Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
File: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft (raw, json)
Hash identifier: kMmb55jl48nQr8Mj9lxsk1Dd6X+l9iO4bKSsdoIdx/M=
Subject key identifier: E5:07:16:D0:FE:93:07:77:62:DB:BB:3A:C5:41:B8:BF:19:D6:02:38
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 019D39419434673A99FCFF17577FC26B8036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
Manifest number: 119E
Signing time: Sun 29 Mar 2026 11:01:31 +0000
Manifest this update: Sun 29 Mar 2026 11:01:31 +0000
Manifest next update: Mon 30 Mar 2026 11:01:31 +0000
Files and hashes: 1: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl (hash: PYMXkAHsliDAb3JEtaTzDlyz0gSKr4wp4SFPBEgn9k4=)
2: 0V-w3tDn9Ii7wEf_3PIPPd8VkUU.roa (hash: AHBUN3IzppsPqNH2SnhoKLmN14OyJvW6LsX7/a5FGQI=)
3: AFteCS1Hd7e6qi02RMRsgw9AZFI.roa (hash: gi5cvPOf8jzBgqQP0MjAWXH2Iw3GEPq9YJDLxWTBGA8=)
4: Bf1ICiFWHnqDiPMjiau8ZWQ7k-k.roa (hash: YEYPYSN2Ox9vi1nDDFcsvGXIuVBfRDtl1tK03TttRWQ=)
5: HYskSlnFFnMGNI10Uw104dCcvuE.roa (hash: XKJ9awBieOSrdMNdzhx1JpF/kxXhAcJ85Wzb/jM8VwM=)
6: NYre9NG9YeEOV-9DADYBR1_ANFc.roa (hash: SGio3sReojeOyDGlNC4y1GQcfv+IKwO1tdbB5z6Ax9c=)
7: ilxsUka29LSmxhagYYgOUwx9G1M.roa (hash: Z+faE599Aw5TvsDGU85PKGJH3ruym0pUbib3gVDAVFE=)
8: ur620Y0Jnk61OHeYYoTBq--EZKE.roa (hash: OtNM19zTl3crChLyF+XGQsp+urHf9QrZvH/kX/2ejmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:94:34:67:3a:99:fc:ff:17:57:7f:c2:6b:80:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Mar 29 11:01:31 2026 GMT
Not After : Mar 30 11:01:31 2026 GMT
Subject: CN=e50716d0fe93077762dbbb3ac541b8bf19d60238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:18:14:53:5b:fe:b9:91:26:30:a9:9f:49:22:
dc:8b:e7:8c:81:97:29:56:5e:d5:ce:dc:eb:71:a9:
58:f1:fe:69:b8:92:96:22:72:3e:10:5f:37:97:05:
5f:c7:85:d6:4d:ff:3c:1f:be:22:09:a3:ad:b6:48:
d9:ca:84:dc:71:08:bf:86:3c:44:f1:6f:50:36:9c:
70:46:9d:46:88:74:0b:be:44:56:e0:93:c4:2b:88:
59:d2:a6:30:d8:cf:09:c0:c3:ad:2e:cb:d0:ba:b6:
37:7d:e7:5a:88:b5:f6:7d:28:d2:f6:be:42:7e:81:
ff:9e:ab:f5:fc:b9:f7:fe:67:51:7d:b2:45:6d:1f:
6f:4c:ba:bf:e2:e0:71:c4:88:f0:de:1b:be:30:05:
5e:fa:c2:78:46:74:90:8e:ad:36:05:fd:f9:66:2b:
66:1f:d0:f8:2c:c7:16:40:01:1e:eb:11:91:66:f2:
c7:2d:21:c0:3c:b8:8c:87:f5:48:82:c0:b3:57:18:
29:ad:99:08:71:f8:c9:42:6d:cc:0d:fc:87:0c:54:
1a:68:5d:b7:3c:6b:03:72:af:7a:53:6f:33:7f:46:
37:dd:1c:5e:2b:79:f9:30:36:36:a7:b4:e7:27:4d:
be:1d:53:e4:6b:af:66:ec:e8:c0:bd:c1:9d:ae:43:
09:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:07:16:D0:FE:93:07:77:62:DB:BB:3A:C5:41:B8:BF:19:D6:02:38
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:19:d3:e5:a5:61:8e:8f:d7:b2:bc:ab:b9:88:7d:1c:d1:40:
1c:7d:47:e3:ea:f2:52:1a:22:5e:79:4d:7f:44:3c:7c:3f:be:
9b:cc:74:30:14:5c:b5:b8:f1:65:75:45:ae:ff:1f:86:e2:81:
58:2f:69:6f:23:d2:ae:04:20:9e:1f:bc:3f:04:d3:5b:c7:38:
65:54:5c:d9:8b:07:25:c0:2b:2d:67:e3:37:71:c9:ad:80:0b:
5d:fd:52:0e:af:45:00:e0:35:97:d3:a9:ef:19:33:76:6d:ff:
3c:c6:a2:d2:4f:aa:c7:07:ed:39:50:0c:7e:89:74:97:15:d7:
a7:a7:e9:88:40:50:fa:0c:c1:8e:34:18:73:f3:0c:78:5d:55:
7c:fd:03:0c:72:4a:85:dc:3f:c9:55:15:17:4b:c4:1d:b1:0c:
51:35:21:e7:e4:3e:c5:82:93:78:86:d2:0d:f5:c5:db:76:17:
7f:15:9f:76:b0:03:b8:53:ba:b4:90:06:aa:96:40:a3:be:6a:
cf:e5:9f:f1:56:63:2c:0e:82:c3:b1:c9:8b:b6:55:dc:56:d0:
93:ec:c9:36:ec:67:55:77:a3:40:9e:96:39:a8:de:35:8f:c4:
3f:02:05:5c:ca:81:77:04:3f:2a:0c:38:f5:5c:90:09:87:bf:
da:c9:80:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QZQ0ZzqZ/P8XV3/Ca4A2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYzM1YmM5YjdmODU1MGJlM2U0NjdjNTRhOWQzYTY2ZTI0
NDNiZDQwHhcNMjYwMzI5MTEwMTMxWhcNMjYwMzMwMTEwMTMxWjAzMTEwLwYDVQQD
EyhlNTA3MTZkMGZlOTMwNzc3NjJkYmJiM2FjNTQxYjhiZjE5ZDYwMjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRgUU1v+uZEmMKmfSSLci+eMgZcp
Vl7VztzrcalY8f5puJKWInI+EF83lwVfx4XWTf88H74iCaOttkjZyoTccQi/hjxE
8W9QNpxwRp1GiHQLvkRW4JPEK4hZ0qYw2M8JwMOtLsvQurY3fedaiLX2fSjS9r5C
foH/nqv1/Ln3/mdRfbJFbR9vTLq/4uBxxIjw3hu+MAVe+sJ4RnSQjq02Bf35Zitm
H9D4LMcWQAEe6xGRZvLHLSHAPLiMh/VIgsCzVxgprZkIcfjJQm3MDfyHDFQaaF23
PGsDcq96U28zf0Y33RxeK3n5MDY2p7TnJ02+HVPka69m7OjAvcGdrkMJ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUHFtD+kwd3Ytu7OsVBuL8Z1gI4MB8GA1UdIwQY
MBaAFNPDW8m3+FUL4+RnxUqdOmbiRDvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTct
Y2RhNWMzNzY2ZjAzLzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTctY2RhNWMzNzY2ZjAz
LzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxnT5aVh
jo/XsryruYh9HNFAHH1H4+ryUhoiXnlNf0Q8fD++m8x0MBRctbjxZXVFrv8fhuKB
WC9pbyPSrgQgnh+8PwTTW8c4ZVRc2YsHJcArLWfjN3HJrYALXf1SDq9FAOA1l9Op
7xkzdm3/PMai0k+qxwftOVAMfol0lxXXp6fpiEBQ+gzBjjQYc/MMeF1VfP0DDHJK
hdw/yVUVF0vEHbEMUTUh5+Q+xYKTeIbSDfXF23YXfxWfdrADuFO6tJAGqpZAo75q
z+Wf8VZjLA6Cw7HJi7ZV3FbQk+zJNuxnVXejQJ6WOajeNY/EPwIFXMqBdwQ/Kgw4
9VyQCYe/2smAqA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:54:38 2026 by rpki-client