Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
File: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft (raw, json)
Hash identifier: x/ZD09vU/lGALukX0H+tZRqhF/Q3FGFjKYGOVKdvjtg=
Subject key identifier: 36:EB:72:38:C4:DA:49:31:2F:EE:89:32:12:FF:F4:60:CD:94:CD:2F
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 019D9A3EE649841F4A6DFD048F626C810AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
Manifest number: 11D1
Signing time: Fri 17 Apr 2026 07:01:46 +0000
Manifest this update: Fri 17 Apr 2026 07:01:46 +0000
Manifest next update: Sat 18 Apr 2026 07:01:46 +0000
Files and hashes: 1: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl (hash: XoXFxBvf8biWRM4H1zddm0groi5HEVGu/+thxG5OwLI=)
2: 0V-w3tDn9Ii7wEf_3PIPPd8VkUU.roa (hash: AHBUN3IzppsPqNH2SnhoKLmN14OyJvW6LsX7/a5FGQI=)
3: 8iiGHlsOJWwsrr4dYEu2DAJmDu4.roa (hash: 8N8stGdhMpNHOzJEakrzgY5qXFCD32clBj0A+s284Zo=)
4: AFteCS1Hd7e6qi02RMRsgw9AZFI.roa (hash: gi5cvPOf8jzBgqQP0MjAWXH2Iw3GEPq9YJDLxWTBGA8=)
5: Bf1ICiFWHnqDiPMjiau8ZWQ7k-k.roa (hash: YEYPYSN2Ox9vi1nDDFcsvGXIuVBfRDtl1tK03TttRWQ=)
6: HYskSlnFFnMGNI10Uw104dCcvuE.roa (hash: XKJ9awBieOSrdMNdzhx1JpF/kxXhAcJ85Wzb/jM8VwM=)
7: NYre9NG9YeEOV-9DADYBR1_ANFc.roa (hash: SGio3sReojeOyDGlNC4y1GQcfv+IKwO1tdbB5z6Ax9c=)
8: ilxsUka29LSmxhagYYgOUwx9G1M.roa (hash: Z+faE599Aw5TvsDGU85PKGJH3ruym0pUbib3gVDAVFE=)
9: ur620Y0Jnk61OHeYYoTBq--EZKE.roa (hash: OtNM19zTl3crChLyF+XGQsp+urHf9QrZvH/kX/2ejmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e6:49:84:1f:4a:6d:fd:04:8f:62:6c:81:0a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Apr 17 07:01:46 2026 GMT
Not After : Apr 18 07:01:46 2026 GMT
Subject: CN=36eb7238c4da49312fee893212fff460cd94cd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:61:c7:2b:1c:3b:ec:a1:ec:84:cd:cd:fb:
13:08:0f:c6:97:d5:2a:c9:d8:6b:b4:64:26:1e:67:
5c:19:07:2f:3f:e5:7c:9a:93:15:fb:85:4d:f2:25:
14:09:7e:be:1f:79:a6:fa:1d:63:ef:f1:fa:25:e2:
e9:d8:e3:0d:68:a1:7f:b0:6e:1a:2d:91:6c:0e:3b:
c1:6b:02:07:8f:1d:cc:a6:98:06:dc:3b:88:1f:52:
ad:db:81:ee:9b:12:c2:e2:4a:ec:00:41:ee:b6:fc:
a3:52:8c:f6:37:e0:d7:78:63:2d:92:31:a2:bf:7d:
ad:c1:a2:e2:88:03:24:17:3c:98:36:78:2c:84:33:
b2:3a:ae:91:8f:06:aa:e7:59:d7:e4:cb:c1:7b:69:
7c:d1:d6:10:7e:7b:fa:ee:96:12:d8:21:df:56:dd:
55:9c:26:56:98:1c:53:cf:93:0f:c0:ad:22:bb:b9:
81:fe:79:75:ed:6d:4e:e2:81:a6:66:0d:f9:68:46:
bd:76:41:94:db:32:bb:d6:d9:e3:34:9e:36:6f:78:
33:dd:b5:29:5c:fa:c2:43:94:22:15:70:96:bc:9e:
77:56:e6:fb:03:03:b3:cf:55:c6:ec:8e:c5:9f:51:
17:80:56:a0:77:61:77:35:d9:0e:51:6c:3c:0c:d4:
7b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EB:72:38:C4:DA:49:31:2F:EE:89:32:12:FF:F4:60:CD:94:CD:2F
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:da:88:b9:43:1e:13:63:d1:0d:d0:bc:f8:3e:31:37:ad:f6:
73:70:33:76:0d:94:59:d8:a9:c4:56:98:a2:1f:ed:4f:ea:e3:
a1:12:77:91:b3:f1:05:9e:fc:43:4e:06:11:f2:21:10:22:da:
2e:a8:54:b5:58:e1:4c:f9:0c:5e:f3:79:01:43:11:de:70:a9:
33:b0:4d:68:c6:02:02:1f:fd:64:1c:57:f9:ea:23:2a:f8:72:
1d:c5:55:d2:75:da:99:57:9e:2f:41:06:78:f9:10:fb:1e:58:
53:bd:06:78:a7:fb:cf:3c:52:7c:04:47:a4:95:ac:48:b4:4b:
2a:d5:59:3f:bb:48:6e:f7:ea:8c:00:06:f4:da:92:95:96:36:
b4:4e:75:cd:c3:04:6f:60:2a:ae:c1:86:3d:65:db:17:0f:22:
36:bb:66:13:a9:0b:f5:0e:a9:56:78:11:39:05:e0:b3:77:0b:
83:01:2b:c0:59:07:a5:af:28:19:66:e2:04:76:ec:9b:ef:f9:
72:69:ff:3a:e1:30:e7:5b:c5:b6:e0:96:2b:f0:b2:01:ea:c9:
0f:71:07:c8:ad:48:3a:61:4d:df:e7:5e:54:19:3b:14:0e:57:
a9:e2:96:4c:36:48:e1:00:8a:3e:c5:7a:7e:f0:d9:86:35:d7:
21:03:81:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:51:32 2026 by rpki-client