Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
File: 08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json)
Hash identifier: PMVM5w4OuPkasRqXsmW6NCWmxJ05DXzQR8zut0k+jL0=
Subject key identifier: 4E:B1:AD:AE:65:73:CA:0B:F5:6A:82:59:BB:7A:30:24:F5:CC:27:80
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 019D3A1C33DCC0858894CE9CDDDC5CFE5750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
Manifest number: 147D
Signing time: Sun 29 Mar 2026 15:00:19 +0000
Manifest this update: Sun 29 Mar 2026 15:00:19 +0000
Manifest next update: Mon 30 Mar 2026 15:00:19 +0000
Files and hashes: 1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: HdpWXHvv5sspPZ58cJ7l4KVP+GusPcy+lp04aGMAGYg=)
2: 7n21j0arkV0i_T2sVOrocRSEjSQ.roa (hash: 4uQJyIy3PMd9RTNB8+vJy+PcEdAqthYjAtrKR+jgLzI=)
3: Ct0sflIrK_cXgAXTEX8rXCBCKlM.roa (hash: pgN9gxLU+eOKOCJZYi81vZeUlJY1MKjflpGIHAxbUlw=)
4: JoeiFWNjjvIPOlROi_VGGMgQhvU.roa (hash: zb+eHGR6nD50fILOA3y9cV4VqzOKkbibkd0YSA6RbyM=)
5: LFj2hJJ6E7iqYzWeILrxQrVLptk.roa (hash: snEdRhwSL+4U9//+ADUommVyc5tAITtVppKqVSgzWBs=)
6: Nll2VEGJDP-MjZyazKwqEMpaKJE.roa (hash: CRQpyoRVKRlg6q0nS/VPYWwFarEicvmg0fHkXSK4Ln0=)
7: Trm4kxQ4gUhwM6zDV6KZX-ywRKE.roa (hash: E3EsOUvydU2GP/mXzofXHEmABcQ8lrxuyBxUbDage68=)
8: Z0SiG0C6BPcf3JRi6Nl3J9q_3os.roa (hash: NV+K1fkE6wl7yh47F8n5bFbyG2dYxLxOb6GHsNPTGww=)
9: oMvIFNcxSvkPaWRTAOlwiUjSC3s.roa (hash: 6/Zpm1CgcWVq8/qD3TqDrcDV9ugUyfCELYTDGErExSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:33:dc:c0:85:88:94:ce:9c:dd:dc:5c:fe:57:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Mar 29 15:00:19 2026 GMT
Not After : Mar 30 15:00:19 2026 GMT
Subject: CN=4eb1adae6573ca0bf56a8259bb7a3024f5cc2780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:71:2a:54:0b:ee:ee:54:da:5c:81:ea:3a:83:
6f:09:44:75:25:dd:a0:3d:b3:b6:23:7e:a3:0b:ae:
89:03:8e:31:0d:f1:6d:21:3b:f6:68:07:a4:c1:c2:
6a:d1:c1:7a:4d:17:c5:e5:f9:3b:bc:e3:db:aa:52:
95:28:50:99:5f:4e:7d:80:dc:6f:d5:58:bd:ac:2a:
41:45:2a:46:27:16:d8:57:31:eb:1f:70:fc:07:5f:
68:8f:83:5d:71:96:d9:42:b6:d3:8f:61:35:8c:77:
c8:cb:56:13:7d:a9:a5:c3:94:97:f8:81:e4:bb:13:
94:2a:fd:ee:01:9f:87:45:50:ca:07:34:80:07:3a:
2a:0a:ab:59:c1:96:a1:68:d8:07:8c:9b:9d:b3:9a:
b5:43:65:0a:5f:c5:52:17:3b:09:78:d3:e1:95:91:
21:70:16:08:19:d9:d3:f7:48:bc:cc:96:29:99:1e:
ef:e0:9c:cd:c7:bc:b7:4d:a4:8a:b1:fa:17:51:ac:
18:9e:3a:ae:06:c2:2e:bb:95:04:83:ef:17:89:f3:
62:29:7d:e3:c3:af:d0:82:a6:6e:9b:2a:79:51:a7:
37:58:ee:b4:61:f6:bf:bf:8d:35:ac:51:e8:c6:8e:
a5:e3:a8:af:fd:1d:20:a1:f1:c9:cf:10:ae:c6:b2:
55:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B1:AD:AE:65:73:CA:0B:F5:6A:82:59:BB:7A:30:24:F5:CC:27:80
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f3:36:bc:1f:61:55:60:ff:3f:10:19:e4:40:20:01:07:2f:
f1:b5:d1:f2:1e:c3:b2:6a:36:12:16:c6:01:0d:de:36:f5:08:
a6:54:9b:fd:79:3e:c6:97:c3:e2:66:d2:5e:f8:7a:ac:14:1f:
9e:07:34:fa:2a:26:48:53:62:17:ba:b0:4d:ed:09:8f:46:3e:
f4:bd:ad:33:e1:6d:4f:5e:06:87:7b:94:e5:00:cb:16:a6:d7:
87:3c:95:88:ac:44:e4:35:38:7f:a8:83:37:34:db:a4:b0:2a:
95:b2:f1:d3:20:97:29:9d:2d:61:1c:32:0d:70:26:89:52:67:
19:65:29:a2:c5:aa:a6:47:5e:7f:32:0a:cb:7c:c3:df:d6:25:
8b:62:f0:dd:18:b6:8b:34:e5:09:16:cc:bb:c6:ed:45:0e:47:
96:f4:4b:f9:58:72:9a:57:1b:06:1e:78:9e:4b:d4:46:58:83:
c3:54:0b:59:ee:67:b0:97:fd:25:c0:83:94:d1:d8:de:7b:a3:
bc:fe:90:ea:fa:6d:18:d8:6d:3b:25:25:39:e5:cd:13:1a:10:
df:bf:a7:d3:09:d5:66:fa:00:4a:58:d5:7a:36:f9:5e:49:15:
e7:14:48:23:08:27:b7:87:c5:ea:c9:e4:c5:1b:82:1e:6d:34:
03:50:65:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:33:48 2026 by rpki-client