
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
File: 08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json)
Hash identifier: HQpH3GChnkcq094Z6MbPO/+HBnV2klER6jaLDB//tQA=
Subject key identifier: B3:43:63:CB:83:9B:78:F8:34:94:B9:E1:57:CF:D3:49:6C:D3:8E:6B
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Certificate issuer: /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial: 019FA9AC72A60264671399E5D84EA0424101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 17:01:18 +0000
Manifest this update: Tue 28 Jul 2026 17:01:18 +0000
Manifest next update: Wed 29 Jul 2026 17:01:18 +0000
Files and hashes: 1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: yO1G6ag0aZ2mL9DZ/bK8Hfdq2WQ7LmgMHZiy8ONkWxQ=)
2: kDYFCwOTqCtWju9awtc-WWDQSp4.roa (hash: niu24Rn9CdcANUXflUaTh1yPPLtTi4dexe3GG8dp0NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:72:a6:02:64:67:13:99:e5:d8:4e:a0:42:41:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Validity
Not Before: Jul 28 17:01:18 2026 GMT
Not After : Jul 29 17:01:18 2026 GMT
Subject: CN=b34363cb839b78f83494b9e157cfd3496cd38e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:2d:af:04:84:27:74:96:62:15:74:6a:d2:
d9:3e:55:ad:72:8a:24:e7:02:5e:57:7f:9d:07:a5:
dc:20:d4:bb:e0:71:56:bf:21:56:14:06:bb:7d:32:
72:c9:94:2c:11:5e:91:5c:8d:09:37:08:ba:63:d0:
c2:16:a0:e0:c1:3d:8a:0d:e1:23:07:43:7c:6c:a1:
97:0b:22:9b:fd:1f:f1:92:a3:d1:3b:a9:29:aa:f8:
16:6c:3e:b5:ac:3e:64:bc:4f:56:53:f9:68:78:d4:
d5:32:a0:c4:e4:de:2e:cd:3a:08:b0:d1:77:f2:8c:
2e:06:7a:a8:89:ff:60:aa:ba:05:a1:f3:43:e3:ad:
1b:2b:de:cb:37:b1:8e:d3:a5:49:9e:77:ee:da:7d:
73:42:ea:eb:75:e8:2d:70:0d:6f:63:c2:01:b2:dd:
a9:f5:34:fa:b3:88:d3:d8:17:72:2b:f9:69:7b:a6:
fa:99:41:21:42:95:63:ca:f3:4b:dd:a6:0b:7a:ec:
fa:3c:f7:c3:d4:56:14:03:40:b0:0c:2d:5c:01:7a:
b1:85:05:1d:c9:d9:dc:7f:7c:3c:14:1b:de:44:f2:
cb:ae:f2:b2:aa:c2:b1:65:cd:80:49:2b:22:fc:16:
ed:05:20:c2:c3:b5:a6:d9:99:7d:55:d4:ec:f3:49:
0b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:43:63:CB:83:9B:78:F8:34:94:B9:E1:57:CF:D3:49:6C:D3:8E:6B
X509v3 Authority Key Identifier:
keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7f:87:c2:b0:6d:c2:b6:9b:22:72:f0:ad:14:a0:7d:39:63:
cd:f1:c8:49:58:38:f4:ce:7a:46:8a:a3:3f:fa:e3:de:18:8b:
1a:e7:55:9c:83:b7:55:13:4f:fe:ae:e9:cb:e3:af:b6:37:6d:
cc:75:c5:fd:51:0b:2e:04:68:c8:ec:cb:be:78:dc:4c:a0:7e:
01:e9:ca:12:7d:ec:c7:c2:2c:8e:00:e1:e5:6b:b2:b3:2d:d4:
3e:c3:b5:e1:4c:69:e7:c2:17:2a:4e:68:53:24:bf:8b:73:04:
9d:fe:76:6d:da:55:70:eb:51:d0:83:bc:1f:4f:72:c0:9c:07:
74:f3:69:4f:7f:cd:0e:34:1b:29:18:4c:84:6f:2b:f2:7a:00:
f9:94:6b:7e:69:69:46:52:76:e6:6c:cb:dc:d8:6c:1e:66:f0:
02:83:a8:ae:b4:bd:77:50:4b:b9:05:b3:78:be:20:00:2b:2a:
f4:ec:ac:f7:c9:a5:79:13:fe:1d:df:2a:14:b1:0b:98:3f:1d:
4f:91:11:a3:ab:45:e3:e4:cf:1b:01:da:81:ce:70:ee:d0:7d:
a2:99:40:93:35:58:5d:61:6f:75:20:1b:8e:5e:63:ae:27:e7:
cf:03:3b:7c:7f:0d:86:2f:bc:8c:1d:8d:86:23:c4:44:e2:0c:
46:13:fb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:32 2026 by rpki-client