Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
File: 8iL76FrkCNN3shfU66eziyS69d0.mft (raw, json)
Hash identifier: gOdIqf9GP8p8K+5eJMdKDSG9VmEtBTlx9n2gl3BntLQ=
Subject key identifier: 5A:8D:2D:CC:56:68:77:5B:B0:D1:AF:89:D0:10:B9:CE:1B:97:46:0B
Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
Certificate issuer: /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Certificate serial: 019CA97CFF6F337A68EC040C33F157E0750C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
Manifest number: 0EF5
Signing time: Sun 01 Mar 2026 13:01:07 +0000
Manifest this update: Sun 01 Mar 2026 13:01:07 +0000
Manifest next update: Mon 02 Mar 2026 13:01:07 +0000
Files and hashes: 1: 8iL76FrkCNN3shfU66eziyS69d0.crl (hash: qEz9y09oan65MNSMeN8z5WfpIt6SIVpyGGFejsI9mo8=)
2: RAC2EIsVMHG6hRns7HbMn17gGls.roa (hash: FF3H1038Rgf//9+NtLOprCe/ZirTllG7HflUAk9dINQ=)
3: nxP6oV7FFuyKT5VZI8Lr0S_v3YA.roa (hash: iN63qFqYR+Oirh/aAc/OhTjdpHDfVt7KEG3Iws+eD0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:ff:6f:33:7a:68:ec:04:0c:33:f1:57:e0:75:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Validity
Not Before: Mar 1 13:01:07 2026 GMT
Not After : Mar 2 13:01:07 2026 GMT
Subject: CN=5a8d2dcc5668775bb0d1af89d010b9ce1b97460b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:28:45:be:ca:86:bd:af:a0:0e:e3:ca:10:ff:
e3:3f:43:89:69:89:9d:8b:0e:11:81:bf:78:b2:da:
ca:de:e1:ea:84:7e:a7:60:02:74:f0:83:82:62:44:
d5:d0:bd:96:82:2c:c6:19:e0:4b:af:cb:75:81:79:
d1:ce:d4:52:3c:63:f3:1d:e6:13:51:5c:46:a2:97:
83:78:74:73:37:f3:c0:42:5f:3d:2d:cf:1c:fe:20:
5c:74:58:ac:dd:68:1e:db:34:7b:d7:10:15:ee:c3:
48:78:8c:12:89:b8:6c:d2:42:92:8a:c0:39:bf:6b:
f7:54:51:9d:26:e0:95:59:ce:5a:21:60:3f:26:7c:
f1:5f:66:45:a8:93:ac:d6:ff:e8:e1:db:a6:49:cf:
89:54:67:fb:be:ef:1d:70:82:9a:9c:91:9b:e2:2d:
e7:98:c0:ce:42:14:6d:1a:3a:e0:1b:6a:c1:2c:0e:
18:6b:4d:09:be:74:09:49:39:cc:5d:00:b7:c3:2c:
e4:52:b2:75:54:5a:6f:2c:07:6a:d8:73:1c:76:52:
b9:99:f5:80:ba:65:40:ce:1a:31:6b:f3:27:2a:92:
60:77:e3:7f:65:07:7c:cd:65:33:8f:bf:25:d2:a5:
b4:6b:c4:dc:3d:5d:73:9d:6b:9b:db:8c:3e:35:32:
32:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8D:2D:CC:56:68:77:5B:B0:D1:AF:89:D0:10:B9:CE:1B:97:46:0B
X509v3 Authority Key Identifier:
keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:2a:85:0c:da:da:b8:13:27:c0:cc:e0:13:6d:b5:aa:85:22:
9d:c4:49:d3:50:d3:c6:3e:40:b3:0e:56:6d:78:47:75:7a:ba:
