Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
File: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft (raw, json)
Hash identifier: Hkpro9QeCVzIMnr4+aZ8RCCXmiqNyntNsF/x0z4rXFI=
Subject key identifier: FF:6D:98:F9:92:72:AD:4C:20:D6:01:58:26:D1:83:FA:E7:52:93:25
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 019CAAFD0F3C9EEA91E730F1AB9D18A7BFA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
Manifest number: 1154
Signing time: Sun 01 Mar 2026 20:00:37 +0000
Manifest this update: Sun 01 Mar 2026 20:00:37 +0000
Manifest next update: Mon 02 Mar 2026 20:00:37 +0000
Files and hashes: 1: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl (hash: pMC0ThIWxtuwhtzHxQEt0fr1f8MMeyg2omacgIRKYwQ=)
2: AFteCS1Hd7e6qi02RMRsgw9AZFI.roa (hash: gi5cvPOf8jzBgqQP0MjAWXH2Iw3GEPq9YJDLxWTBGA8=)
3: Bf1ICiFWHnqDiPMjiau8ZWQ7k-k.roa (hash: YEYPYSN2Ox9vi1nDDFcsvGXIuVBfRDtl1tK03TttRWQ=)
4: HYskSlnFFnMGNI10Uw104dCcvuE.roa (hash: XKJ9awBieOSrdMNdzhx1JpF/kxXhAcJ85Wzb/jM8VwM=)
5: NYre9NG9YeEOV-9DADYBR1_ANFc.roa (hash: SGio3sReojeOyDGlNC4y1GQcfv+IKwO1tdbB5z6Ax9c=)
6: ilxsUka29LSmxhagYYgOUwx9G1M.roa (hash: Z+faE599Aw5TvsDGU85PKGJH3ruym0pUbib3gVDAVFE=)
7: pULqtEc0SKsqXGeiOnWWkrPorn8.roa (hash: qVqRlYliwpuyABHvme30cNreSUW+F7/kOdteNrRIdnk=)
8: ur620Y0Jnk61OHeYYoTBq--EZKE.roa (hash: OtNM19zTl3crChLyF+XGQsp+urHf9QrZvH/kX/2ejmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:0f:3c:9e:ea:91:e7:30:f1:ab:9d:18:a7:bf:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Mar 1 20:00:37 2026 GMT
Not After : Mar 2 20:00:37 2026 GMT
Subject: CN=ff6d98f99272ad4c20d6015826d183fae7529325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:93:09:65:0b:40:ff:04:e6:ec:89:c2:ff:65:
79:6c:96:61:91:d8:ca:01:52:e6:b7:3a:8d:98:75:
2a:f0:39:98:c7:06:7f:55:14:1d:42:54:6e:76:3c:
80:7a:c3:be:6f:79:6a:2b:6b:4f:53:75:d6:37:69:
f2:0c:f4:f3:6a:22:b8:67:f7:f6:46:5c:d1:f9:da:
95:e1:70:7a:42:8d:e5:42:0d:0c:25:29:b6:37:0d:
f7:bb:ee:6e:67:03:8a:32:5f:b8:71:32:ba:24:63:
c1:d6:9a:6a:08:17:2a:31:45:fd:da:8d:6c:12:2a:
40:92:14:1e:3f:20:43:ad:eb:a0:b3:f2:04:47:73:
f6:98:85:90:09:82:bb:2c:12:72:e4:bf:7e:c2:53:
2b:7a:41:47:66:6a:96:94:7a:d1:5a:a6:43:9b:de:
94:57:ba:4d:f6:47:d5:bf:00:34:46:54:5a:aa:4f:
e8:12:42:3a:ff:b2:a3:b2:b4:6a:7c:c0:61:32:a3:
f5:6e:47:e0:f7:d9:1d:5b:9d:bf:d8:70:ca:52:07:
4f:25:12:d4:e7:29:0b:4f:30:7b:42:48:29:1d:35:
b6:94:bc:32:f4:e4:2b:a3:f4:d6:1a:ed:93:7a:d5:
54:88:bb:9c:f0:8a:6e:95:3c:a4:d1:db:a0:1e:93:
28:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6D:98:F9:92:72:AD:4C:20:D6:01:58:26:D1:83:FA:E7:52:93:25
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:bc:24:63:1e:c3:3d:dd:98:38:5f:aa:3d:cf:fc:bd:a8:0c:
dc:c2:fa:1f:9e:e4:91:7d:11:54:00:6e:ca:0c:35:21:b3:c3:
3e:42:4f:fb:ef:23:7a:a3:77:ae:ea:4b:c7:e9:64:f1:dd:62:
76:7a:e4:65:e6:f7:93:20:aa:50:ce:a3:84:47:70:2f:8f:b9:
0f:b4:70:e6:97:b4:e0:b8:cb:44:88:48:b8:79:71:95:23:3d:
15:dd:7b:56:57:15:07:bc:13:26:00:32:54:e6:2e:19:db:81:
1b:a4:06:a8:e0:97:f1:2b:18:9b:3c:9b:25:07:d2:94:b8:8c:
07:99:af:26:d3:78:31:e2:85:35:1a:a2:de:f2:dd:51:45:3e:
73:61:4f:fd:8e:09:23:37:bd:11:90:81:15:33:25:31:0d:b1:
ca:3e:a4:21:ff:f3:94:78:f1:29:88:9f:a9:81:ee:e2:a6:9b:
2c:8a:1e:a6:30:6c:bd:73:62:75:6d:cf:05:32:ef:5b:72:df:
c9:6f:f6:22:b1:05:75:75:06:07:16:d9:7a:81:cd:27:51:7c:
6d:ab:59:b4:bc:4b:57:c6:d3:0f:7f:bb:0c:84:af:7d:84:c9:
37:0d:fe:0c:ce:dc:65:02:06:bf:82:2d:17:09:8a:92:e9:c3:
a8:b8:61:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:34 2026 by rpki-client