Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
File: d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json)
Hash identifier: IaOq2/mgEu/j+Cxuo3k/Adu+3KfW2KYTF63ifOkcmmE=
Subject key identifier: AF:60:3C:ED:07:82:81:2C:2B:97:B8:A6:65:5E:2D:A2:1F:AC:CA:F0
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 01A002138E0092EF18B23B0068D03AA955CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
Manifest number: 14A5
Signing time: Fri 14 Aug 2026 21:00:30 +0000
Manifest this update: Fri 14 Aug 2026 21:00:30 +0000
Manifest next update: Sat 15 Aug 2026 21:00:30 +0000
Files and hashes: 1: 5qHTg4smmrtrrX5zna14_iX7BYk.roa (hash: bTex3pwZL3UmEGT2D616ZNd//JAc7NnIdwAGgFlj7zw=)
2: FSRjH62OmIOzSD8Cw7TNZhyzeIE.roa (hash: oajsdOrMfY1vgE6M5+Oklmzh+pRKIVrhZXlk/pOgIMc=)
3: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: tqbRMNzM6rO5A+BC+fXnJDCI7aX12Fmn839IZGyqZRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:8e:00:92:ef:18:b2:3b:00:68:d0:3a:a9:55:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: Aug 14 21:00:30 2026 GMT
Not After : Aug 15 21:00:30 2026 GMT
Subject: CN=af603ced0782812c2b97b8a6655e2da21faccaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:88:21:b2:96:2d:73:f2:6c:f5:2a:46:3a:47:
bd:83:d8:7c:af:28:45:26:7f:a0:55:1b:00:e3:8c:
53:7c:e6:02:2d:2b:68:49:ce:aa:d4:a4:87:1d:c6:
ed:47:27:ab:1d:71:52:ed:7c:fe:0b:62:2f:0b:b5:
9a:64:9e:4b:0c:4f:16:e9:b6:8a:d7:61:af:2c:9c:
43:ac:9d:67:bf:b4:dd:34:0f:e5:33:8c:d8:62:20:
48:dc:84:24:8e:d9:6c:2a:0b:4e:a4:33:8a:c8:83:
25:63:92:be:ce:62:30:89:d6:42:b6:f5:cc:32:fc:
56:77:c8:5b:ba:47:62:29:d4:3a:bf:87:68:12:af:
66:c8:94:be:a2:fa:25:a8:61:62:1a:64:62:05:e0:
4b:2a:a6:2c:9c:b8:1c:ad:81:08:a7:60:13:d1:ec:
35:e7:22:dd:80:3f:5c:17:08:de:00:df:7e:a1:1d:
db:6c:73:7d:a6:3a:02:29:2e:ca:8a:2f:b0:0c:96:
dd:ab:d5:13:dd:7c:c5:23:5a:d2:c0:06:16:fe:35:
4c:34:f0:a3:ba:17:dc:3f:49:d1:07:a7:b8:05:bf:
58:8e:9f:ca:86:d2:6f:c0:41:80:02:5f:15:aa:65:
10:8b:52:c0:d8:fb:c0:eb:3e:98:2f:e7:92:12:df:
87:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:60:3C:ED:07:82:81:2C:2B:97:B8:A6:65:5E:2D:A2:1F:AC:CA:F0
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3b:ff:90:da:c4:48:9e:87:37:fe:3d:2e:2e:1a:e7:1a:66:
ec:13:7b:68:2f:b5:03:ff:be:08:c0:06:ca:8b:04:5b:3f:80:
dd:48:13:b9:70:51:55:f4:01:6b:9b:ac:1c:40:0b:76:34:2e:
15:e6:44:77:c5:c1:48:e2:e8:64:c6:a2:07:9c:09:64:88:0b:
a5:4e:23:e0:d6:54:e3:49:fb:f5:9d:ca:9a:a6:35:38:4d:3a:
62:68:5a:ba:d6:00:6c:53:ad:4b:76:01:74:28:b7:86:2e:f0:
e8:ac:d6:36:8a:7f:38:14:59:08:44:61:ef:d6:51:c5:1b:f2:
dc:af:4e:d3:56:9b:c4:0c:b5:7f:71:9b:64:12:dc:03:07:49:
8c:0a:df:7c:85:13:b2:5e:af:f7:06:90:8b:4e:0f:e2:e5:9f:
5a:6a:71:e5:8d:ef:64:fc:c5:b0:73:04:38:39:bb:a1:37:0f:
99:3f:ed:81:a1:69:5c:0b:40:7f:b3:fc:77:1f:66:27:df:47:
3c:37:de:69:98:e2:54:7e:40:f6:ab:8c:84:fb:0b:ec:48:9b:
e6:46:35:15:b2:bd:67:af:81:72:5b:98:96:49:d3:8e:b4:db:
cf:c9:d3:f7:9b:7d:9a:80:cf:4b:cd:5a:e3:c0:5f:db:de:54:
e1:51:05:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:27:59 2026 by rpki-client