Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
File: d4LgCn_HYX2UJguB_SKjo_PcaG0.mft (raw, json)
Hash identifier: Drc1aHQjTBipyLvTFQ1LnmpNBWeFrrHDTu5n4THqXW0=
Subject key identifier: 73:77:57:BB:AE:CE:3C:2D:AD:31:55:D4:1B:05:DB:2D:17:B7:69:E7
Authority key identifier: 77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
Certificate issuer: /CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Certificate serial: 01A17F9849767A6A9D0ED02C0EBD3C192037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
Manifest number: 0F57
Signing time: Tue 27 Oct 2026 23:00:48 +0000
Manifest this update: Tue 27 Oct 2026 23:00:48 +0000
Manifest next update: Wed 28 Oct 2026 23:00:48 +0000
Files and hashes: 1: d4LgCn_HYX2UJguB_SKjo_PcaG0.crl (hash: JiTY24w1Nd9wSqPqgJhgUsFwuzJ55BK8bfPKTqr9M28=)
2: p6qsa6svPJ0422i3SiO1EzgoFFQ.roa (hash: TXPP91hJYndsd1QK98Dq8mZrdcp6BkkwS6MxLqiQzbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:49:76:7a:6a:9d:0e:d0:2c:0e:bd:3c:19:20:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Validity
Not Before: Oct 27 23:00:48 2026 GMT
Not After : Oct 28 23:00:48 2026 GMT
Subject: CN=737757bbaece3c2dad3155d41b05db2d17b769e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:35:c7:0b:3a:80:d7:92:25:40:54:3e:34:82:
1e:63:f8:5f:60:d0:c2:9f:8c:c6:d7:03:b9:2f:3f:
29:f2:54:a3:96:a4:d9:cd:25:f5:5a:0b:ee:45:9b:
fb:5b:62:eb:9a:0e:b7:30:d5:9e:ba:97:90:d5:83:
36:28:4f:3f:8b:35:be:d8:b4:36:0a:0d:42:b5:21:
e9:21:00:8a:f4:7d:fe:c1:5b:e7:4e:76:5d:ec:3a:
1b:8c:27:ea:91:f4:dd:a1:40:a8:f0:d0:9b:1e:63:
4d:61:6e:20:50:ee:9d:57:db:b7:61:08:9b:85:d0:
ee:cc:9e:76:7e:15:9c:7f:81:e2:34:1b:6a:99:8a:
29:67:d0:2b:64:0e:91:0a:d9:9c:8e:96:86:5b:fd:
1d:1c:e7:68:0b:f9:4b:78:19:8b:07:b4:bf:17:87:
54:b8:e4:5f:1a:aa:1f:b7:b6:b9:43:ae:45:e2:72:
3b:ff:19:c0:ef:5a:71:cc:88:4f:bf:14:1a:29:65:
ff:41:fb:cd:ed:d3:04:d4:70:4b:cc:9b:17:df:d2:
ca:4a:75:6b:bc:06:c9:d6:ff:7f:45:a3:b4:49:5b:
76:1e:4d:97:b4:84:17:7a:79:e3:db:b5:2c:9e:71:
5c:9f:a5:7a:9c:34:ed:ee:b9:da:fb:78:7a:9b:2c:
f5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:77:57:BB:AE:CE:3C:2D:AD:31:55:D4:1B:05:DB:2D:17:B7:69:E7
X509v3 Authority Key Identifier:
keyid:77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:75:04:18:50:af:9f:6e:16:6c:9f:cf:9c:52:d6:90:e7:1b:
88:02:75:80:0a:fc:14:a2:e8:2c:46:58:15:e7:87:11:ad:27:
03:92:04:d3:cc:7d:33:b3:63:20:e1:e3:7a:c8:ed:4d:8f:f4:
8e:bb:66:15:77:e1:a0:88:36:c6:ef:07:f3:23:af:40:7b:8a:
ea:86:7e:37:31:42:cb:9c:3d:f7:a8:65:75:ca:4f:95:48:6c:
61:0a:95:e0:17:cd:a3:97:24:31:02:88:b3:f4:32:bf:c0:05:
93:53:68:b7:4f:6e:53:cd:ab:f7:2c:fd:37:9e:0b:4b:54:6e:
71:90:7a:fe:fb:37:06:31:8f:a4:79:78:40:3a:78:ab:f4:40:
eb:4b:66:9e:15:ae:15:d7:f3:2c:f2:6e:a3:d4:1f:ad:1c:4d:
d1:04:58:1a:15:cf:8e:37:91:09:4c:5f:eb:2c:86:db:41:2d:
62:8a:8a:56:40:01:07:f0:1f:a4:d0:f1:75:88:26:b7:75:96:
79:a7:76:90:97:3d:35:d0:3c:d2:cd:aa:ea:08:aa:24:b7:39:
be:d3:d2:8c:bc:6d:5a:fc:b3:3e:d0:d7:4f:79:65:0f:de:f6:
88:6b:b7:ab:27:9a:70:78:26:fd:0f:76:38:86:b8:73:57:2c:
01:e8:53:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:20:21 2026 by rpki-client