Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json)
Hash identifier: yPgvSaHAmr2QjEfw1jPoafDCo6ODF3TGcuDGxhPc8Eg=
Subject key identifier: DB:83:28:BF:76:41:17:44:02:58:13:99:93:99:54:0C:90:69:C2:E0
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 019CAB346AE6D088378AC47895E3FA1731E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
Manifest number: 10D8
Signing time: Sun 01 Mar 2026 21:01:05 +0000
Manifest this update: Sun 01 Mar 2026 21:01:05 +0000
Manifest next update: Mon 02 Mar 2026 21:01:05 +0000
Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: 3z17bJ+ccPXrz3JQDAFt+Wb9cgzROQM7xKy9c/du7iw=)
2: Eam5U8wmkEaQD_GZphi0bsWc3ms.roa (hash: aXUcbL8LEvpF2UJ9Y4ffmnfXihjfbhHkf/I/6hXBl8k=)
3: Q8cZP7Mw_-w6-Le7I_oZBELBZgo.roa (hash: JsbdMsgNcpZtlFUpehZGZOmDsBEuV8h9IP/Mq8FrzkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:6a:e6:d0:88:37:8a:c4:78:95:e3:fa:17:31:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Mar 1 21:01:05 2026 GMT
Not After : Mar 2 21:01:05 2026 GMT
Subject: CN=db8328bf76411744025813999399540c9069c2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:29:a6:bc:39:e0:81:a5:b2:5a:6c:1c:30:
4d:a6:67:aa:ec:4f:9c:a0:37:67:ce:c1:97:e9:14:
41:2b:43:31:8d:80:4a:81:91:b3:4b:e4:d6:38:e9:
74:dd:6d:95:38:d6:86:3e:43:f8:55:25:51:26:89:
8e:a1:9d:b5:58:05:ab:61:ff:29:56:8d:5d:3e:23:
07:f2:19:52:7a:ca:81:7b:3f:86:b2:73:d2:a0:bb:
01:b4:de:1a:43:45:97:87:01:28:56:45:38:f3:c2:
8a:b1:52:f3:48:16:c5:82:76:ea:6c:60:db:f8:40:
33:68:db:07:ce:c2:1d:95:26:3e:82:74:c3:d7:fd:
2d:84:d2:dc:5a:f3:6a:4c:3a:48:d1:7c:cc:25:58:
1a:4e:55:65:a6:3f:65:81:e9:09:d7:75:b7:ac:3b:
61:f9:82:13:5b:ca:f3:fb:15:c0:9a:79:a8:bd:22:
5b:65:51:fc:54:27:2d:95:68:c8:e3:df:11:ac:43:
f8:50:38:44:c2:7f:1d:f2:24:6f:d9:ec:5b:3d:4b:
0a:53:ad:a5:20:ae:02:6b:c2:25:0f:6a:71:96:db:
c1:5b:f8:eb:29:eb:3c:37:52:b6:cc:b7:32:ab:00:
6d:9d:c3:c5:94:31:2f:5e:2f:ee:81:db:b6:7d:a5:
de:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:83:28:BF:76:41:17:44:02:58:13:99:93:99:54:0C:90:69:C2:E0
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d1:da:ba:25:3a:40:51:c1:c8:b3:fb:65:93:f5:37:20:b6:
8c:ab:62:e2:62:49:60:96:16:25:67:c4:46:b7:85:80:a8:7c:
0a:56:47:43:00:1b:30:87:e2:9f:91:64:06:ce:8b:54:a8:81:
e6:cb:a0:ef:2d:c1:1d:98:5b:71:8c:70:05:00:71:88:51:69:
d9:dd:9d:29:fd:a4:4d:25:43:35:58:c3:ab:af:03:77:ea:72:
aa:14:0f:79:7f:07:7d:ca:54:c5:73:58:0d:58:df:bf:7b:b7:
e0:c1:81:5b:0c:59:d2:41:0c:92:6c:bf:20:6f:51:4a:66:92:
c0:55:07:41:b2:48:11:55:50:c5:28:d8:00:f0:8c:29:be:19:
c8:58:3f:b7:16:fc:25:2a:e5:ff:40:da:e6:07:b6:0f:f9:9a:
e2:6e:98:1e:3e:d1:03:01:c4:a1:0b:4b:3c:30:0b:9a:1e:f5:
82:c1:e4:6c:25:0d:b4:f4:b3:cd:e6:56:db:0d:2f:77:4b:bc:
44:73:e6:0d:29:15:76:d1:79:2f:1a:7c:84:eb:ec:e7:cf:6e:
c2:95:7a:85:44:99:c3:90:f3:65:02:b0:be:33:10:f1:e1:20:
83:49:88:d7:b8:7f:44:47:b2:3b:0f:e4:e5:4e:2f:fb:1c:2e:
95:99:40:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNGrm0Ig3isR4leP6FzHlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjkzMGUyM2IwOGExNWNjZDRkYzlhYjE4MjljNjA3ZmVk
ZGU4YTUwHhcNMjYwMzAxMjEwMTA1WhcNMjYwMzAyMjEwMTA1WjAzMTEwLwYDVQQD
EyhkYjgzMjhiZjc2NDExNzQ0MDI1ODEzOTk5Mzk5NTQwYzkwNjljMmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAIpprw54IGlslpsHDBNpmeq7E+c
oDdnzsGX6RRBK0MxjYBKgZGzS+TWOOl03W2VONaGPkP4VSVRJomOoZ21WAWrYf8p
Vo1dPiMH8hlSesqBez+GsnPSoLsBtN4aQ0WXhwEoVkU488KKsVLzSBbFgnbqbGDb
+EAzaNsHzsIdlSY+gnTD1/0thNLcWvNqTDpI0XzMJVgaTlVlpj9lgekJ13W3rDth
+YITW8rz+xXAmnmovSJbZVH8VCctlWjI498RrEP4UDhEwn8d8iRv2exbPUsKU62l
IK4Ca8IlD2pxltvBW/jrKes8N1K2zLcyqwBtncPFlDEvXi/ugdu2faXeYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNuDKL92QRdEAlgTmZOZVAyQacLgMB8GA1UdIwQY
MBaAFPH5MOI7CKFczU3Jqxgpxgf+3eilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lYTEyOGMtYTA5ZC00MGU4LWJiMTEt
YWVhNzE0ZWM1MTEzLzEvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9lYTEyOGMtYTA5ZC00MGU4LWJiMTEtYWVhNzE0ZWM1MTEz
LzEvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdHauiU6
QFHByLP7ZZP1NyC2jKti4mJJYJYWJWfERreFgKh8ClZHQwAbMIfin5FkBs6LVKiB
5sug7y3BHZhbcYxwBQBxiFFp2d2dKf2kTSVDNVjDq68Dd+pyqhQPeX8HfcpUxXNY
DVjfv3u34MGBWwxZ0kEMkmy/IG9RSmaSwFUHQbJIEVVQxSjYAPCMKb4ZyFg/txb8
JSrl/0Da5ge2D/ma4m6YHj7RAwHEoQtLPDALmh71gsHkbCUNtPSzzeZW2w0vd0u8
RHPmDSkVdtF5Lxp8hOvs589uwpV6hUSZw5DzZQKwvjMQ8eEgg0mI17h/REeyOw/k
5U4v+xwulZlAQQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:57 2026 by rpki-client