81:6b:35:7e:48:fd:91:f2:2b:ae:d6:73:e6:2e:a0:23:a0:71:
1a:de:4d:b8:01:85:55:8e:4d:2a:5d:b4:ed:25:9e:36:ca:cb:
2e:72:15:63:ac:d9:e6:a5:1f:c7:83:fd:c7:77:4c:e4:38:c8:
19:84:e7:14:df:20:6c:a0:0e:e7:57:e8:7c:43:c4:a0:d3:8d:
a9:12:80:d1:74:fb:11:d7:79:60:59:15:12:a3:6a:85:90:fc:
d3:d6:ee:3a:27:14:83:54:b0:ec:54:20:9d:29:c7:f8:33:55:
4d:f2:4c:65:e0:db:10:bc:9e:c8:ac:8d:94:26:66:d6:a3:94:
59:8b:4a:65:f3:78:d1:4f:e9:00:00:5f:da:8b:2d:c1:3b:59:
ae:42:e6:03:3d:8f:de:7f:b6:e9:78:cb:74:28:42:b3:de:bd:
d6:f7:c4:04:e7:a2:e2:42:d9:45:8b:0b:7a:e6:0a:68:7f:ca:
31:98:0b:22:02:5b:ee:72:2f:b6:31:a4:41:1b:10:a0:e6:0e:
5f:d7:b8:0d:03:9e:3e:6b:ee:d9:3b:dd:bc:73:aa:da:84:59:
eb:cc:01:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfP9vM3po7AQMM/FX4HUMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMjJmYmU4NWFlNDA4ZDM3N2IyMTdkNGViYTdiMzhiMjRi
YWY1ZGQwHhcNMjYwMzAxMTMwMTA3WhcNMjYwMzAyMTMwMTA3WjAzMTEwLwYDVQQD
Eyg1YThkMmRjYzU2Njg3NzViYjBkMWFmODlkMDEwYjljZTFiOTc0NjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApChFvsqGva+gDuPKEP/jP0OJaYmd
iw4Rgb94strK3uHqhH6nYAJ08IOCYkTV0L2WgizGGeBLr8t1gXnRztRSPGPzHeYT
UVxGopeDeHRzN/PAQl89Lc8c/iBcdFis3Wge2zR71xAV7sNIeIwSibhs0kKSisA5
v2v3VFGdJuCVWc5aIWA/JnzxX2ZFqJOs1v/o4dumSc+JVGf7vu8dcIKanJGb4i3n
mMDOQhRtGjrgG2rBLA4Ya00JvnQJSTnMXQC3wyzkUrJ1VFpvLAdq2HMcdlK5mfWA
umVAzhoxa/MnKpJgd+N/ZQd8zWUzj78l0qW0a8TcPV1znWub24w+NTIyDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqNLcxWaHdbsNGvidAQuc4bl0YLMB8GA1UdIwQY
MBaAFPIi++ha5AjTd7IX1Ouns4skuvXdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGlMNzZGcmtDTk4zc2hmVTY2ZXppeVM2OWQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xYWE4NzUtMDNiNS00YzE3LWJiMzkt
YjBjMWUzMzA0ZTc0LzEvOGlMNzZGcmtDTk4zc2hmVTY2ZXppeVM2OWQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8xYWE4NzUtMDNiNS00YzE3LWJiMzktYjBjMWUzMzA0ZTc0
LzEvOGlMNzZGcmtDTk4zc2hmVTY2ZXppeVM2OWQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSqFDNra
uBMnwMzgE221qoUincRJ01DTxj5Asw5WbXhHdXq6gWs1fkj9kfIrrtZz5i6gI6Bx
Gt5NuAGFVY5NKl207SWeNsrLLnIVY6zZ5qUfx4P9x3dM5DjIGYTnFN8gbKAO51fo
fEPEoNONqRKA0XT7Edd5YFkVEqNqhZD809buOicUg1Sw7FQgnSnH+DNVTfJMZeDb
ELyeyKyNlCZm1qOUWYtKZfN40U/pAABf2ostwTtZrkLmAz2P3n+26XjLdChCs969
1vfEBOei4kLZRYsLeuYKaH/KMZgLIgJb7nIvtjGkQRsQoOYOX9e4DQOePmvu2Tvd
vHOq2oRZ68wBMA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:57 2026 by rpki-client