Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
File: d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json)
Hash identifier: V6xl6WIv3lpfcLjg51tRQ6A6MQgm0dQAYUD/Xshiik4=
Subject key identifier: 4A:80:79:CB:7E:4E:57:25:49:62:15:63:20:2D:52:FA:39:21:18:8D
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 01A1279E38094C8BE27803C5072DA7E310CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
Manifest number: 153D
Signing time: Sat 10 Oct 2026 21:00:42 +0000
Manifest this update: Sat 10 Oct 2026 21:00:42 +0000
Manifest next update: Sun 11 Oct 2026 21:00:42 +0000
Files and hashes: 1: 5qHTg4smmrtrrX5zna14_iX7BYk.roa (hash: bTex3pwZL3UmEGT2D616ZNd//JAc7NnIdwAGgFlj7zw=)
2: FSRjH62OmIOzSD8Cw7TNZhyzeIE.roa (hash: oajsdOrMfY1vgE6M5+Oklmzh+pRKIVrhZXlk/pOgIMc=)
3: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: rNwG0ktlh6BeysjKNGGLxtClRNlCY5+Bs7mSrOmjJcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:9e:38:09:4c:8b:e2:78:03:c5:07:2d:a7:e3:10:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: Oct 10 21:00:42 2026 GMT
Not After : Oct 11 21:00:42 2026 GMT
Subject: CN=4a8079cb7e4e572549621563202d52fa3921188d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:18:0f:05:06:3a:93:5f:98:3e:47:6f:b9:
85:ba:3a:d1:de:c7:87:b8:47:84:d7:d6:a2:f9:37:
73:95:4a:77:74:ee:c9:c7:5a:f2:30:8d:90:29:74:
6b:d9:ca:01:27:0b:b8:0f:2c:08:63:ce:94:5a:5d:
36:7f:b7:26:72:0a:60:0c:3b:78:84:63:2e:9b:c7:
64:9c:00:46:cf:29:9b:81:9f:32:87:38:15:89:ba:
5d:0c:fb:ef:b9:c1:47:a5:8e:d1:9e:94:7c:c4:39:
3e:d5:00:f4:7e:6c:7c:f6:7f:49:be:82:61:3a:d3:
ef:b7:d1:a4:16:32:ba:7b:46:84:b8:2a:33:db:db:
61:f0:d7:54:a6:84:a2:68:bb:5c:05:ab:33:de:47:
8e:4b:c5:d9:4e:7b:9c:89:a7:4e:e8:bf:58:17:19:
67:20:25:82:9e:dc:f7:6a:c6:36:6f:1a:03:19:b5:
89:00:fc:91:2b:a7:45:89:96:02:fb:9a:d6:5e:e2:
6e:96:d0:1f:c9:51:1c:70:43:77:7e:73:44:9b:92:
e0:03:0c:c0:d6:12:e4:cf:2b:e8:6d:82:e7:1f:68:
85:57:69:e5:d4:da:b8:be:04:8d:f2:d2:30:02:64:
16:a1:7e:db:d8:01:75:b0:56:51:76:d0:35:ec:c1:
61:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:80:79:CB:7E:4E:57:25:49:62:15:63:20:2D:52:FA:39:21:18:8D
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2f:a9:9c:ba:b8:07:e4:1b:d1:ac:b1:a3:eb:fc:7b:8a:f5:
62:56:f7:2c:e2:40:af:4f:03:d6:45:53:52:3d:a0:86:25:40:
d0:d5:6a:b6:b9:a9:4e:d3:10:15:39:bc:5a:27:46:db:06:f0:
2d:2b:85:f8:c7:fe:c7:73:ce:e6:cc:22:f9:bc:e8:25:27:49:
dd:4f:59:2e:ab:1d:be:11:28:76:59:81:10:d2:80:20:59:5a:
11:bc:e9:ad:2c:c7:a4:a0:3a:d6:27:76:8b:05:3f:c5:18:83:
a6:3b:36:7e:25:6e:6e:9b:b3:a0:7a:5a:78:a6:fd:d4:dd:84:
1b:fc:c4:f0:1b:96:81:76:44:03:3c:c0:72:1f:4a:30:3e:e3:
42:0c:4c:a3:c7:bb:de:98:92:fb:74:42:e1:6e:30:5e:e1:f5:
cb:29:97:85:53:33:fa:5b:d0:5a:a5:63:45:2b:97:47:a1:0a:
7e:b1:12:e9:e3:67:62:54:d0:48:6d:17:69:de:e2:5c:13:8a:
ac:70:12:8d:4f:5a:cf:5b:9a:23:85:47:6c:53:60:89:a4:34:
39:71:47:3d:d3:0d:a2:30:b8:1d:d2:f6:8a:b2:2f:99:0b:1a:
ff:5b:f2:2a:55:a1:05:c7:13:de:a5:3b:69:6e:e1:74:85:fd:
f9:74:08:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEnnjgJTIvieAPFBy2n4xDNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzZmYjY1NTQ2MWQ3M2ZjZjIxZTg2MTJjMzE4NzA2YTA4
OWE1YzIwHhcNMjYxMDEwMjEwMDQyWhcNMjYxMDExMjEwMDQyWjAzMTEwLwYDVQQD
Eyg0YTgwNzljYjdlNGU1NzI1NDk2MjE1NjMyMDJkNTJmYTM5MjExODhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzUYDwUGOpNfmD5Hb7mFujrR3seH
uEeE19ai+TdzlUp3dO7Jx1ryMI2QKXRr2coBJwu4DywIY86UWl02f7cmcgpgDDt4
hGMum8dknABGzymbgZ8yhzgVibpdDPvvucFHpY7RnpR8xDk+1QD0fmx89n9JvoJh
OtPvt9GkFjK6e0aEuCoz29th8NdUpoSiaLtcBasz3keOS8XZTnuciadO6L9YFxln
ICWCntz3asY2bxoDGbWJAPyRK6dFiZYC+5rWXuJultAfyVEccEN3fnNEm5LgAwzA
1hLkzyvobYLnH2iFV2nl1Nq4vgSN8tIwAmQWoX7b2AF1sFZRdtA17MFhCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqAect+TlclSWIVYyAtUvo5IRiNMB8GA1UdIwQY
MBaAFHfG+2VUYdc/zyHoYSwxhwagiaXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2Yt
YWIzMDgxYjJhYmE0LzEvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2YtYWIzMDgxYjJhYmE0
LzEvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjC+pnLq4
B+Qb0ayxo+v8e4r1Ylb3LOJAr08D1kVTUj2ghiVA0NVqtrmpTtMQFTm8WidG2wbw
LSuF+Mf+x3PO5swi+bzoJSdJ3U9ZLqsdvhEodlmBENKAIFlaEbzprSzHpKA61id2
iwU/xRiDpjs2fiVubpuzoHpaeKb91N2EG/zE8BuWgXZEAzzAch9KMD7jQgxMo8e7
3piS+3RC4W4wXuH1yymXhVMz+lvQWqVjRSuXR6EKfrES6eNnYlTQSG0Xad7iXBOK
rHASjU9az1uaI4VHbFNgiaQ0OXFHPdMNojC4HdL2irIvmQsa/1vyKlWhBccT3qU7
aW7hdIX9+XQIlA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:18:56 2026 by rpki-client