Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
File: p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft (raw, json)
Hash identifier: +3gL93Um4lO0wG7bFIMJVn7DZGcUAfS4gIU3jQPX9mU=
Subject key identifier: F8:F1:CE:1D:C9:63:7D:45:1D:35:E9:55:55:2A:4C:CC:A1:46:9C:EA
Authority key identifier: A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
Certificate issuer: /CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Certificate serial: 019CAAC6E2309C2FD1F25D00C662E19B9DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
Manifest number: 1514
Signing time: Sun 01 Mar 2026 19:01:26 +0000
Manifest this update: Sun 01 Mar 2026 19:01:26 +0000
Manifest next update: Mon 02 Mar 2026 19:01:26 +0000
Files and hashes: 1: p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl (hash: pBAGkYSEn3GcDQNK4RxA1CUxXhyCKLJLW4tCebLgGBA=)
2: yuJsWVIKEkrfOiLC0rgtYrfv5ig.roa (hash: tNJ821CD2JFvwv/regbkNi6JuvYQZgMCd//DFX1D46E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:e2:30:9c:2f:d1:f2:5d:00:c6:62:e1:9b:9d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Validity
Not Before: Mar 1 19:01:26 2026 GMT
Not After : Mar 2 19:01:26 2026 GMT
Subject: CN=f8f1ce1dc9637d451d35e955552a4ccca1469cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:94:52:81:27:7c:1f:f7:6d:0c:b9:a2:72:
e9:72:73:45:b1:cc:29:80:45:63:b0:0f:eb:af:eb:
b2:c9:8f:92:00:49:e9:ae:1a:39:a8:f4:d4:73:09:
7b:97:26:3f:b0:8e:77:3e:22:c3:73:f4:a5:cd:97:
fe:a0:8f:22:92:1b:10:f0:1e:c5:68:4c:d2:2f:a6:
ff:98:88:7a:c9:60:ad:20:58:07:ff:fa:09:d0:28:
4c:d5:a6:9e:c4:92:5e:62:00:3e:31:12:ac:5b:d1:
c0:3b:c3:dc:c1:f2:09:c8:fa:48:85:e4:17:0b:ba:
96:76:4d:42:3c:44:ad:71:49:32:e7:5b:3e:39:68:
5d:e5:47:00:8b:18:ea:0e:6c:0b:5b:db:df:bf:b4:
55:53:3f:b3:05:ad:91:c9:27:30:a0:70:d3:49:32:
d6:af:ba:04:44:ac:1c:97:c1:2c:3b:52:f9:9f:82:
b0:4a:53:25:d7:da:46:19:f2:41:df:d5:ed:a6:5d:
3d:d5:6e:68:90:05:e8:c5:cc:31:d4:7f:7f:d8:41:
04:e9:55:ff:c3:64:13:be:c9:b5:53:e2:f8:cf:5c:
3d:ba:c1:36:37:60:7a:6b:23:ad:44:45:71:73:c8:
83:0c:5e:5c:8f:e7:cc:ac:f8:7b:fe:30:c0:1a:b2:
33:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F1:CE:1D:C9:63:7D:45:1D:35:E9:55:55:2A:4C:CC:A1:46:9C:EA
X509v3 Authority Key Identifier:
keyid:A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8f:af:42:15:c4:e9:2e:cc:37:49:f0:72:c4:ea:92:8a:fc:
88:1d:c3:74:81:3a:2b:de:2c:61:08:fb:55:2b:24:42:71:58:
