Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
File: 08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json)
Hash identifier: UEE3mQg+U9sX7+v3YITlrn3IQ4r012004DKEcD7HfUA=
Subject key identifier: 1F:0D:22:20:87:6D:F7:EA:26:37:B3:CC:82:DA:60:7F:0E:16:69:95
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Certificate issuer: /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial: 01A0D125217118708153ECEE880EA3379922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 02:01:06 +0000
Manifest this update: Thu 24 Sep 2026 02:01:06 +0000
Manifest next update: Fri 25 Sep 2026 02:01:06 +0000
Files and hashes: 1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: j4MU8zmBEjzqnmLG3Ql/se8cMgu1euqGnYX+XUJBQUE=)
2: kDYFCwOTqCtWju9awtc-WWDQSp4.roa (hash: niu24Rn9CdcANUXflUaTh1yPPLtTi4dexe3GG8dp0NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:25:21:71:18:70:81:53:ec:ee:88:0e:a3:37:99:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Validity
Not Before: Sep 24 02:01:06 2026 GMT
Not After : Sep 25 02:01:06 2026 GMT
Subject: CN=1f0d2220876df7ea2637b3cc82da607f0e166995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4b:0f:c5:cf:30:a4:ca:1c:4b:14:d8:95:d9:
e5:e1:4a:16:fc:ce:26:d9:25:ed:70:d3:72:25:8d:
68:32:37:3d:94:c2:7b:8e:c5:ce:b0:0a:a3:25:fb:
e7:62:9c:34:bf:ff:be:8e:3a:28:9b:21:b7:44:6e:
40:4f:b7:14:5c:88:4f:b5:cf:11:e6:24:56:e7:54:
f3:58:06:d3:79:d7:f2:31:59:79:65:8e:cf:fe:9c:
7e:18:03:f3:33:4e:71:03:c1:f7:e7:e9:ec:8d:a8:
93:03:d2:0b:99:78:90:f3:42:78:d1:c3:4d:d1:40:
ef:9f:64:07:07:8d:9b:f3:52:03:e5:af:d2:51:9f:
2b:cb:4b:49:68:e1:4b:62:c6:c2:7c:60:19:c5:7f:
8b:c6:1f:ac:a0:e8:d0:02:f2:38:0b:7d:44:f7:5f:
f9:dd:25:53:d6:f4:b3:71:54:43:df:1e:64:61:34:
fd:ed:63:09:ae:51:32:85:d3:34:ad:18:d6:21:28:
7d:3a:80:0a:8f:90:fb:6f:c7:dd:5b:78:6b:51:fb:
d8:b0:bf:95:96:9e:8b:dc:c8:f5:4e:c3:e3:a8:b3:
7a:d8:0f:38:73:ea:57:bb:90:02:0f:e2:9e:fd:19:
b8:9d:34:ee:07:92:3a:e5:ca:1a:52:71:8f:1c:af:
a7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0D:22:20:87:6D:F7:EA:26:37:B3:CC:82:DA:60:7F:0E:16:69:95
X509v3 Authority Key Identifier:
keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d6:3a:4f:94:6f:45:f4:11:0d:da:ca:b9:57:bf:f3:f9:6c:
16:ec:23:9c:1e:1d:72:93:70:e4:df:02:4b:6c:cd:b2:2e:56:
33:6f:90:16:3b:eb:30:e7:80:5d:42:32:6b:4c:34:19:2e:5c:
20:33:10:20:3f:69:64:6f:7f:75:10:85:b3:8d:c7:6b:7a:7f:
7a:4d:19:e3:81:46:73:ad:9c:33:7f:c0:51:18:d8:4f:fa:a7:
73:19:4f:f8:a6:aa:82:06:87:57:15:ae:26:b3:59:19:f7:a5:
ff:ee:64:07:3a:ed:ba:93:44:85:ff:07:24:2f:9e:d1:fd:33:
61:81:a0:ab:ae:00:ad:8f:14:52:19:e9:b6:59:51:9a:91:d0:
48:1e:91:34:ed:71:27:a6:5e:45:20:e4:87:44:a9:87:5a:96:
59:40:e9:53:59:33:8b:65:6b:69:40:41:9a:37:78:68:f5:81:
ac:99:c4:ee:48:22:67:d3:39:65:a0:b6:36:10:50:d6:27:6c:
e4:96:47:b5:50:61:09:0b:81:0f:ad:b3:df:12:00:ba:d7:86:
c0:23:2b:ab:95:b4:9f:b3:9d:c7:64:68:da:c7:7c:dd:c8:79:
fe:66:48:e2:ec:13:72:60:b2:0d:85:94:09:b5:72:cb:4c:bb:
5e:b8:d6:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRJSFxGHCBU+zuiA6jN5kiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYzBkNWIxMDZiODFhOTI5MjRlYTJiYzUxMzlmYmI1ZWUx
MTg2ZGQwHhcNMjYwOTI0MDIwMTA2WhcNMjYwOTI1MDIwMTA2WjAzMTEwLwYDVQQD
EygxZjBkMjIyMDg3NmRmN2VhMjYzN2IzY2M4MmRhNjA3ZjBlMTY2OTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UsPxc8wpMocSxTYldnl4UoW/M4m
2SXtcNNyJY1oMjc9lMJ7jsXOsAqjJfvnYpw0v/++jjoomyG3RG5AT7cUXIhPtc8R
5iRW51TzWAbTedfyMVl5ZY7P/px+GAPzM05xA8H35+nsjaiTA9ILmXiQ80J40cNN
0UDvn2QHB42b81ID5a/SUZ8ry0tJaOFLYsbCfGAZxX+Lxh+soOjQAvI4C31E91/5
3SVT1vSzcVRD3x5kYTT97WMJrlEyhdM0rRjWISh9OoAKj5D7b8fdW3hrUfvYsL+V
lp6L3Mj1TsPjqLN62A84c+pXu5ACD+Ke/Rm4nTTuB5I65coaUnGPHK+nMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8NIiCHbffqJjezzILaYH8OFmmVMB8GA1UdIwQY
MBaAFNPA1bEGuBqSkk6ivFE5+7XuEYbdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDhEVnNRYTRHcEtTVHFLOFVUbjd0ZTRSaHQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xOWY0ZDQtNWMxZS00MjFmLTlmNTYt
YmM1MTA0YTM4NWUyLzEvMDhEVnNRYTRHcEtTVHFLOFVUbjd0ZTRSaHQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8xOWY0ZDQtNWMxZS00MjFmLTlmNTYtYmM1MTA0YTM4NWUy
LzEvMDhEVnNRYTRHcEtTVHFLOFVUbjd0ZTRSaHQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdY6T5Rv
RfQRDdrKuVe/8/lsFuwjnB4dcpNw5N8CS2zNsi5WM2+QFjvrMOeAXUIya0w0GS5c
IDMQID9pZG9/dRCFs43Ha3p/ek0Z44FGc62cM3/AURjYT/qncxlP+KaqggaHVxWu
JrNZGfel/+5kBzrtupNEhf8HJC+e0f0zYYGgq64ArY8UUhnptllRmpHQSB6RNO1x
J6ZeRSDkh0Sph1qWWUDpU1kzi2VraUBBmjd4aPWBrJnE7kgiZ9M5ZaC2NhBQ1ids
5JZHtVBhCQuBD62z3xIAuteGwCMrq5W0n7Odx2Ro2sd83ch5/mZI4uwTcmCyDYWU
CbVyy0y7XrjWcw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:29:09 2026 by rpki-client