Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
File: 8l2dskSP6XudF6RL5dZEhI-gGOE.mft (raw, json)
Hash identifier: +wp2mREQGezXcCONBbtMTrnQTUGr2pP6j9eyzwMDW1o=
Subject key identifier: 2D:41:AD:2E:DC:B6:24:63:44:E9:41:D8:42:9C:56:EA:02:7E:51:42
Authority key identifier: F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1
Certificate issuer: /CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
Certificate serial: 019CAB346192CBFFADAF756083872F113762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:01:02 +0000
Manifest this update: Sun 01 Mar 2026 21:01:02 +0000
Manifest next update: Mon 02 Mar 2026 21:01:02 +0000
Files and hashes: 1: 8l2dskSP6XudF6RL5dZEhI-gGOE.crl (hash: jS/Bsm7QrFe4uXYXKVvC5hBVEp+TeTn4/LHggfGJ5K8=)
2: SmR3reVpg9Oftt2wG6VeqB7WbmE.roa (hash: 0SJZoaTugeFDErq1aPzr3jWd7TCUqCyvEDw1XhqHPJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:61:92:cb:ff:ad:af:75:60:83:87:2f:11:37:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
Validity
Not Before: Mar 1 21:01:02 2026 GMT
Not After : Mar 2 21:01:02 2026 GMT
Subject: CN=2d41ad2edcb6246344e941d8429c56ea027e5142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:3f:af:a7:4b:6d:47:da:28:a7:d9:c4:af:
89:51:96:6b:9f:a5:53:b2:63:8a:e8:e5:5d:f0:d0:
4c:0b:0f:85:de:e2:53:1f:9a:50:18:6d:6b:66:ca:
24:fc:2b:01:68:32:0d:30:81:08:b8:b0:6d:d6:88:
85:5f:83:8e:ea:77:0a:0f:f2:40:f8:bd:10:95:ef:
15:c7:bf:30:93:90:cd:c8:99:64:c6:1f:0e:5a:3c:
2d:13:b2:d7:01:02:80:57:6b:02:d9:7c:63:cb:ae:
5d:11:5f:3d:0d:e3:e8:dc:6c:2a:54:f8:0f:11:56:
5c:89:c1:38:41:7f:be:4d:a2:06:ab:5c:8c:6d:fc:
02:a4:f4:4b:24:13:5a:17:db:6c:71:b0:32:8a:64:
23:ff:59:1e:d3:48:a7:91:4d:ea:91:50:14:b2:a4:
89:ec:db:54:8a:03:dc:c7:a3:5d:11:1e:01:bb:9c:
61:47:21:b5:b2:31:c7:78:2d:7f:c0:45:6f:3a:bc:
b8:2f:4c:01:3f:b2:71:af:68:76:de:6f:49:11:5d:
a7:4b:04:82:50:83:07:33:ce:88:16:4b:27:32:bf:
1d:10:a0:01:66:4f:e1:be:4a:2c:47:a8:fd:4f:af:
08:b1:78:75:ca:cd:61:9a:da:82:e4:f8:98:cc:97:
31:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:41:AD:2E:DC:B6:24:63:44:E9:41:D8:42:9C:56:EA:02:7E:51:42
X509v3 Authority Key Identifier:
keyid:F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3c:30:cf:da:e3:e5:2c:ea:e6:23:3c:80:f7:65:a6:0e:f0:
11:e8:0f:8f:7c:69:20:00:4a:ed:8b:52:83:a8:36:e9:c7:c4:
87:94:ac:67:19:cd:e3:bd:aa:8d:be:fc:53:59:84:8f:65:e3:
ba:aa:29:51:a7:08:89:aa:be:ad:e4:9c:37:fd:8a:69:1a:ae:
71:26:05:90:eb:9c:45:6c:7a:d3:f5:b5:d2:a7:bc:b7:fc:57:
1a:ef:06:bd:6d:84:09:a2:ea:8e:ed:bb:58:84:8d:90:ea:3d:
4b:80:90:c9:53:7b:d5:6a:8a:f5:be:50:6a:62:6d:5d:23:67:
92:1b:03:c1:c2:ba:4d:b5:c8:4b:ee:49:bf:7c:d0:6b:62:05:
4d:21:a8:7b:e1:6f:dd:be:d5:12:37:29:15:6a:94:50:b0:83:
60:8b:f2:8d:a4:11:82:7f:75:3c:98:4d:ac:8c:79:f4:7d:57:
9e:cd:ab:40:c3:b1:25:fc:c0:7b:05:b5:ec:85:5d:66:32:50:
fd:d9:6e:34:9f:35:27:15:54:37:09:38:a6:68:4e:7c:6f:2b:
32:1a:bb:29:50:d6:cf:d2:db:16:cc:71:d9:5b:93:d1:0d:75:
c8:34:51:89:a5:aa:51:6d:42:46:93:68:13:81:b9:af:3c:5b:
00:f9:8b:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNGGSy/+tr3Vgg4cvETdiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNWQ5ZGIyNDQ4ZmU5N2I5ZDE3YTQ0YmU1ZDY0NDg0OGZh
MDE4ZTEwHhcNMjYwMzAxMjEwMTAyWhcNMjYwMzAyMjEwMTAyWjAzMTEwLwYDVQQD
EygyZDQxYWQyZWRjYjYyNDYzNDRlOTQxZDg0MjljNTZlYTAyN2U1MTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+g/r6dLbUfaKKfZxK+JUZZrn6VT
smOK6OVd8NBMCw+F3uJTH5pQGG1rZsok/CsBaDINMIEIuLBt1oiFX4OO6ncKD/JA
+L0Qle8Vx78wk5DNyJlkxh8OWjwtE7LXAQKAV2sC2Xxjy65dEV89DePo3GwqVPgP
EVZcicE4QX++TaIGq1yMbfwCpPRLJBNaF9tscbAyimQj/1ke00inkU3qkVAUsqSJ
7NtUigPcx6NdER4Bu5xhRyG1sjHHeC1/wEVvOry4L0wBP7Jxr2h23m9JEV2nSwSC
UIMHM86IFksnMr8dEKABZk/hvkosR6j9T68IsXh1ys1hmtqC5PiYzJcxFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1BrS7ctiRjROlB2EKcVuoCflFCMB8GA1UdIwQY
MBaAFPJdnbJEj+l7nRekS+XWRISPoBjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MTYwOGYtZmQ0Yi00MjY4LWE2ZTMt
NWVjYjIxZmNmYTc1LzEvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81MTYwOGYtZmQ0Yi00MjY4LWE2ZTMtNWVjYjIxZmNmYTc1
LzEvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDwwz9rj
5Szq5iM8gPdlpg7wEegPj3xpIABK7YtSg6g26cfEh5SsZxnN472qjb78U1mEj2Xj
uqopUacIiaq+reScN/2KaRqucSYFkOucRWx60/W10qe8t/xXGu8GvW2ECaLqju27
WISNkOo9S4CQyVN71WqK9b5QamJtXSNnkhsDwcK6TbXIS+5Jv3zQa2IFTSGoe+Fv
3b7VEjcpFWqUULCDYIvyjaQRgn91PJhNrIx59H1Xns2rQMOxJfzAewW17IVdZjJQ
/dluNJ81JxVUNwk4pmhOfG8rMhq7KVDWz9LbFsxx2VuT0Q11yDRRiaWqUW1CRpNo
E4G5rzxbAPmLfA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:47 2026 by rpki-client