Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
File: 08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json)
Hash identifier: HjD+JpInkAfMPSYPCfCIPwbt5qTO04Y+b31htcAnmu8=
Subject key identifier: E3:7F:E7:85:DD:8D:E2:6A:2E:4E:22:E3:36:EB:41:1E:63:B7:4D:80
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Certificate issuer: /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial: 019D39E5E9246290179DCDA6A098D832CF83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 14:01:01 +0000
Manifest this update: Sun 29 Mar 2026 14:01:01 +0000
Manifest next update: Mon 30 Mar 2026 14:01:01 +0000
Files and hashes: 1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: JicvNoUyEaELoVuzKOKGl9mWb5hgGwPOieLW6SnWlVw=)
2: kDYFCwOTqCtWju9awtc-WWDQSp4.roa (hash: niu24Rn9CdcANUXflUaTh1yPPLtTi4dexe3GG8dp0NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:e9:24:62:90:17:9d:cd:a6:a0:98:d8:32:cf:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Validity
Not Before: Mar 29 14:01:01 2026 GMT
Not After : Mar 30 14:01:01 2026 GMT
Subject: CN=e37fe785dd8de26a2e4e22e336eb411e63b74d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7b:4e:07:e0:d3:c9:77:0d:40:44:d1:fb:3f:
34:41:10:19:2c:06:bf:31:bd:cc:59:5a:7a:85:b6:
a5:95:7c:8a:6f:08:68:1c:7e:ff:1b:ff:a9:d6:81:
20:d5:59:26:10:df:c9:1b:ac:a5:6c:1d:dd:c8:69:
6a:8d:db:07:52:5d:9e:9d:81:33:3c:ed:d3:fa:e6:
4c:84:3a:ed:70:22:c8:5d:5d:70:a6:40:1e:e2:07:
fc:f8:56:46:1b:98:8f:8d:45:b6:37:b3:eb:ac:d4:
43:d7:e8:c3:41:57:9c:2a:82:ba:7f:43:fa:b0:b1:
ad:1e:14:20:b3:d7:25:b3:8f:91:45:8d:dd:8a:8d:
b9:24:e6:2a:e5:4f:e6:18:18:0b:fe:a4:7b:f9:74:
7e:20:34:0d:87:09:d2:d4:7a:5d:c3:a3:16:17:31:
36:f2:ea:03:16:61:dd:2b:3e:fc:8b:db:6f:f4:4f:
81:fe:7e:92:23:20:ad:67:97:25:28:da:9f:9f:97:
48:6b:b4:1f:70:60:11:5c:70:e1:79:a3:fa:61:dd:
85:81:1e:a9:1f:f3:c5:5e:94:20:e5:46:81:55:92:
88:bc:cc:1c:10:7f:7d:cf:ea:98:18:3d:55:2f:d3:
43:33:a1:82:d4:e2:05:18:25:98:9d:0e:64:a2:b4:
00:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7F:E7:85:DD:8D:E2:6A:2E:4E:22:E3:36:EB:41:1E:63:B7:4D:80
X509v3 Authority Key Identifier:
keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9d:7f:11:da:d6:bb:33:f5:e0:2b:60:ee:9b:3e:fe:8e:b0:
90:82:39:0b:5e:bf:32:0e:a6:d9:e4:7c:aa:8d:17:4c:92:65:
e3:9a:f4:4d:28:df:61:ca:55:4c:a9:d3:22:e8:49:96:eb:12:
9c:a6:30:1c:7c:30:18:0b:de:37:60:5e:70:d9:b3:e8:a4:c5:
cb:6e:44:79:c1:9d:3f:70:bf:e0:57:21:1c:5b:cd:ec:5d:6c:
5d:49:04:47:94:fd:d2:03:72:af:97:fc:7e:71:e7:6d:ce:21:
65:4c:6b:09:10:0d:17:b7:a1:84:4d:32:8b:6f:56:0d:da:b4:
01:37:0a:18:0d:9c:36:83:ff:0c:dc:40:fd:57:79:70:e7:f2:
ba:54:d1:a2:61:3f:10:dd:53:50:29:49:69:04:7a:d1:7b:66:
be:f3:46:f9:2f:2f:8f:4a:59:90:97:53:39:6a:d8:ff:9e:76:
cb:be:1f:f5:bf:53:6e:71:5d:22:3f:cb:0c:b3:5e:77:66:ea:
74:7c:38:88:ec:7e:a4:20:fa:87:cb:8f:b2:11:05:49:e5:b5:
6e:ae:46:bd:55:bc:0d:89:25:0c:c6:32:65:22:24:dd:c8:c4:
96:83:13:e8:9f:49:80:43:a5:e3:df:98:4b:f9:06:d3:ec:51:
e2:9c:74:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:46 2026 by rpki-client