Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
File: 08ixCjj4HGTiASB7_DVEwpcq9fM.mft (raw, json)
Hash identifier: PSita7cAX1w9SuHNr7OY7UM8N6y94RM2s7Dcf3D8hEY=
Subject key identifier: 23:69:66:36:3D:36:73:00:5B:CB:98:BB:46:47:90:8C:B9:58:FC:77
Authority key identifier: D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3
Certificate issuer: /CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
Certificate serial: 019D37F74070E3C6C0832442454C85F24992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
Manifest number: 124F
Signing time: Sun 29 Mar 2026 05:00:43 +0000
Manifest this update: Sun 29 Mar 2026 05:00:43 +0000
Manifest next update: Mon 30 Mar 2026 05:00:43 +0000
Files and hashes: 1: 08ixCjj4HGTiASB7_DVEwpcq9fM.crl (hash: Qz6L0Wm4yXHRA6W3W/Rz91DB0kBrHah+ypupGd2zg4s=)
2: yXhNyXRSfQjfxmo-xnpGQqFi810.roa (hash: SLF2lVj7vn7i6fplRiTtNXFnugUCA5oqM+ECg7CqrFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:40:70:e3:c6:c0:83:24:42:45:4c:85:f2:49:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
Validity
Not Before: Mar 29 05:00:43 2026 GMT
Not After : Mar 30 05:00:43 2026 GMT
Subject: CN=236966363d3673005bcb98bb4647908cb958fc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:81:ea:7f:93:8d:1d:c7:9e:de:e5:a6:0e:
a3:94:ac:56:43:24:c1:f4:71:f5:27:1b:1f:f1:ba:
2f:8c:31:a8:d4:85:6f:9d:b8:c8:44:b0:0c:d9:55:
f3:87:a6:2f:20:39:0e:33:4f:32:0b:a4:7b:39:ae:
fc:fa:7b:9d:51:cc:64:7b:4e:72:60:71:c2:e0:52:
bb:2a:d0:29:ca:a6:09:66:5e:bd:f0:e8:c3:64:07:
84:64:31:87:04:6c:18:31:81:fd:0e:eb:d2:72:2b:
2e:53:a9:ab:22:2b:f7:7f:e1:0e:e9:fb:3d:64:be:
f7:b3:55:df:15:bf:df:11:52:91:ff:d7:36:21:37:
84:f1:08:a2:bf:9d:e4:39:1b:fb:d6:7d:4c:13:73:
72:b9:78:5c:2c:06:94:db:24:8e:18:e8:f1:e9:f3:
16:a9:78:31:8c:da:b0:e5:2b:a4:2b:95:25:45:e0:
63:72:22:53:12:d8:07:ed:0e:5c:50:46:5f:2f:77:
ba:0c:47:ad:ce:55:92:c9:d8:7c:61:75:c5:ce:68:
42:a9:e5:5b:39:c8:74:df:29:cf:aa:24:b0:a8:cb:
f2:a3:c4:57:8b:e4:4b:75:ff:90:90:6a:09:1b:bf:
dd:24:94:a5:f8:2e:64:db:6c:93:d4:7e:14:db:1b:
ed:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:69:66:36:3D:36:73:00:5B:CB:98:BB:46:47:90:8C:B9:58:FC:77
X509v3 Authority Key Identifier:
keyid:D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:a2:53:b8:7c:ef:23:cf:ea:1d:4e:d2:a1:42:94:87:03:1b:
2b:de:08:5d:f0:38:6c:80:77:49:34:d7:71:81:c2:47:42:36:
