Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
File: 08YXj7A0kFEwrwzhzSdRVPK1m3g.mft (raw, json)
Hash identifier: QyAKLAf/IxHpuVwjLJihRivy22T4DePiAqbYQdx5coM=
Subject key identifier: 12:A8:CC:36:5D:46:8B:66:BA:DF:8E:FA:3D:01:4C:F4:B5:49:29:AB
Authority key identifier: D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
Certificate issuer: /CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Certificate serial: 01A0D5703E196A5E99FFE2E85C3E1D046F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 22:01:37 +0000
Manifest this update: Thu 24 Sep 2026 22:01:37 +0000
Manifest next update: Fri 25 Sep 2026 22:01:37 +0000
Files and hashes: 1: 08YXj7A0kFEwrwzhzSdRVPK1m3g.crl (hash: vQW3EJdWjqaDMxggYJD3sZ/q9CdQp85KPj2xdN4z8kE=)
2: TkVIENg5yxh_iBn69iwP-Gzs7M0.roa (hash: XN4b40QKJDQSEm8B3f99MTAbjS4H9rL0ddzhBtlCaKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:3e:19:6a:5e:99:ff:e2:e8:5c:3e:1d:04:6f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Validity
Not Before: Sep 24 22:01:37 2026 GMT
Not After : Sep 25 22:01:37 2026 GMT
Subject: CN=12a8cc365d468b66badf8efa3d014cf4b54929ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a7:16:f4:36:a8:73:39:11:33:83:92:cb:ec:
93:33:18:ed:fa:c1:39:5d:2f:63:7d:bf:2e:1a:f9:
6c:f4:37:24:a7:b7:76:32:94:1f:ec:e9:d1:77:b6:
d8:a9:6b:6f:5b:67:db:cd:db:ca:9d:62:f2:3f:42:
4a:5f:3a:d4:fe:74:cd:72:23:39:bc:c2:9b:d6:b4:
89:36:1e:ed:b5:88:31:85:b1:5e:39:7a:08:35:39:
23:b7:0e:84:f2:f2:26:7e:40:24:fa:77:1e:82:2f:
e4:58:dd:78:a6:33:6c:3f:24:8e:91:40:1c:43:ae:
a5:52:a8:f3:f9:60:07:fa:e0:17:2b:66:d1:1b:54:
7f:d6:ca:f2:32:67:21:d6:7e:82:34:62:a5:2d:88:
91:d4:89:56:45:2a:df:12:86:b7:d7:8a:1b:3c:eb:
e8:15:89:af:90:05:e1:7c:c3:36:c8:94:8b:fd:04:
49:49:25:6d:3a:18:f7:b2:e4:b2:81:a4:de:14:53:
b6:c5:cd:ff:aa:21:5f:ff:78:6c:5f:26:f1:5c:1b:
56:3d:c5:e3:c4:dd:5f:f4:bd:86:f7:bc:f5:c6:8f:
2b:00:b8:98:8a:85:f6:67:56:58:cd:c5:de:e3:56:
23:7e:58:fd:d4:27:1b:b1:8f:ea:77:b2:04:b6:b1:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A8:CC:36:5D:46:8B:66:BA:DF:8E:FA:3D:01:4C:F4:B5:49:29:AB
X509v3 Authority Key Identifier:
keyid:D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:be:26:f5:61:3b:70:61:5f:e3:4e:d0:ef:b4:fe:9d:b6:02:
d5:3b:06:ac:c4:26:d4:0e:e8:42:2a:f5:bd:37:6d:0d:3e:e5:
d0:ad:24:88:5b:0a:c0:44:ff:5e:4a:12:3d:8f:46:d7:a4:26:
95:14:ab:3d:4d:60:33:f4:15:a0:b7:0b:87:c0:9a:0a:b8:cb:
96:8b:a5:3d:e3:08:b4:71:6d:f5:f1:50:17:7e:fd:b5:5d:dc:
c6:67:10:e1:d9:6f:21:1b:a8:d6:ca:a4:b7:af:cf:e6:64:77:
5b:25:e7:29:21:33:96:35:62:f3:28:3f:69:1e:05:22:8f:37:
23:4e:24:9e:c1:a7:a8:a6:b0:dd:8b:8f:4b:c8:7f:38:c6:e0:
09:e2:a1:bb:0e:8c:43:53:af:96:0b:19:1f:c4:77:18:b7:8a:
e4:00:f6:7a:e8:f9:38:1b:18:02:3f:6f:88:a1:6c:d3:74:a1:
48:39:98:b5:1d:c2:5c:b2:86:f1:cd:d9:aa:6a:94:c0:d8:c5:
75:f3:e1:57:42:b1:90:b0:ff:73:db:7d:d0:ea:9b:1c:00:f6:
f0:d7:8e:ea:95:9b:46:16:f0:bf:ac:5f:e6:36:61:0c:82:2c:
b5:c6:87:2d:cf:26:72:13:2d:6a:51:4f:5d:f0:4c:a7:2e:33:
ce:b6:07:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:38:46 2026 by rpki-client