Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
File: 08YXj7A0kFEwrwzhzSdRVPK1m3g.mft (raw, json)
Hash identifier: LgXoZjPhHP+ydskk4yKO7QDb01zkIMGxHAqlgHqaYI0=
Subject key identifier: BA:90:A2:7A:77:33:08:C4:4A:53:6D:8D:A3:62:9D:FC:51:F1:AE:97
Authority key identifier: D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
Certificate issuer: /CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Certificate serial: 019CAD59C903D9DD25870E0F7E3BDC5698FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 07:01:08 +0000
Manifest this update: Mon 02 Mar 2026 07:01:08 +0000
Manifest next update: Tue 03 Mar 2026 07:01:08 +0000
Files and hashes: 1: 08YXj7A0kFEwrwzhzSdRVPK1m3g.crl (hash: eZcT4ZbKiaTZrGFYw3zBVsGCYvaEQe073UukFEzp/XE=)
2: TkVIENg5yxh_iBn69iwP-Gzs7M0.roa (hash: XN4b40QKJDQSEm8B3f99MTAbjS4H9rL0ddzhBtlCaKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:c9:03:d9:dd:25:87:0e:0f:7e:3b:dc:56:98:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Validity
Not Before: Mar 2 07:01:08 2026 GMT
Not After : Mar 3 07:01:08 2026 GMT
Subject: CN=ba90a27a773308c44a536d8da3629dfc51f1ae97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:2f:a0:78:60:79:57:8e:92:e4:69:a2:d2:
b2:68:ba:55:71:6d:55:ce:06:2f:c7:f9:d6:48:a9:
d5:d9:71:d4:b8:9a:63:2e:aa:b7:14:98:98:49:a8:
d0:aa:f1:5e:57:4e:41:b5:04:64:53:7d:10:f2:5a:
30:3f:3b:c7:86:34:05:fd:b8:3e:0b:0b:69:b0:0b:
ad:2a:2b:8c:43:87:5a:8e:a7:8a:3d:af:dc:9b:ae:
35:dd:a5:a2:52:b4:2f:3a:9f:c3:aa:47:f8:a7:14:
23:5e:0a:81:4b:91:91:b6:a4:92:94:fe:c7:1e:c3:
b4:52:ae:f7:b8:12:c2:93:32:6a:b2:6e:f8:f6:a1:
08:e1:74:df:a5:a2:6a:43:f6:e4:d0:0d:f0:73:17:
31:ee:de:d6:c7:49:bc:07:60:9d:51:a9:45:84:0d:
68:1f:96:77:bd:57:62:45:19:f3:b4:9c:5c:7d:0c:
a6:70:9d:c0:67:b6:10:6d:af:dc:f7:14:f3:33:ac:
38:57:be:b2:7d:b2:9c:33:f6:56:50:9a:4d:b5:00:
33:a3:64:98:28:8f:3e:21:b9:7c:45:9f:5f:06:b7:
d4:93:7b:d9:27:e7:34:9e:8a:47:c4:45:09:8c:82:
43:2f:f6:54:a0:ee:07:3e:64:fe:fa:06:ed:43:7c:
a7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:90:A2:7A:77:33:08:C4:4A:53:6D:8D:A3:62:9D:FC:51:F1:AE:97
X509v3 Authority Key Identifier:
keyid:D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f4:c8:03:5d:e3:de:c0:e2:51:16:dc:eb:63:13:f1:ff:f2:
c4:2e:14:ae:0e:e9:df:e6:06:33:2e:2b:af:16:46:76:56:21:
e2:66:4e:28:59:e0:fc:f0:cf:80:9a:ab:c5:d3:e2:9d:29:a9:
2b:05:94:32:48:3d:73:6d:4e:9a:ea:5c:1c:5f:12:ce:63:27:
d8:59:8c:8a:11:e6:93:25:c7:d7:94:7c:c3:98:62:37:b0:d5:
d4:a4:77:73:5f:7c:a0:5d:c4:10:2b:43:8a:5a:8f:44:93:35:
66:21:ae:ff:6a:4d:71:35:e3:0f:42:4f:59:d2:ab:da:3e:ba:
7b:48:c5:a7:98:0c:0a:94:1e:20:77:ad:e6:33:99:de:97:b1:
d6:06:39:03:70:44:45:b7:84:0e:7f:26:62:96:a2:66:e9:18:
06:86:24:ef:59:fa:f2:20:14:e1:83:5e:36:fa:5f:93:45:6a:
be:19:dc:3f:16:2e:16:fb:b3:ff:5b:5b:25:b1:3d:ee:8a:47:
a0:e2:33:c6:09:79:e5:c7:08:02:62:7b:26:f4:76:80:5f:0a:
ad:ea:b3:5c:da:be:ec:a1:da:4f:e3:46:ab:53:8d:52:eb:8f:
3f:28:80:f4:26:d5:1a:2f:e1:7a:4d:e2:ab:60:23:72:00:8d:
18:6a:7a:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWckD2d0lhw4PfjvcVpj/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYzYxNzhmYjAzNDkwNTEzMGFmMGNlMWNkMjc1MTU0ZjJi
NTliNzgwHhcNMjYwMzAyMDcwMTA4WhcNMjYwMzAzMDcwMTA4WjAzMTEwLwYDVQQD
EyhiYTkwYTI3YTc3MzMwOGM0NGE1MzZkOGRhMzYyOWRmYzUxZjFhZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGcvoHhgeVeOkuRpotKyaLpVcW1V
zgYvx/nWSKnV2XHUuJpjLqq3FJiYSajQqvFeV05BtQRkU30Q8lowPzvHhjQF/bg+
CwtpsAutKiuMQ4dajqeKPa/cm6413aWiUrQvOp/Dqkf4pxQjXgqBS5GRtqSSlP7H
HsO0Uq73uBLCkzJqsm749qEI4XTfpaJqQ/bk0A3wcxcx7t7Wx0m8B2CdUalFhA1o
H5Z3vVdiRRnztJxcfQymcJ3AZ7YQba/c9xTzM6w4V76yfbKcM/ZWUJpNtQAzo2SY
KI8+Ibl8RZ9fBrfUk3vZJ+c0nopHxEUJjIJDL/ZUoO4HPmT++gbtQ3ynwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqQonp3MwjESlNtjaNinfxR8a6XMB8GA1UdIwQY
MBaAFNPGF4+wNJBRMK8M4c0nUVTytZt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDhZWGo3QTBrRkV3cnd6aHpTZFJWUEsxbTNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83OGZkZTktNmRmMC00YWUyLTliMzct
YTdjNGIyZjZlMjc2LzEvMDhZWGo3QTBrRkV3cnd6aHpTZFJWUEsxbTNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83OGZkZTktNmRmMC00YWUyLTliMzctYTdjNGIyZjZlMjc2
LzEvMDhZWGo3QTBrRkV3cnd6aHpTZFJWUEsxbTNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/TIA13j
3sDiURbc62MT8f/yxC4Urg7p3+YGMy4rrxZGdlYh4mZOKFng/PDPgJqrxdPinSmp
KwWUMkg9c21OmupcHF8SzmMn2FmMihHmkyXH15R8w5hiN7DV1KR3c198oF3EECtD
ilqPRJM1ZiGu/2pNcTXjD0JPWdKr2j66e0jFp5gMCpQeIHet5jOZ3pex1gY5A3BE
RbeEDn8mYpaiZukYBoYk71n68iAU4YNeNvpfk0VqvhncPxYuFvuz/1tbJbE97opH
oOIzxgl55ccIAmJ7JvR2gF8KreqzXNq+7KHaT+NGq1ONUuuPPyiA9CbVGi/hek3i
q2AjcgCNGGp6LA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:22 2026 by rpki-client