68:cd:29:6f:f8:30:94:a1:2a:d4:3e:b7:5d:f2:92:19:dc:b8:
69:9a:e7:8a:98:0d:4d:6f:ea:32:ff:96:d6:35:59:a4:d8:c9:
68:59:5e:c9:b3:e9:41:66:dc:7e:ee:09:a5:97:17:50:00:b3:
ea:ce:f5:aa:c8:f5:2b:e4:71:14:15:a4:c6:5e:55:40:c4:53:
91:0b:43:fb:12:5a:49:93:8e:27:e6:dc:f4:82:7b:bc:09:62:
ae:20:9d:05:6e:67:76:62:7f:b2:8a:dd:7f:59:2f:25:e8:f8:
c7:12:e8:c0:78:5c:0c:ce:d7:fe:55:25:56:c0:c9:cb:45:76:
65:66:85:8b:bb:e5:94:1b:9d:61:c6:e4:c2:ea:42:32:3e:c9:
af:48:5f:84:b6:dc:ee:3b:6c:fd:87:2b:d2:9f:d6:22:a1:49:
34:82:01:2c:8e:81:9f:8b:ea:e3:23:f5:01:e1:92:69:fc:cb:
2a:13:69:26:e8:2b:4d:ea:cb:fc:ba:1f:2a:17:fa:6f:5a:74:
a2:76:cd:80:1a:ee:14:a2:a7:6d:87:8c:ef:f1:77:f0:9a:7e:
91:f2:41:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxuIwnC/R8l0AxmLhm533MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3Y2E5YWRhNDQ1MjRmYzUzNmZhM2VjYWJmNzU4ZGYyNjQw
N2M4YjEwHhcNMjYwMzAxMTkwMTI2WhcNMjYwMzAyMTkwMTI2WjAzMTEwLwYDVQQD
EyhmOGYxY2UxZGM5NjM3ZDQ1MWQzNWU5NTU1NTJhNGNjY2ExNDY5Y2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaaUUoEnfB/3bQy5onLpcnNFscwp
gEVjsA/rr+uyyY+SAEnprho5qPTUcwl7lyY/sI53PiLDc/SlzZf+oI8ikhsQ8B7F
aEzSL6b/mIh6yWCtIFgH//oJ0ChM1aaexJJeYgA+MRKsW9HAO8PcwfIJyPpIheQX
C7qWdk1CPEStcUky51s+OWhd5UcAixjqDmwLW9vfv7RVUz+zBa2RyScwoHDTSTLW
r7oERKwcl8EsO1L5n4KwSlMl19pGGfJB39Xtpl091W5okAXoxcwx1H9/2EEE6VX/
w2QTvsm1U+L4z1w9usE2N2B6ayOtREVxc8iDDF5cj+fMrPh7/jDAGrIzRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjxzh3JY31FHTXpVVUqTMyhRpzqMB8GA1UdIwQY
MBaAFKfKmtpEUk/FNvo+yr91jfJkB8ixMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDhxYTJrUlNUOFUyLWo3S3YzV044bVFIeUxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mN2VjNzAtMGRlZC00MmNhLTlkMDAt
OWQ5ZTFiNmJlZWU5LzEvcDhxYTJrUlNUOFUyLWo3S3YzV044bVFIeUxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9mN2VjNzAtMGRlZC00MmNhLTlkMDAtOWQ5ZTFiNmJlZWU5
LzEvcDhxYTJrUlNUOFUyLWo3S3YzV044bVFIeUxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAY+vQhXE
6S7MN0nwcsTqkor8iB3DdIE6K94sYQj7VSskQnFYaM0pb/gwlKEq1D63XfKSGdy4
aZrnipgNTW/qMv+W1jVZpNjJaFleybPpQWbcfu4JpZcXUACz6s71qsj1K+RxFBWk
xl5VQMRTkQtD+xJaSZOOJ+bc9IJ7vAliriCdBW5ndmJ/sordf1kvJej4xxLowHhc
DM7X/lUlVsDJy0V2ZWaFi7vllBudYcbkwupCMj7Jr0hfhLbc7jts/Ycr0p/WIqFJ
NIIBLI6Bn4vq4yP1AeGSafzLKhNpJugrTerL/LofKhf6b1p0onbNgBruFKKnbYeM
7/F38Jp+kfJB3w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:28:59 2026 by rpki-client