Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
File: 08YXj7A0kFEwrwzhzSdRVPK1m3g.mft (raw, json)
Hash identifier: lUNCnYyFpThrt33UEe2ye+RsNurhCV3LF7G2zuMW38M=
Subject key identifier: 46:C9:36:B3:2B:2A:12:AA:CE:62:F7:BB:A6:0E:F9:39:8A:A6:E3:5F
Authority key identifier: D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
Certificate issuer: /CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Certificate serial: 019D270413780B49BB25611FE173C74DBD5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 22:01:11 +0000
Manifest this update: Wed 25 Mar 2026 22:01:11 +0000
Manifest next update: Thu 26 Mar 2026 22:01:11 +0000
Files and hashes: 1: 08YXj7A0kFEwrwzhzSdRVPK1m3g.crl (hash: tBfSt+wGMthPlaGIzwhbPOfp+NWDeNkN0PjnMSBGwcw=)
2: TkVIENg5yxh_iBn69iwP-Gzs7M0.roa (hash: XN4b40QKJDQSEm8B3f99MTAbjS4H9rL0ddzhBtlCaKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:13:78:0b:49:bb:25:61:1f:e1:73:c7:4d:bd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Validity
Not Before: Mar 25 22:01:11 2026 GMT
Not After : Mar 26 22:01:11 2026 GMT
Subject: CN=46c936b32b2a12aace62f7bba60ef9398aa6e35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:3c:4f:12:4f:99:80:2f:9b:a2:ab:3a:c1:
20:b9:8f:6f:5e:40:f3:31:1e:53:f3:fd:36:89:82:
5e:86:e0:d1:ac:a5:ed:17:37:5f:8d:3f:7a:c5:8c:
4d:a1:b3:67:4e:88:05:09:17:3a:63:48:52:aa:23:
27:c7:ca:59:15:81:58:55:bd:13:74:a4:aa:79:7a:
6d:e5:aa:2e:34:c7:29:b7:ad:10:77:d3:64:8e:7d:
f6:ac:24:15:cd:3a:7b:d7:3c:e6:42:c8:db:7b:de:
9f:6c:4d:0d:f9:e2:28:f3:c8:e8:f5:06:09:77:57:
04:16:de:ac:09:18:13:43:3d:1c:89:b5:77:e6:bc:
5a:ad:9e:b1:ad:dd:6e:f5:59:da:07:20:1b:96:f5:
42:f2:d3:c8:14:3a:07:e2:75:25:be:24:dc:09:0b:
2d:81:dd:94:e7:d2:10:8a:fe:60:c5:ff:23:c1:3e:
22:5d:e5:02:8a:e3:69:5e:05:57:67:38:ad:07:ce:
89:cd:5c:14:c9:1b:8f:31:82:5c:1e:41:6c:1d:1a:
ce:12:fc:29:b9:e9:dc:5b:73:5f:1a:95:25:89:c3:
dc:4a:49:ef:6d:33:76:82:17:36:8f:a6:13:e5:db:
10:47:69:35:cc:c4:af:0f:19:dd:2a:3b:d7:40:77:
30:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C9:36:B3:2B:2A:12:AA:CE:62:F7:BB:A6:0E:F9:39:8A:A6:E3:5F
X509v3 Authority Key Identifier:
keyid:D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:dd:d0:1a:93:a2:44:b0:ee:89:d5:3c:d7:ab:3b:72:20:f0:
6c:b2:9d:35:3b:06:19:3d:37:f4:5c:b6:68:dc:54:11:6d:c2:
ba:7a:5a:ad:f0:c8:c7:f6:4e:53:36:e4:dc:97:fb:d6:df:c3:
e3:2d:d3:97:e2:b2:ab:ee:94:86:94:54:83:fb:9c:c7:3f:8f:
4a:fc:77:77:8b:26:43:28:52:0f:cf:a8:db:ac:f5:36:3e:95:
af:98:1b:ce:08:23:d7:fe:45:4f:75:60:98:77:da:5d:0d:4c:
48:4e:be:7b:e8:05:37:07:b6:e4:fe:28:44:25:d4:e3:c8:3a:
37:51:14:91:6b:f5:f2:5f:4e:6c:cb:7a:34:97:2d:29:b9:1d:
a2:f3:f4:d5:f7:08:33:fa:c6:28:68:73:fa:9e:4b:1b:9c:b1:
53:81:4e:7c:b4:dc:6c:08:07:93:1f:f0:f7:81:64:b8:c3:0d:
fc:fa:c0:5b:b1:76:a1:da:9f:ea:d0:60:72:df:d7:49:6d:63:
e9:eb:c6:0c:00:ac:cf:27:56:45:74:e6:e0:5c:41:e4:e2:db:
28:03:72:c6:82:e8:d2:a3:86:c1:bc:e9:45:13:46:98:dd:c9:
72:8a:dd:0d:98:f2:fd:8b:c7:ad:6c:30:72:89:0a:2e:c4:f3:
cb:65:3f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:45:57 2026 by rpki-client