Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
File: 8KEVxxfliRNKVTZw8-K1uc2hLYM.mft (raw, json)
Hash identifier: gI15XktNNB9rkktkzCVNIBxJ/uYTsvvp0YZx6jwZfvs=
Subject key identifier: 14:94:F6:D4:65:93:D8:99:84:CE:13:76:F0:2A:3A:58:64:94:16:61
Authority key identifier: F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
Certificate issuer: /CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Certificate serial: 019CAED9C7B8E9C33BA1A6DF8617548B7D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
Manifest number: 0F3D
Signing time: Mon 02 Mar 2026 14:00:33 +0000
Manifest this update: Mon 02 Mar 2026 14:00:33 +0000
Manifest next update: Tue 03 Mar 2026 14:00:33 +0000
Files and hashes: 1: 8KEVxxfliRNKVTZw8-K1uc2hLYM.crl (hash: DA5O5a+oE3wOIlFOO8CpSkR0F3iYZwMCJ/XnS4b6/qw=)
2: LmCE4vBv57eU5WHq9fR2fqAFtRA.roa (hash: mnnr39ZVewAFhZkB5nyRtZi1LdwMDrlxlNTdJSgLeFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:c7:b8:e9:c3:3b:a1:a6:df:86:17:54:8b:7d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Validity
Not Before: Mar 2 14:00:33 2026 GMT
Not After : Mar 3 14:00:33 2026 GMT
Subject: CN=1494f6d46593d89984ce1376f02a3a5864941661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:08:b1:e2:60:b9:72:e2:dc:23:0f:b0:a8:31:
86:92:b7:c1:fc:7a:e4:fe:39:ce:b2:78:f2:1d:e6:
c2:bc:f6:f6:4b:7e:52:16:21:d9:c7:ec:8e:0e:1f:
c6:be:2e:0c:77:65:66:db:bd:8b:f3:93:0e:ce:29:
11:03:37:95:60:d2:61:da:84:b9:fa:6d:c5:e1:7b:
63:1e:be:c9:bf:83:bd:ec:db:82:2a:dc:d9:8e:54:
9a:0d:0a:d7:20:f4:d6:05:cf:59:ac:cc:f2:4d:95:
d9:33:d6:e2:66:c8:c4:f6:55:d9:32:ce:6c:0a:c2:
56:be:13:67:5f:68:c8:3d:0e:a1:9e:37:3e:25:72:
90:85:b7:26:6b:db:61:77:15:4a:07:12:10:e7:cb:
b2:5a:3d:dd:57:70:98:8e:99:c2:54:29:50:92:80:
9a:4c:85:e8:20:0e:7d:bd:db:b4:7c:f8:af:79:43:
ee:c1:84:66:54:fb:b0:58:d9:4e:e1:c5:79:ad:52:
c9:c3:d8:d7:79:4a:fe:b1:22:83:68:33:89:b2:69:
cc:bb:2c:1b:c1:2b:4d:8b:6c:bb:21:74:5a:66:c8:
f7:36:ad:86:bd:56:62:c3:d7:57:4e:ef:44:fe:70:
a8:8c:ca:93:3d:aa:b3:71:d9:1e:a7:0e:dd:ea:78:
9f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:94:F6:D4:65:93:D8:99:84:CE:13:76:F0:2A:3A:58:64:94:16:61
X509v3 Authority Key Identifier:
keyid:F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:88:d4:fb:e9:2e:b7:de:74:74:41:ec:87:15:4f:a5:89:0e:
14:61:38:55:7a:38:6c:15:9f:81:32:c1:6c:c5:ed:4c:ba:fb:
d2:6c:9d:cf:1d:d3:3a:94:f3:d4:04:52:73:9a:2e:4a:4e:88:
fe:83:b7:0e:c5:c7:f1:08:cf:6c:c0:4c:bc:d7:e3:46:41:2c:
f3:c5:a8:a3:85:06:78:d4:e3:33:62:51:1f:b8:3a:1d:66:06:
f3:14:b2:7e:1c:7a:3e:ba:e8:b4:09:27:6a:7d:ee:d8:e0:92:
ba:79:93:2b:4c:9a:90:14:ac:28:e7:62:6a:23:27:01:6f:ce:
45:da:76:e6:06:52:5d:99:cc:f9:30:32:39:18:30:8d:54:29:
11:63:26:23:ab:e2:9a:a9:53:64:09:80:47:c1:f5:6f:d9:71:
82:06:54:d3:09:f6:b2:72:9e:0f:90:83:8d:4a:f0:e1:9f:93:
11:a9:94:05:8c:60:3e:aa:74:18:9b:93:d0:6b:97:9d:c2:e8:
08:7e:02:a3:9a:cc:72:b5:25:e7:9b:5a:1f:35:7f:f1:94:6c:
09:b4:6a:92:d0:73:12:42:68:2a:67:61:c6:b7:44:05:53:8f:
92:69:6f:1e:58:c2:a1:f6:92:18:83:77:08:61:4f:f2:ef:61:
13:72:d4:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyu2ce46cM7oabfhhdUi318MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYTExNWM3MTdlNTg5MTM0YTU1MzY3MGYzZTJiNWI5Y2Rh
MTJkODMwHhcNMjYwMzAyMTQwMDMzWhcNMjYwMzAzMTQwMDMzWjAzMTEwLwYDVQQD
EygxNDk0ZjZkNDY1OTNkODk5ODRjZTEzNzZmMDJhM2E1ODY0OTQxNjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQix4mC5cuLcIw+wqDGGkrfB/Hrk
/jnOsnjyHebCvPb2S35SFiHZx+yODh/Gvi4Md2Vm272L85MOzikRAzeVYNJh2oS5
+m3F4XtjHr7Jv4O97NuCKtzZjlSaDQrXIPTWBc9ZrMzyTZXZM9biZsjE9lXZMs5s
CsJWvhNnX2jIPQ6hnjc+JXKQhbcma9thdxVKBxIQ58uyWj3dV3CYjpnCVClQkoCa
TIXoIA59vdu0fPiveUPuwYRmVPuwWNlO4cV5rVLJw9jXeUr+sSKDaDOJsmnMuywb
wStNi2y7IXRaZsj3Nq2GvVZiw9dXTu9E/nCojMqTPaqzcdkepw7d6nifvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSU9tRlk9iZhM4TdvAqOlhklBZhMB8GA1UdIwQY
MBaAFPChFccX5YkTSlU2cPPitbnNoS2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEtFVnh4ZmxpUk5LVlRadzgtSzF1YzJoTFlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jNTIyZDctYTQ4OS00Yjc2LTkzNDgt
Mzc2MjRmNmE1MzExLzEvOEtFVnh4ZmxpUk5LVlRadzgtSzF1YzJoTFlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jNTIyZDctYTQ4OS00Yjc2LTkzNDgtMzc2MjRmNmE1MzEx
LzEvOEtFVnh4ZmxpUk5LVlRadzgtSzF1YzJoTFlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYjU++ku
t950dEHshxVPpYkOFGE4VXo4bBWfgTLBbMXtTLr70mydzx3TOpTz1ARSc5ouSk6I
/oO3DsXH8QjPbMBMvNfjRkEs88Woo4UGeNTjM2JRH7g6HWYG8xSyfhx6PrrotAkn
an3u2OCSunmTK0yakBSsKOdiaiMnAW/ORdp25gZSXZnM+TAyORgwjVQpEWMmI6vi
mqlTZAmAR8H1b9lxggZU0wn2snKeD5CDjUrw4Z+TEamUBYxgPqp0GJuT0GuXncLo
CH4Co5rMcrUl55taHzV/8ZRsCbRqktBzEkJoKmdhxrdEBVOPkmlvHljCofaSGIN3
CGFP8u9hE3LUbg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:20:18 2026 by rpki-client