Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
File: 08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json)
Hash identifier: mcoE1Tk4QE/ohQeDcd7YAmI/lZzKhYEDefhFp8WvXEI=
Subject key identifier: 60:F1:DC:F2:24:6B:F2:7A:D8:B7:19:AB:BA:91:19:54:76:60:69:49
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Certificate issuer: /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial: 019CAAFD2E216978088BA95EDC92C95E9B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 20:00:44 +0000
Manifest this update: Sun 01 Mar 2026 20:00:44 +0000
Manifest next update: Mon 02 Mar 2026 20:00:44 +0000
Files and hashes: 1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: iO5YYxsny//2eNIO07Fod01XBmgbj7r0e06XqMxlXVA=)
2: kDYFCwOTqCtWju9awtc-WWDQSp4.roa (hash: niu24Rn9CdcANUXflUaTh1yPPLtTi4dexe3GG8dp0NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:2e:21:69:78:08:8b:a9:5e:dc:92:c9:5e:9b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Validity
Not Before: Mar 1 20:00:44 2026 GMT
Not After : Mar 2 20:00:44 2026 GMT
Subject: CN=60f1dcf2246bf27ad8b719abba91195476606949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:0b:28:a7:ae:f3:d3:0f:a1:70:33:fc:70:
01:ca:16:8d:09:e1:16:63:e8:08:c2:2e:97:3c:2f:
b8:fe:91:7e:b0:61:c2:a3:85:de:e8:49:3c:37:be:
6f:c2:5b:1f:fc:25:2d:5a:e8:4b:75:ba:dc:6d:fe:
43:21:c5:63:6d:47:40:57:89:4a:13:12:25:22:d6:
11:8c:1d:6c:fa:65:ff:42:5f:a0:1d:eb:f4:6d:52:
d7:95:4a:da:e6:b2:f9:d3:9a:ae:91:c9:4c:de:2a:
9e:9f:08:f3:64:e8:5a:cb:f2:e0:cd:af:24:3d:dc:
58:d6:46:55:31:a3:b4:30:bb:cc:b7:67:4f:12:dd:
a3:98:90:e6:cb:b4:17:5b:fa:fb:b1:0a:0c:8a:f6:
68:03:4b:1f:f9:48:2b:39:5c:9d:9c:bc:2a:9f:17:
c2:0e:18:74:cd:59:0a:88:0f:e8:72:2e:ed:c9:82:
9b:59:98:fe:a4:44:20:02:7f:11:0e:9c:8d:94:3e:
26:e7:1b:f2:02:ec:32:55:0c:5d:d7:c8:43:7d:05:
cd:6c:0b:0f:98:d4:8a:52:18:0e:a1:1d:fe:ca:a1:
2b:b5:fe:97:27:67:23:23:95:21:24:86:b8:fb:e2:
c6:c5:61:79:bf:05:77:e8:c4:ef:ad:8a:6d:92:0f:
65:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F1:DC:F2:24:6B:F2:7A:D8:B7:19:AB:BA:91:19:54:76:60:69:49
X509v3 Authority Key Identifier:
keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:aa:7d:73:c6:6a:f5:63:77:54:18:ef:23:14:69:bf:e7:78:
b6:99:0f:c1:18:d1:b1:3f:ac:d1:bd:95:67:97:df:ad:80:1f:
60:1f:18:32:8e:91:5c:20:e8:0b:df:c2:45:ba:e0:42:bd:fc:
d8:12:40:2d:52:a8:2c:4c:e8:ab:77:1d:88:c0:b3:8a:a9:f3:
38:c8:95:30:46:1a:4f:2f:04:9c:19:fb:09:3e:99:c8:62:79:
cd:ae:7b:18:5a:d8:15:9c:27:20:f5:19:0b:14:1e:3c:cd:19:
0b:38:b3:2f:30:27:65:1b:fb:c8:37:63:69:af:c8:ef:32:71:
5b:2a:0e:fe:17:4a:78:41:00:60:75:9f:93:91:59:e3:1e:db:
38:f6:f2:a0:5e:d8:f4:a5:2b:82:b2:09:a5:fc:b8:30:38:5d:
35:db:b8:63:67:c7:e0:38:92:41:30:ee:3e:38:c4:dc:8f:e2:
ac:25:ef:48:6d:fe:22:92:af:05:f0:ac:94:20:c1:96:76:5c:
af:8e:57:cb:2b:8a:2e:89:1e:f2:3b:11:ef:13:fb:73:a3:d7:
8a:a5:14:15:64:c6:fc:4c:57:f9:88:81:8b:1a:ee:90:a7:ef:
41:62:c9:b1:1f:ab:77:89:a7:64:a2:a5:78:34:43:8a:14:da:
3b:5f:39:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:55 2026 by rpki-client