZDM5ODYtNmQ0Mi00YjNkLTlmYzAt
NjExYTJhMWI4MjI0LzEvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zZDM5ODYtNmQ0Mi00YjNkLTlmYzAtNjExYTJhMWI4MjI0
LzEvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApynOCJdY
pEQiwXqf0hQffS4qk4yKHWjYpU9SFhA3qMe+aWN4SIB/ycauilllxUoeXqmxV24G
M7jnfR+Z3EoCJrfEBRJj9ayhrP894FhOfmdyU7ZAoWNn2aC2ogCPJ5gozrfVqoSV
GcT4qYjfOr2lfgPXAx1j4prkvngZtnOKzB3Z2uj6j5MbXVW9Rthi7D1l1ud64gaG
kZ8hhsNJ4neyozma2Dq+c/I+lfiBru+5LG++yUmKXlb82iqc8VZTXSzSNFO7BmgU
7vWRx5t3kpNAV5DOuy3iq5fwGvn0TObfYFyg5f/XyAyIp93+55RDQ7mNHiUtVTSC
rXDY8jSJ5lLAew==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:35 2026 by rpki-client