Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
File: 08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json)
Hash identifier: HlGdvwVvXMQ7hSf5WkAfCfbeBvVYiBQELqqQApqWyJc=
Subject key identifier: 0B:09:A5:E2:00:D3:19:D8:EF:48:91:65:8A:F9:14:51:6F:69:C5:AF
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Certificate issuer: /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial: 019F18D6CF5D67789D03CF2FB3C87627AF83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 14:02:38 +0000
Manifest this update: Tue 30 Jun 2026 14:02:38 +0000
Manifest next update: Wed 01 Jul 2026 14:02:38 +0000
Files and hashes: 1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: h2DLrP10Nhx/8krSuwsOMfBcnF0x+8Oaqxp6iPeRkTg=)
2: kDYFCwOTqCtWju9awtc-WWDQSp4.roa (hash: niu24Rn9CdcANUXflUaTh1yPPLtTi4dexe3GG8dp0NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:cf:5d:67:78:9d:03:cf:2f:b3:c8:76:27:af:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Validity
Not Before: Jun 30 14:02:38 2026 GMT
Not After : Jul 1 14:02:38 2026 GMT
Subject: CN=0b09a5e200d319d8ef4891658af914516f69c5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:64:8b:ef:ac:0f:15:b6:5b:0f:1f:10:64:4d:
de:5f:93:1b:6f:8a:11:cf:23:51:f7:bd:e9:fa:63:
7e:da:97:1d:34:76:69:e2:26:16:6f:91:9d:7a:3c:
31:c0:ec:dd:52:be:65:dd:d5:2f:17:db:40:8a:66:
8e:88:8a:77:08:bc:3d:3e:28:ba:fd:0f:13:1b:94:
4c:ea:0b:2f:58:d1:c1:ee:85:72:95:0b:17:62:ae:
26:86:f6:cc:09:f2:91:6f:98:a3:e2:b9:61:e1:a2:
9b:5d:53:3f:e7:6a:33:1f:aa:0d:a0:86:8d:00:0b:
17:3e:46:78:6e:5d:53:7b:3a:6f:66:0e:fd:d7:7a:
75:2c:5c:9f:90:51:fb:f4:e1:bf:90:ea:1b:17:c7:
2c:f9:c9:59:67:0c:36:0f:dc:6d:88:e5:73:25:88:
72:69:13:ec:63:ba:1b:07:3f:70:e4:2a:4f:af:5c:
b4:d3:bc:58:ea:32:d4:bb:f9:7c:24:b5:07:6b:d3:
ef:0d:5f:1e:56:7c:bb:4b:ce:09:06:34:ba:f6:32:
ed:2d:9b:ff:73:da:75:6d:50:6c:f3:fc:b0:db:78:
6a:de:51:69:3f:a7:18:a3:33:57:ba:8c:96:e3:5a:
8e:ea:7d:68:28:16:30:9a:24:72:0f:cc:8a:1f:bb:
51:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:09:A5:E2:00:D3:19:D8:EF:48:91:65:8A:F9:14:51:6F:69:C5:AF
X509v3 Authority Key Identifier:
keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:94:dc:2a:ee:36:9a:62:a9:48:f4:e1:97:ea:71:af:88:f8:
e4:d6:44:27:27:83:76:02:da:3a:82:c7:e0:ec:51:48:8a:70:
3c:40:33:d1:83:e8:30:8a:e9:e1:bc:0f:82:13:5f:91:59:6c:
f2:45:18:43:1e:62:35:80:de:9e:a1:70:00:05:84:dd:ca:67:
d3:fc:09:cc:6f:e8:0b:ff:c5:c7:56:fc:56:d9:80:ad:cc:c0:
b1:61:c7:49:64:db:71:78:72:08:1d:51:f8:3b:af:57:96:66:
3c:97:d1:ad:10:5b:96:66:f6:37:fd:53:42:0a:17:bb:40:93:
9e:76:35:8c:ab:37:23:13:54:b8:44:4b:e1:30:c1:86:0d:08:
85:73:de:70:c2:63:f6:2c:2f:8b:f6:2d:2b:dd:ce:89:a5:31:
8f:39:1e:0e:5b:e0:0e:30:35:7d:fa:34:d3:41:64:29:34:27:
34:fa:34:5b:d3:44:14:fe:63:e0:d6:16:52:9e:91:2b:8c:0d:
00:db:bd:e9:04:64:b6:84:16:74:b3:d4:05:a6:41:e1:05:0f:
cd:79:57:7a:1c:ac:a8:94:43:07:1b:de:5c:da:78:94:16:9c:
6f:1a:08:50:dd:d4:55:d6:b3:de:b2:48:f1:ca:6e:4a:2f:73:
5a:56:b0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:57 2026 by rpki-client