
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
File: 08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json)
Hash identifier: nompugl+Mx9UU5ZEplS9j8QpH6bwqZ5TMNPd2pAzv+g=
Subject key identifier: 85:19:B2:37:97:0A:A4:04:E5:D4:D4:5B:D7:2F:51:51:63:7B:9C:F4
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 019D28BB1B0A5BA6012A2ADA3DEFB55D58AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
Manifest number: 1474
Signing time: Thu 26 Mar 2026 06:00:43 +0000
Manifest this update: Thu 26 Mar 2026 06:00:43 +0000
Manifest next update: Fri 27 Mar 2026 06:00:43 +0000
Files and hashes: 1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: J+/mBe5MuShffhmen2xPtLPufWacpWm7gxvCrUtiLrg=)
2: 7n21j0arkV0i_T2sVOrocRSEjSQ.roa (hash: 4uQJyIy3PMd9RTNB8+vJy+PcEdAqthYjAtrKR+jgLzI=)
3: Ct0sflIrK_cXgAXTEX8rXCBCKlM.roa (hash: pgN9gxLU+eOKOCJZYi81vZeUlJY1MKjflpGIHAxbUlw=)
4: JoeiFWNjjvIPOlROi_VGGMgQhvU.roa (hash: zb+eHGR6nD50fILOA3y9cV4VqzOKkbibkd0YSA6RbyM=)
5: LFj2hJJ6E7iqYzWeILrxQrVLptk.roa (hash: snEdRhwSL+4U9//+ADUommVyc5tAITtVppKqVSgzWBs=)
6: Nll2VEGJDP-MjZyazKwqEMpaKJE.roa (hash: CRQpyoRVKRlg6q0nS/VPYWwFarEicvmg0fHkXSK4Ln0=)
7: Trm4kxQ4gUhwM6zDV6KZX-ywRKE.roa (hash: E3EsOUvydU2GP/mXzofXHEmABcQ8lrxuyBxUbDage68=)
8: Z0SiG0C6BPcf3JRi6Nl3J9q_3os.roa (hash: NV+K1fkE6wl7yh47F8n5bFbyG2dYxLxOb6GHsNPTGww=)
9: oMvIFNcxSvkPaWRTAOlwiUjSC3s.roa (hash: 6/Zpm1CgcWVq8/qD3TqDrcDV9ugUyfCELYTDGErExSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:1b:0a:5b:a6:01:2a:2a:da:3d:ef:b5:5d:58:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Mar 26 06:00:43 2026 GMT
Not After : Mar 27 06:00:43 2026 GMT
Subject: CN=8519b237970aa404e5d4d45bd72f5151637b9cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:06:c1:ef:d9:8d:a6:f0:b2:fe:b5:20:4d:80:
7c:a3:f1:97:0a:ae:ec:f3:08:c9:cb:c0:89:a3:ce:
17:16:4a:21:bf:fa:4a:32:37:ec:a0:29:a2:d8:32:
ba:d3:43:8d:16:91:ec:3d:1d:21:13:fb:c6:ee:1f:
1c:bb:2c:a0:5b:3b:f1:bc:bb:47:25:cc:68:e4:48:
58:bd:8b:10:61:2f:d8:90:65:b0:8c:8b:03:c1:9e:
f5:88:ac:e3:fb:5e:34:9e:46:32:ab:71:09:b4:1c:
62:dc:f1:1a:f5:c6:d1:94:c9:a6:9c:da:26:68:f4:
bc:1f:8e:c8:de:16:f3:d1:ec:eb:81:fb:62:be:c9:
55:b4:ca:5d:55:30:eb:1e:2b:72:84:7e:7c:7d:26:
a1:d3:76:c0:d1:7a:9a:c7:56:73:9c:0a:8e:60:8c:
33:69:3b:88:7a:ba:2e:7f:0d:ef:d3:75:14:92:c5:
d0:bd:1b:d3:84:d0:92:88:c4:7d:07:b8:a0:c9:fe:
7e:2d:27:de:ed:3d:14:f4:08:0c:d3:0a:42:36:d5:
67:03:75:d5:9a:c8:87:81:20:b4:26:b8:38:73:2f:
20:da:f2:da:02:5e:e5:27:80:53:45:4a:65:20:87:
46:c0:b3:27:4f:e7:f8:42:0d:62:a7:1b:29:63:f5:
47:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:19:B2:37:97:0A:A4:04:E5:D4:D4:5B:D7:2F:51:51:63:7B:9C:F4
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c3:d4:7b:75:c0:64:18:ac:26:c6:8c:f1:41:8f:ff:98:e3:
84:5e:5d:2d:e2:c2:3f:79:9c:d8:ce:14:a5:ba:d6:f1:e1:37:
18:99:76:b6:5d:2d:98:52:4d:8c:dc:ca:b0:fe:9e:a3:14:62:
35:f7:53:41:c7:55:b6:dd:2a:54:3b:8e:eb:85:a0:67:a7:70:
23:8e:62:c0:e8:c6:01:3b:70:3b:81:70:fe:fb:6a:0e:82:fc:
33:e2:54:a3:48:f8:ab:5c:b2:c2:0e:6a:e3:04:34:38:78:36:
82:77:3a:65:22:0f:8e:9d:d9:4f:bb:b0:84:aa:c5:f4:64:b0:
8e:e4:4c:ef:b6:d6:67:60:dd:b2:15:f9:1b:03:b7:80:5e:58:
2a:f2:22:c3:da:2c:2e:d1:f2:f1:4e:ee:41:3a:ab:21:ac:4f:
c0:e5:b3:7d:ea:77:f9:b7:97:03:df:d3:1e:51:5a:63:5e:ce:
43:fc:51:7e:dd:b3:f9:fc:9d:5c:65:cc:ec:3c:d8:10:97:a1:
b7:36:12:aa:a6:ab:bc:dd:d4:bc:fd:3d:66:86:3e:a8:c0:be:
71:97:bb:1d:ba:6c:07:1c:cd:35:15:e1:59:1d:44:19:17:af:
0b:c9:05:0e:79:61:79:c5:0a:8c:47:79:1f:94:e1:bd:b9:f0:
da:01:30:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:47:33 2026 by rpki-client