52:85:6f:01:39:51:92:b7:46:5f:5b:62:75:17:42:0f:3a:97:
17:fc:28:b6:12:c9:2e:ec:3f:71:fb:25:d5:30:bc:59:42:8b:
9e:7e:49:a1:83:32:a6:f5:b4:5e:e1:90:15:06:e7:bb:67:ea:
b2:56:f7:65:fe:2a:44:cb:d6:1f:0e:7c:9f:46:d3:5e:a1:19:
31:13:8f:8c:61:bf:db:87:1e:14:2e:96:db:00:8b:85:e5:16:
69:a5:72:33:f9:0e:da:34:9b:02:b5:fc:0f:0f:34:60:2b:a1:
ff:ad:bf:5a:4e:29:52:8a:84:b1:6f:5f:c7:5a:f8:10:35:69:
c6:d2:44:45:46:78:aa:98:11:32:b4:4f:2a:21:a1:d3:25:25:
1d:8a:1e:e7:56:73:84:c4:8e:b4:71:79:5a:f1:a4:a3:be:c1:
a7:f1:0c:6a:58:cd:00:c8:ce:5b:3e:c3:43:a3:90:a0:1d:1c:
26:27:b8:84:fe:9d:d2:36:10:7f:4f:ed:91:22:d9:a9:aa:41:
5e:b3:f7:47:58:33:a2:3b:ce:58:92:6d:a7:dd:47:df:27:98:
ea:80:f1:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0390Bw48bAgyRCRUyF8kmSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYzhiMTBhMzhmODFjNjRlMjAxMjA3YmZjMzU0NGMyOTcy
YWY1ZjMwHhcNMjYwMzI5MDUwMDQzWhcNMjYwMzMwMDUwMDQzWjAzMTEwLwYDVQQD
EygyMzY5NjYzNjNkMzY3MzAwNWJjYjk4YmI0NjQ3OTA4Y2I5NThmYzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse6B6n+TjR3Hnt7lpg6jlKxWQyTB
9HH1Jxsf8bovjDGo1IVvnbjIRLAM2VXzh6YvIDkOM08yC6R7Oa78+nudUcxke05y
YHHC4FK7KtApyqYJZl698OjDZAeEZDGHBGwYMYH9DuvScisuU6mrIiv3f+EO6fs9
ZL73s1XfFb/fEVKR/9c2ITeE8Qiiv53kORv71n1ME3NyuXhcLAaU2ySOGOjx6fMW
qXgxjNqw5SukK5UlReBjciJTEtgH7Q5cUEZfL3e6DEetzlWSydh8YXXFzmhCqeVb
Och03ynPqiSwqMvyo8RXi+RLdf+QkGoJG7/dJJSl+C5k22yT1H4U2xvt8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNpZjY9NnMAW8uYu0ZHkIy5WPx3MB8GA1UdIwQY
MBaAFNPIsQo4+Bxk4gEge/w1RMKXKvXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDhpeENqajRIR1RpQVNCN19EVkV3cGNxOWZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82NGQ0ZDAtNmM5OC00ZWVjLWJiYTEt
MzdhYTM1ZTY5ZGMxLzEvMDhpeENqajRIR1RpQVNCN19EVkV3cGNxOWZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82NGQ0ZDAtNmM5OC00ZWVjLWJiYTEtMzdhYTM1ZTY5ZGMx
LzEvMDhpeENqajRIR1RpQVNCN19EVkV3cGNxOWZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuqJTuHzv
I8/qHU7SoUKUhwMbK94IXfA4bIB3STTXcYHCR0I2UoVvATlRkrdGX1tidRdCDzqX
F/wothLJLuw/cfsl1TC8WUKLnn5JoYMypvW0XuGQFQbnu2fqslb3Zf4qRMvWHw58
n0bTXqEZMROPjGG/24ceFC6W2wCLheUWaaVyM/kO2jSbArX8Dw80YCuh/62/Wk4p
UoqEsW9fx1r4EDVpxtJERUZ4qpgRMrRPKiGh0yUlHYoe51ZzhMSOtHF5WvGko77B
p/EMaljNAMjOWz7DQ6OQoB0cJie4hP6d0jYQf0/tkSLZqapBXrP3R1gzojvOWJJt
p91H3yeY6oDxQw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:21 2026 by rpki-client