Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
File: t8VYxCxDrVlAbqRGye7-1CpJHuw.mft (raw, json)
Hash identifier: 8A4Njpb7WkPaHrxZWFV/9DmWZcNCDd8jJS29LudugXU=
Subject key identifier: 9E:F1:F8:90:EE:9D:90:54:BE:AA:56:06:CB:B8:87:A0:03:70:02:06
Authority key identifier: B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC
Certificate issuer: /CN=b7c558c42c43ad59406ea446c9eefed42a491eec
Certificate serial: 019CACEBEFD39EA5AC7D3F898061C6D49415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
Manifest number: 0EF4
Signing time: Mon 02 Mar 2026 05:01:09 +0000
Manifest this update: Mon 02 Mar 2026 05:01:09 +0000
Manifest next update: Tue 03 Mar 2026 05:01:09 +0000
Files and hashes: 1: t8VYxCxDrVlAbqRGye7-1CpJHuw.crl (hash: 1pYjVIE+m4jl+CXr3y+qt1tyKoipiSvrzgWO8fdTToo=)
2: zrD7NApr-CKiSl_IAZoSygFQjv4.roa (hash: sXutfsW657aDzmpSR3D6+VEVCtONP341YHRcNDoHTYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:ef:d3:9e:a5:ac:7d:3f:89:80:61:c6:d4:94:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c558c42c43ad59406ea446c9eefed42a491eec
Validity
Not Before: Mar 2 05:01:09 2026 GMT
Not After : Mar 3 05:01:09 2026 GMT
Subject: CN=9ef1f890ee9d9054beaa5606cbb887a003700206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:15:03:ed:f7:19:7d:3d:e1:93:50:be:9d:38:
d5:e5:6b:3a:05:34:b7:a4:55:8b:af:27:7c:c2:54:
d7:76:d5:c9:f9:3c:b1:79:da:1c:19:46:5a:72:a4:
5c:86:8b:e8:4d:6d:ec:42:59:a6:38:36:15:7e:cd:
0b:c1:3f:23:1b:5c:93:dd:4c:a0:b0:34:90:d0:64:
a8:0b:d9:ea:d1:9f:48:68:b9:38:59:2e:e9:ab:dc:
4c:05:00:81:e7:6e:37:14:fe:e0:51:1c:92:04:a0:
52:4c:26:39:4d:81:ad:8c:ed:52:00:69:fc:a6:9e:
d2:c9:64:92:12:16:e8:7b:b8:ae:ab:13:54:47:d2:
09:0e:72:04:48:70:f9:77:55:38:9a:bd:32:cd:45:
90:87:89:f5:da:e4:0b:65:fb:09:34:1d:47:e3:be:
1b:5e:1f:d0:ae:04:81:e3:3c:c8:90:2e:c1:fc:22:
bb:17:cb:6b:c9:7f:62:cc:ef:2b:f2:94:ec:ad:29:
e9:01:6e:ed:fa:b6:3a:c3:fd:d8:bc:b3:97:00:0c:
d5:38:60:9c:8d:3d:92:71:9d:77:06:18:be:e1:97:
8c:91:9a:f9:2c:af:ee:d2:04:4d:95:f0:0e:a7:3c:
b1:1f:65:dd:bb:85:e9:9f:0d:8f:83:8e:44:2f:ff:
49:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F1:F8:90:EE:9D:90:54:BE:AA:56:06:CB:B8:87:A0:03:70:02:06
X509v3 Authority Key Identifier:
keyid:B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a9:30:85:49:03:73:0a:4c:94:d5:37:91:8b:9d:7b:15:ed:
b5:a1:f8:25:59:9b:d0:c3:84:cb:e3:e3:f2:5d:57:ce:43:1b:
