Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
File: d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft (raw, json)
Hash identifier: lBWrIIMVCoVf8a/vm5SjGOpOMq4/8rLTb0pQAi5Id+I=
Subject key identifier: 28:55:2F:62:2A:E4:A0:E9:0B:F2:51:D4:A0:83:FF:AA:5F:45:77:2A
Authority key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
Certificate issuer: /CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Certificate serial: 019D051C86E98C00D1E533DFD9AACD5046D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
Manifest number: 13A3
Signing time: Thu 19 Mar 2026 08:00:48 +0000
Manifest this update: Thu 19 Mar 2026 08:00:48 +0000
Manifest next update: Fri 20 Mar 2026 08:00:48 +0000
Files and hashes: 1: 4tLtZV00F7203d-0-VBLm-eP82U.roa (hash: lay1wdctHfM+5cGbvUeC7dYoLI/g4f9AW/OZJtKzUcM=)
2: d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl (hash: iXnIcCi1KL9Z9mtAvVl5NxujpYWM3COPtQgcGZKqyBY=)
3: jknUDg7dwoXIKf-FEYWIUojpUtc.roa (hash: 2W3qLOECU7Uc4cSeqqL3ulz5L4R4vc28jKIJo8yhIIg=)
4: yeFo64foK3kpAhiGs_pqxDBcJmw.roa (hash: 4dFVu3RpkjabUXVyt139HwNFtfV67WkuH9beOvHuc1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:1c:86:e9:8c:00:d1:e5:33:df:d9:aa:cd:50:46:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Validity
Not Before: Mar 19 08:00:48 2026 GMT
Not After : Mar 20 08:00:48 2026 GMT
Subject: CN=28552f622ae4a0e90bf251d4a083ffaa5f45772a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:65:c1:ab:68:41:66:2f:62:30:8e:1b:55:
8c:dc:61:7a:c2:f6:08:5b:c8:44:20:29:5b:7b:1f:
d3:e8:c0:6d:71:7e:35:9c:0d:08:61:4a:d9:e6:90:
90:8e:32:cd:58:75:16:dd:44:24:8c:71:69:40:2a:
0f:5b:34:dc:4a:40:dc:d7:1c:bb:89:8d:70:24:1b:
a5:da:fe:d7:aa:18:ed:c0:d8:fd:f2:8e:b4:f0:e3:
e7:16:07:9b:2f:39:7e:e3:8b:d8:21:98:67:ac:1a:
95:a2:25:30:53:71:db:31:d1:95:52:e2:f6:65:52:
fe:80:a7:6c:73:d0:9b:70:60:72:90:84:a0:9a:5a:
96:e7:20:df:94:11:3d:89:dd:95:18:2c:f7:6d:fe:
db:e8:3d:d9:c8:49:58:66:6c:7d:6f:2f:5d:a9:7c:
0e:d8:9b:0c:67:48:49:8c:20:6f:d6:ce:11:8a:b6:
27:f9:cb:d0:b9:c7:d5:a3:e2:aa:b8:84:b8:83:26:
3b:62:3d:a5:e7:62:3c:55:fe:8d:d3:50:9b:a7:a8:
6c:df:31:3c:26:63:df:e8:79:87:a8:6d:c9:37:57:
ea:a7:2f:ed:70:d9:47:61:92:58:bc:20:ba:a9:08:
d8:3a:99:99:f7:9e:24:c7:b6:aa:e7:d4:2c:82:b5:
71:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:55:2F:62:2A:E4:A0:E9:0B:F2:51:D4:A0:83:FF:AA:5F:45:77:2A
X509v3 Authority Key Identifier:
keyid:77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7f:28:0f:21:9a:06:a3:3a:c6:2e:fa:5a:18:b1:1b:f7:76:
1b:74:5b:ab:39:d5:81:ec:82:bb:0a:8e:db:2e:96:8e:c5:bb:
39:c1:c6:52:c8:b9:81:62:c3:b8:90:86:b3:d6:13:7f:6a:b6:
0b:e8:68:42:dc:7e:4e:58:77:ef:69:a8:a2:f7:fd:7c:1e:c3:
ec:7c:21:38:6e:9c:6c:0f:48:4f:81:e4:00:72:f6:a7:e1:a3:
95:2c:dd:17:c6:bd:86:44:07:cc:8d:32:82:b2:76:3f:cb:bd:
af:24:6d:b1:90:af:8c:9b:fb:80:ab:4c:48:cf:b1:9c:f7:e6:
a8:4f:5b:ee:8f:cc:b7:aa:74:18:72:94:62:a7:c0:09:84:f6:
e2:4b:35:6d:6f:54:94:f3:b9:dd:df:bf:69:7c:c7:24:a3:bb:
ba:90:fb:b1:e2:3a:65:62:97:0a:08:20:c7:31:a4:1f:43:97:
67:bf:5e:0b:91:c4:8a:cd:d6:bd:91:81:c8:94:a8:ab:36:f3:
7e:ac:31:fb:52:d0:6a:c8:6a:55:69:f5:7f:0a:88:dd:e2:43:
60:da:be:bb:96:2c:4c:56:c1:36:6a:f4:ee:8d:07:cc:23:47:
d0:5e:90:7b:42:6b:0a:ab:d1:eb:b7:b6:db:97:52:47:28:7b:
72:fe:7f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:48:05 2026 by rpki-client