Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
File: 08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json)
Hash identifier: 0HDxw/8CgwbytCm4YB0BYHIfUuqSmJTsfnMXHzdn+Hw=
Subject key identifier: E0:2E:DF:37:94:6B:60:BD:53:6C:C5:85:D4:AC:C3:91:5B:E3:18:98
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Certificate issuer: /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial: 019D2695EA4F73F372F0F8EE8D9398041BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 20:00:52 +0000
Manifest this update: Wed 25 Mar 2026 20:00:52 +0000
Manifest next update: Thu 26 Mar 2026 20:00:52 +0000
Files and hashes: 1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: e8gg2/H2EiVHVnD4xcx+qF3MFVFcFYe5tSWMOSNVKUM=)
2: kDYFCwOTqCtWju9awtc-WWDQSp4.roa (hash: niu24Rn9CdcANUXflUaTh1yPPLtTi4dexe3GG8dp0NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:ea:4f:73:f3:72:f0:f8:ee:8d:93:98:04:1b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Validity
Not Before: Mar 25 20:00:52 2026 GMT
Not After : Mar 26 20:00:52 2026 GMT
Subject: CN=e02edf37946b60bd536cc585d4acc3915be31898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3e:1d:e4:3f:f1:79:b5:0a:2d:0b:93:30:75:
2f:3c:a3:d5:45:29:44:c4:3f:fa:22:42:38:8d:5e:
86:42:9c:e3:cf:e8:f7:c3:93:14:a6:a2:c0:f1:4d:
a1:08:8b:0e:14:4a:16:31:88:c6:57:c9:7a:fd:da:
88:3d:7e:04:37:de:a7:e6:5d:e1:b6:39:22:1c:2b:
c2:56:84:e0:74:67:6d:b4:4d:12:1f:fe:12:29:e5:
30:c1:83:ae:d0:03:86:a6:af:00:b2:58:3c:82:46:
cc:b1:57:b9:ef:a2:b6:aa:87:b5:53:55:7f:19:64:
2d:66:c6:7c:7c:a3:71:8d:33:f2:a1:ec:31:1e:14:
0e:e9:e3:5d:f9:c2:64:cc:9e:42:11:15:64:32:b0:
82:bd:89:b8:01:e2:14:52:6b:43:92:61:b1:00:74:
74:16:25:fc:3a:10:9f:d2:3b:24:b3:7f:fb:1b:31:
9d:89:f8:96:7d:d5:3d:d1:0a:ae:76:72:d5:17:ab:
e4:9c:ae:f0:f4:18:0b:0d:77:1c:06:75:48:62:89:
56:35:70:35:bf:a3:62:6e:3d:fb:3a:ba:ec:2e:b6:
c3:14:0e:1a:ca:be:3d:42:16:1b:f9:4b:55:69:15:
9f:9b:d3:24:d2:15:3d:c8:c2:0c:e2:7f:76:df:ce:
37:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2E:DF:37:94:6B:60:BD:53:6C:C5:85:D4:AC:C3:91:5B:E3:18:98
X509v3 Authority Key Identifier:
keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9a:fb:b4:61:d9:02:8b:dc:1b:ee:72:8d:ca:ae:01:be:4c:
d3:6f:55:b1:f2:e1:b9:3e:7b:0c:ee:56:d6:71:f2:a1:dd:66:
93:c8:8e:ca:5e:c7:d9:5f:b9:b1:ea:8d:31:b1:b0:6d:8f:90:
b5:a7:86:23:3a:76:7e:43:fc:ce:be:c1:08:c4:d3:dd:3e:34:
09:60:57:e2:13:e9:74:c5:d2:79:17:74:93:f2:99:2f:ff:96:
2d:40:90:c2:06:d3:c8:37:d4:a2:09:e1:55:71:a2:36:23:1b:
58:b3:c9:7f:79:fd:67:3f:a5:45:a8:e4:7f:7f:0d:c1:4b:15:
14:f2:37:39:19:da:65:e3:45:e8:72:c1:53:e9:f1:3e:5c:46:
c5:df:cd:06:cc:78:ab:3f:98:6e:68:97:af:7c:3e:ea:b2:6d:
57:a8:9b:52:af:9b:d8:18:8d:91:ab:e1:c8:a1:e2:b0:b7:23:
d7:fc:3b:0f:00:3f:18:c8:19:5a:b7:a1:b6:a0:37:bd:c0:56:
4e:d1:dc:7a:71:83:3c:a1:40:fb:81:07:5f:90:2c:14:0f:bb:
d4:5d:a7:e1:fd:33:3f:70:a7:42:67:82:d4:5b:ea:cc:a7:c9:
b0:6f:d6:48:ed:fe:bc:87:39:62:0d:cd:9d:77:42:56:55:aa:
0b:10:ca:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:52:36 2026 by rpki-client