31:8f:1a:62:1d:ff:be:d2:38:8e:b1:bf:7c:9d:f7:4b:5a:fe:
59:b4:8a:97:ab:9f:cf:66:2f:ed:51:97:bd:c7:1e:2f:3a:f5:
37:59:14:f6:90:08:3c:8e:29:12:7a:de:c0:d0:6c:02:80:24:
e6:46:af:7c:a0:e4:d2:75:9a:0f:c5:2b:87:fa:04:b9:15:f5:
d4:e6:6c:10:a0:70:26:e4:4e:e4:42:30:50:11:62:b8:59:07:
90:ec:04:d4:09:8e:cc:b3:85:56:ea:5b:18:4a:43:48:00:30:
0d:53:c0:ed:07:ea:56:e5:b8:23:16:ad:05:ad:5e:a5:be:87:
e5:c0:23:1f:65:5b:b0:b0:5a:a5:c2:5e:e0:76:1d:f9:4c:77:
e0:f0:ad:67:4c:55:f8:72:6a:6d:6b:c9:95:be:00:e9:c2:6f:
50:cd:b5:b6:ab:04:04:bc:ec:d0:d1:4e:2d:11:73:22:32:81:
bf:df:37:7c:59:2a:a9:f5:b7:6d:37:00:f3:df:37:1f:0f:e3:
f5:78:1b:54:e5:42:23:22:af:fa:fe:fd:bd:e8:09:09:50:6a:
90:ef:da:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys6+/TnqWsfT+JgGHG1JQVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YzU1OGM0MmM0M2FkNTk0MDZlYTQ0NmM5ZWVmZWQ0MmE0
OTFlZWMwHhcNMjYwMzAyMDUwMTA5WhcNMjYwMzAzMDUwMTA5WjAzMTEwLwYDVQQD
Eyg5ZWYxZjg5MGVlOWQ5MDU0YmVhYTU2MDZjYmI4ODdhMDAzNzAwMjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthUD7fcZfT3hk1C+nTjV5Ws6BTS3
pFWLryd8wlTXdtXJ+TyxedocGUZacqRchovoTW3sQlmmODYVfs0LwT8jG1yT3Uyg
sDSQ0GSoC9nq0Z9IaLk4WS7pq9xMBQCB5243FP7gURySBKBSTCY5TYGtjO1SAGn8
pp7SyWSSEhboe7iuqxNUR9IJDnIESHD5d1U4mr0yzUWQh4n12uQLZfsJNB1H474b
Xh/QrgSB4zzIkC7B/CK7F8tryX9izO8r8pTsrSnpAW7t+rY6w/3YvLOXAAzVOGCc
jT2ScZ13Bhi+4ZeMkZr5LK/u0gRNlfAOpzyxH2Xdu4Xpnw2Pg45EL/9J3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7x+JDunZBUvqpWBsu4h6ADcAIGMB8GA1UdIwQY
MBaAFLfFWMQsQ61ZQG6kRsnu/tQqSR7sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDhWWXhDeERyVmxBYnFSR3llNy0xQ3BKSHV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83MTg5N2UtNWY2Zi00NDlkLWI4MmMt
YTI1ZWY0NDIwYTJhLzEvdDhWWXhDeERyVmxBYnFSR3llNy0xQ3BKSHV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi83MTg5N2UtNWY2Zi00NDlkLWI4MmMtYTI1ZWY0NDIwYTJh
LzEvdDhWWXhDeERyVmxBYnFSR3llNy0xQ3BKSHV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6kwhUkD
cwpMlNU3kYudexXttaH4JVmb0MOEy+Pj8l1XzkMbMY8aYh3/vtI4jrG/fJ33S1r+
WbSKl6ufz2Yv7VGXvcceLzr1N1kU9pAIPI4pEnrewNBsAoAk5kavfKDk0nWaD8Ur
h/oEuRX11OZsEKBwJuRO5EIwUBFiuFkHkOwE1AmOzLOFVupbGEpDSAAwDVPA7Qfq
VuW4IxatBa1epb6H5cAjH2VbsLBapcJe4HYd+Ux34PCtZ0xV+HJqbWvJlb4A6cJv
UM21tqsEBLzs0NFOLRFzIjKBv983fFkqqfW3bTcA8983Hw/j9XgbVOVCIyKv+v79
vegJCVBqkO/aoQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:46 2026 by rpki-client