Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
File: 08ixCjj4HGTiASB7_DVEwpcq9fM.mft (raw, json)
Hash identifier: f1zzu+owgOLCMv70slxJvqnXn5WoO3yxmic1tGhmpQU=
Subject key identifier: 8D:61:C8:A9:8D:2C:59:13:8A:7D:08:A3:92:3C:A5:00:FF:07:5D:F2
Authority key identifier: D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3
Certificate issuer: /CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
Certificate serial: 019CACEB9E1AE61997B9D99D94C7FC3E19C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
Manifest number: 1207
Signing time: Mon 02 Mar 2026 05:00:48 +0000
Manifest this update: Mon 02 Mar 2026 05:00:48 +0000
Manifest next update: Tue 03 Mar 2026 05:00:48 +0000
Files and hashes: 1: 08ixCjj4HGTiASB7_DVEwpcq9fM.crl (hash: f7ha5QfDFVOyx/1wZ36R/gOVbsg3hxDqnG3dQvWK45k=)
2: yXhNyXRSfQjfxmo-xnpGQqFi810.roa (hash: SLF2lVj7vn7i6fplRiTtNXFnugUCA5oqM+ECg7CqrFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:9e:1a:e6:19:97:b9:d9:9d:94:c7:fc:3e:19:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
Validity
Not Before: Mar 2 05:00:48 2026 GMT
Not After : Mar 3 05:00:48 2026 GMT
Subject: CN=8d61c8a98d2c59138a7d08a3923ca500ff075df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:9b:d6:79:3e:78:c9:9f:ff:75:bc:5d:a7:
85:cf:cd:34:c8:c4:d5:bd:47:6c:45:7d:85:60:fa:
ed:f6:e0:7a:4d:4f:cb:53:f7:d7:37:0c:1e:09:38:
73:1e:ac:88:d6:95:cf:f4:19:c8:5c:1c:c2:d7:85:
27:a4:e4:db:33:bd:dc:25:17:80:a0:eb:ea:44:c2:
46:43:a4:61:98:2d:81:bc:7c:70:2a:41:eb:43:c3:
93:0f:b9:09:95:82:0c:ab:bc:6b:bc:13:ef:9c:89:
f1:6c:b5:30:4e:bf:8b:9f:fc:70:9b:2c:17:16:08:
69:ae:4d:30:2e:33:b6:bb:5b:92:99:36:d1:99:22:
10:25:30:c4:c7:1e:4b:19:ba:24:80:27:1b:59:a7:
d3:39:70:f3:cf:03:57:0b:c8:91:d3:27:d7:28:2f:
bb:e8:c7:60:d0:fe:0b:f0:a7:1a:0c:18:c2:4c:d5:
c3:91:e5:a1:3e:dc:32:7d:25:35:06:37:4b:26:5d:
5a:30:2d:34:ec:f1:1d:08:0b:8c:69:ff:62:41:36:
59:b3:8f:4f:fd:33:26:0f:ee:0c:82:f3:29:a7:4c:
a1:1f:f1:9d:93:b7:c3:37:0c:a7:71:54:a0:b1:47:
1b:cd:8d:68:c2:11:6b:cf:88:5a:a6:8e:ae:30:77:
9a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:61:C8:A9:8D:2C:59:13:8A:7D:08:A3:92:3C:A5:00:FF:07:5D:F2
X509v3 Authority Key Identifier:
keyid:D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ca:fb:fb:ff:e6:ce:75:89:8e:3f:ec:e4:e5:18:e4:2f:4d:
62:71:22:c3:60:5a:3c:b2:e4:b3:c3:2a:10:0d:3d:8f:66:92:
1e:02:01:1c:6d:0c:67:4d:c9:21:47:a1:90:c5:fe:a7:b0:00:
0e:c8:a1:38:88:13:2b:5d:ab:a7:b4:ac:b5:52:f2:31:98:0a:
a1:91:0d:9f:dd:de:1a:40:8e:05:e6:ff:e2:aa:99:2f:45:b3:
20:15:0a:bc:50:72:d7:ca:c7:9e:dd:ed:73:76:61:90:b4:cd:
60:b8:26:a4:88:78:2f:d7:d2:81:6c:dc:bd:bf:c2:6f:99:3a:
36:30:02:fd:c8:6f:54:95:39:72:07:f6:a4:6e:e9:46:e2:81:
d0:8d:c5:e0:d0:c7:ca:cf:a5:d8:a8:93:77:29:13:eb:cf:24:
29:32:78:24:26:2b:fc:b9:15:ed:a1:08:18:17:b0:4c:bc:b6:
92:3c:24:00:05:c0:b9:9c:07:f9:be:10:68:ff:75:bd:ca:43:
64:fe:f2:86:2a:b0:7a:1a:22:20:60:7a:c5:6b:33:3e:b9:4a:
6a:da:25:c0:b3:e8:4a:9b:a3:ea:79:63:e7:02:aa:89:f6:a5:
f3:25:1d:2c:71:3f:eb:c4:73:7c:64:71:be:aa:fa:6a:f2:cf:
1c:42:fc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:34:15 2026 by rpki-client