
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
File: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft (raw, json)
Hash identifier: PWz2MPPkfqBKmy8xpGTh01goJIo3mIREnuoL4gKIn0c=
Subject key identifier: 47:A2:27:B2:09:B0:41:BB:70:31:4C:22:F6:6A:46:64:03:E5:EB:AB
Authority key identifier: F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
Certificate issuer: /CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Certificate serial: 019CAC4690C789DDDFAC4195D1E6E2DFF9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
Manifest number: 0F26
Signing time: Mon 02 Mar 2026 02:00:31 +0000
Manifest this update: Mon 02 Mar 2026 02:00:31 +0000
Manifest next update: Tue 03 Mar 2026 02:00:31 +0000
Files and hashes: 1: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl (hash: cMJjHY2v2KEJClVrRFAVNylVaPskWhkb4moSOplKFdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:90:c7:89:dd:df:ac:41:95:d1:e6:e2:df:f9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Validity
Not Before: Mar 2 02:00:31 2026 GMT
Not After : Mar 3 02:00:31 2026 GMT
Subject: CN=47a227b209b041bb70314c22f66a466403e5ebab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:2d:93:8c:55:8d:d7:0c:e5:d0:3c:ce:dd:
27:9c:12:19:28:80:42:78:0e:db:29:d2:17:a2:31:
e5:ef:8a:34:b5:56:8f:8a:d4:30:aa:ec:1e:cd:8b:
6b:6c:18:23:e1:96:c7:36:8f:c6:c8:4b:32:71:e7:
c4:bc:51:33:63:4b:f4:d5:60:45:87:79:84:61:7c:
90:ad:0d:a1:cf:08:28:c3:f5:f6:7d:8a:6b:80:7e:
60:53:80:99:e3:89:24:19:a4:9a:c0:54:4e:5b:b9:
09:9d:e7:13:e7:60:71:3d:6f:34:d0:e6:f5:c7:ec:
ca:53:f5:fa:c1:bb:c9:28:e3:fd:57:2a:19:c8:55:
6b:a1:9c:42:b0:ef:5e:54:a4:c2:3b:ea:7e:92:99:
5f:22:13:15:95:d7:c0:0e:4e:d6:11:f9:5c:3e:b9:
8f:7f:77:a1:30:d4:3f:38:ad:aa:e4:11:31:43:b2:
c7:43:54:e7:13:9d:5f:2a:6f:a8:da:0b:21:f0:7f:
7e:90:f0:45:c9:2d:d4:7b:0f:31:c7:a2:0c:bb:6f:
78:0c:2c:59:5d:8a:52:55:c8:c6:2d:82:ac:0b:40:
78:77:50:0b:9f:4a:b7:95:c1:48:87:2f:bf:67:95:
ae:46:76:36:ab:b6:8e:58:1a:85:1d:53:1d:c3:11:
88:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A2:27:B2:09:B0:41:BB:70:31:4C:22:F6:6A:46:64:03:E5:EB:AB
X509v3 Authority Key Identifier:
keyid:F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:db:d8:f5:5b:2d:12:87:12:e2:e8:56:3b:b1:aa:6d:bb:15:
f2:fc:c1:47:51:69:f0:00:36:7a:af:00:c8:10:97:a8:b2:15:
d5:ac:33:7d:6a:6a:b9:ca:01:7e:11:cc:7b:d4:6c:f9:2e:63:
de:1b:77:e8:14:ee:6d:de:cc:f5:0d:aa:13:67:84:cf:41:c3:
df:7e:41:a7:49:4c:27:b7:eb:0b:bb:5b:03:2c:dc:89:db:67:
01:84:3b:19:35:41:4e:80:da:bb:39:59:af:3f:55:29:5f:66:
11:4c:59:ee:b4:92:96:f2:a0:31:99:18:70:e8:71:49:eb:f7:
1b:d9:8e:f7:b6:fb:2f:4d:77:b2:8f:a9:6d:fa:24:ff:f7:e3:
42:93:b9:58:5f:b3:4d:f5:8e:4b:90:22:81:0b:7d:45:c5:61:
3d:22:3a:a8:73:7a:2a:6f:48:6a:b0:f2:b8:a9:b8:a6:bc:79:
e2:8b:68:a0:b2:e4:ea:de:40:63:76:41:b6:4e:ba:7b:8e:eb:
a7:67:4f:de:9b:26:a5:21:ea:83:23:06:18:4e:9a:68:fc:0a:
24:f7:ff:44:d7:23:52:58:f7:8c:a3:f6:99:17:86:78:cc:75:
4b:cc:8d:18:db:64:dc:d2:16:23:22:08:f0:56:e6:09:32:df:
b1:71:a9:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRpDHid3frEGV0ebi3/mzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZTZmMTVlZjc1MjY0OWYzYjExODdkZTY4M2ZlODNiMWNl
NjlmMDMwHhcNMjYwMzAyMDIwMDMxWhcNMjYwMzAzMDIwMDMxWjAzMTEwLwYDVQQD
Eyg0N2EyMjdiMjA5YjA0MWJiNzAzMTRjMjJmNjZhNDY2NDAzZTVlYmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl4tk4xVjdcM5dA8zt0nnBIZKIBC
eA7bKdIXojHl74o0tVaPitQwquwezYtrbBgj4ZbHNo/GyEsycefEvFEzY0v01WBF
h3mEYXyQrQ2hzwgow/X2fYprgH5gU4CZ44kkGaSawFROW7kJnecT52BxPW800Ob1
x+zKU/X6wbvJKOP9VyoZyFVroZxCsO9eVKTCO+p+kplfIhMVldfADk7WEflcPrmP
f3ehMNQ/OK2q5BExQ7LHQ1TnE51fKm+o2gsh8H9+kPBFyS3Uew8xx6IMu294DCxZ
XYpSVcjGLYKsC0B4d1ALn0q3lcFIhy+/Z5WuRnY2q7aOWBqFHVMdwxGIPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeiJ7IJsEG7cDFMIvZqRmQD5eurMB8GA1UdIwQY
MBaAFPHm8V73UmSfOxGH3mg/6Dsc5p8DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGVieFh2ZFNaSjg3RVlmZWFEX29PeHptbndNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wNGE0MmEtZDQ1NC00YTZlLWJjYmQt
NzdlNmQzNjNiMTkyLzEvOGVieFh2ZFNaSjg3RVlmZWFEX29PeHptbndNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wNGE0MmEtZDQ1NC00YTZlLWJjYmQtNzdlNmQzNjNiMTky
LzEvOGVieFh2ZFNaSjg3RVlmZWFEX29PeHptbndNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktvY9Vst
EocS4uhWO7GqbbsV8vzBR1Fp8AA2eq8AyBCXqLIV1awzfWpqucoBfhHMe9Rs+S5j
3ht36BTubd7M9Q2qE2eEz0HD335Bp0lMJ7frC7tbAyzcidtnAYQ7GTVBToDauzlZ
rz9VKV9mEUxZ7rSSlvKgMZkYcOhxSev3G9mO97b7L013so+pbfok//fjQpO5WF+z
TfWOS5AigQt9RcVhPSI6qHN6Km9IarDyuKm4prx54otooLLk6t5AY3ZBtk66e47r
p2dP3psmpSHqgyMGGE6aaPwKJPf/RNcjUlj3jKP2mReGeMx1S8yNGNtk3NIWIyII
8FbmCTLfsXGpuQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:21 2026 by rpki-client