Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
File: d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json)
Hash identifier: 4EiU1+TnfjULYtp3X559NBU5dqWU0eCNG+Wlk85Q12Q=
Subject key identifier: 6A:5A:44:EF:F5:62:DB:72:A0:FB:DA:C7:ED:16:26:19:CF:D9:72:5F
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 019D3789861F112C1B8739AE4D823684CAC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
Manifest number: 1333
Signing time: Sun 29 Mar 2026 03:00:52 +0000
Manifest this update: Sun 29 Mar 2026 03:00:52 +0000
Manifest next update: Mon 30 Mar 2026 03:00:52 +0000
Files and hashes: 1: 5qHTg4smmrtrrX5zna14_iX7BYk.roa (hash: bTex3pwZL3UmEGT2D616ZNd//JAc7NnIdwAGgFlj7zw=)
2: FSRjH62OmIOzSD8Cw7TNZhyzeIE.roa (hash: oajsdOrMfY1vgE6M5+Oklmzh+pRKIVrhZXlk/pOgIMc=)
3: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: jHkW6FcICFPWd8icInCjvEKrMrNFoIYX1OPVwyGz+ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:86:1f:11:2c:1b:87:39:ae:4d:82:36:84:ca:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: Mar 29 03:00:52 2026 GMT
Not After : Mar 30 03:00:52 2026 GMT
Subject: CN=6a5a44eff562db72a0fbdac7ed162619cfd9725f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:0b:35:d0:65:ae:a4:d6:b1:32:3f:e6:7a:
25:9f:e3:04:64:27:b7:b5:45:ab:e0:eb:86:c1:f8:
c5:18:d2:89:ae:fc:df:c9:ba:61:c5:03:de:32:9f:
0b:e6:1b:ec:56:88:b5:fd:49:9d:5e:a3:d6:1a:68:
20:ac:ba:ca:de:a4:e7:fd:86:d2:05:76:9e:af:05:
cc:8f:77:d3:97:35:81:ba:8a:ac:91:52:5e:9a:33:
67:21:22:94:97:06:e9:f3:d6:ba:b8:2b:64:e3:58:
38:2b:fd:6c:e7:6e:73:51:7a:07:e6:35:a3:52:a7:
38:0a:7f:78:01:f8:eb:19:49:ad:a1:88:d7:7e:34:
39:d9:cb:55:1c:3e:2c:10:5a:79:b2:3e:14:13:52:
13:0d:af:87:f7:e8:d4:20:76:58:60:6c:1e:67:9c:
3f:2a:bd:5f:da:c0:3b:36:cb:9e:76:02:62:b4:1f:
a2:c7:2e:67:f6:d0:d8:a8:9c:f0:f7:c1:ab:e7:2d:
1e:5f:d4:54:3a:4a:f2:06:ab:19:c2:38:51:da:74:
39:64:53:36:3d:d4:5b:74:f9:ab:ba:ce:dd:e8:6e:
68:98:e7:d7:e3:0d:e0:66:c4:1b:49:37:9b:c6:b0:
85:14:44:e5:52:15:f1:d5:64:c9:25:27:dd:1f:d1:
e3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5A:44:EF:F5:62:DB:72:A0:FB:DA:C7:ED:16:26:19:CF:D9:72:5F
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f5:2d:fe:0f:0f:32:6e:f0:fa:95:3a:19:75:43:d3:8f:d5:
8d:cd:b0:1c:ec:ed:ca:0d:c0:36:ff:ef:23:2e:1e:13:b7:1b:
fb:03:7a:53:77:ab:4d:7b:8f:0e:c5:dd:13:30:2d:c2:83:ce:
0c:f0:38:fb:b9:3b:48:92:41:c2:be:5f:f2:13:64:db:e6:57:
66:de:11:53:7c:73:d2:72:38:0d:54:a9:e1:61:e1:d6:99:1d:
63:43:13:3c:c6:5f:ac:01:d7:42:c5:f5:51:f6:ea:56:6f:af:
76:61:eb:b0:ae:79:d7:2b:ea:df:39:7a:ec:9f:de:2d:8b:a9:
fa:2b:87:18:79:76:97:6f:79:95:7c:70:15:3b:0b:d2:0e:6c:
0a:80:74:d8:0c:30:3a:ab:0f:54:7b:7e:d0:04:2f:46:0e:65:
1f:bc:e8:7a:8c:68:db:3d:82:e9:b6:13:77:a4:45:c6:aa:3f:
f7:18:95:a0:b7:0d:34:71:02:4b:5b:25:ec:9f:4a:24:03:77:
55:3c:7e:27:6d:95:d8:16:b4:7d:c1:ff:b8:41:5e:0f:73:94:
95:dd:c2:16:66:14:34:60:67:08:c7:8a:0d:43:81:42:1f:95:
57:ee:ea:df:78:b7:7f:39:77:26:42:9f:8c:f0:58:52:98:1a:
79:a5:14:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:00 2026 by rpki-client