Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
File: d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json)
Hash identifier: DKvaktwOEOc5BLRTZyexKbF2gSmzm2lYGeZHSGfJR58=
Subject key identifier: 3B:1B:3B:74:C9:DA:15:A7:54:61:70:68:05:49:24:0E:92:23:D7:16
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 019F129C48E6506D861D1C5DC7F2291D6C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
Manifest number: 1429
Signing time: Mon 29 Jun 2026 09:00:59 +0000
Manifest this update: Mon 29 Jun 2026 09:00:59 +0000
Manifest next update: Tue 30 Jun 2026 09:00:59 +0000
Files and hashes: 1: 5qHTg4smmrtrrX5zna14_iX7BYk.roa (hash: bTex3pwZL3UmEGT2D616ZNd//JAc7NnIdwAGgFlj7zw=)
2: FSRjH62OmIOzSD8Cw7TNZhyzeIE.roa (hash: oajsdOrMfY1vgE6M5+Oklmzh+pRKIVrhZXlk/pOgIMc=)
3: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: dPEPrlWdDTY8U2zEiAKuBRxGBNVNpfhNtuPzryHCuQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:48:e6:50:6d:86:1d:1c:5d:c7:f2:29:1d:6c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: Jun 29 09:00:59 2026 GMT
Not After : Jun 30 09:00:59 2026 GMT
Subject: CN=3b1b3b74c9da15a7546170680549240e9223d716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:d9:fe:e4:11:69:cc:6a:4a:0f:e8:06:01:
78:3b:90:63:85:54:7a:ac:7a:15:be:a5:c6:3e:ce:
e8:57:0a:2a:1d:02:e1:6c:cc:e2:48:a8:35:8a:b0:
a6:2c:93:9a:72:9f:65:2c:72:50:11:11:c1:e3:18:
b5:48:30:f8:85:74:47:c9:77:3e:61:8a:44:ad:1e:
33:b8:4b:2b:82:f0:c5:8c:e3:ff:c2:49:86:7d:c6:
ce:c7:42:04:2a:a8:51:6c:a5:08:0d:95:84:d3:b0:
8b:52:01:28:8d:9d:4e:4d:26:02:e7:fe:17:05:63:
4d:75:30:b3:e6:c5:cd:f8:00:2a:79:35:8a:2b:1d:
7f:39:40:49:6e:02:61:56:5e:77:cf:60:a4:97:af:
23:e9:b0:81:ec:b9:75:4f:07:a6:29:40:8b:b8:33:
58:06:bf:a9:16:77:d9:78:a2:ac:3d:8d:4a:c2:3f:
52:c0:6f:65:2f:c5:fe:ae:09:36:e9:c9:c8:fd:ad:
2e:36:95:30:21:4a:09:73:df:62:50:15:ef:95:01:
66:a4:d3:75:ce:12:ce:21:ff:4a:42:c0:9a:ea:6c:
27:b0:f8:75:85:e9:99:8f:79:75:38:d2:5f:3f:fd:
97:ce:1e:c4:85:0d:42:3a:43:94:9a:a9:06:85:06:
e8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1B:3B:74:C9:DA:15:A7:54:61:70:68:05:49:24:0E:92:23:D7:16
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f6:e6:e8:9a:3d:97:fd:17:a8:52:15:df:af:11:90:6c:82:
13:12:7a:a9:0d:88:6b:26:fb:e0:fc:eb:06:4c:74:83:38:00:
f0:ae:aa:08:10:98:9c:75:05:84:11:c1:1a:09:a0:c7:52:b7:
fd:84:d5:80:15:2c:c6:b5:d0:d5:9f:e2:e6:83:67:a8:66:3f:
0b:b1:61:29:aa:dd:55:7a:68:74:13:f2:59:2b:f8:61:ed:1d:
05:71:9e:96:20:c8:72:60:8d:af:f5:b9:42:b8:07:9c:fc:e1:
8d:fd:ba:dc:7f:4c:84:2c:a6:bd:aa:5c:65:2a:7e:4f:7e:86:
94:c3:cc:0f:19:df:9c:e8:b9:fe:69:c5:68:f5:91:5d:76:88:
4f:71:d0:c7:2a:eb:6f:1a:a6:e2:f1:10:bc:b6:90:02:15:d3:
9a:81:67:3a:d9:18:d2:37:e7:fa:42:43:9b:31:3f:81:3f:a3:
86:9d:bd:a7:59:e5:23:73:25:62:92:02:fb:99:0f:70:e7:17:
ae:63:e9:fe:01:81:59:52:10:12:7e:d0:eb:01:fb:e9:54:f3:
e3:03:1b:b5:e0:35:19:d5:10:9f:6c:c8:30:e6:47:e2:87:e2:
ce:71:44:b0:0b:bd:b0:0f:fa:0e:03:ec:66:eb:02:66:7b:f8:
c4:c9:3f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:45:36 2026 by rpki-client