Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
File: d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json)
Hash identifier: PnNv5qRcP0kHXRJxkDup1or9p8JLwDFY/r6Iw8YMoo0=
Subject key identifier: 4A:5B:9B:4A:05:66:42:A1:FF:48:68:B1:D5:D0:07:27:3B:7B:42:2A
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 019E28EFD66FA82A544E55F5FCAD308717EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
Manifest number: 13B0
Signing time: Fri 15 May 2026 00:01:07 +0000
Manifest this update: Fri 15 May 2026 00:01:07 +0000
Manifest next update: Sat 16 May 2026 00:01:07 +0000
Files and hashes: 1: 5qHTg4smmrtrrX5zna14_iX7BYk.roa (hash: bTex3pwZL3UmEGT2D616ZNd//JAc7NnIdwAGgFlj7zw=)
2: FSRjH62OmIOzSD8Cw7TNZhyzeIE.roa (hash: oajsdOrMfY1vgE6M5+Oklmzh+pRKIVrhZXlk/pOgIMc=)
3: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: yVi01zZpeSiBYelkb4GqtII1nGRYgVv5J0ATVIKyLFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:ef:d6:6f:a8:2a:54:4e:55:f5:fc:ad:30:87:17:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: May 15 00:01:07 2026 GMT
Not After : May 16 00:01:07 2026 GMT
Subject: CN=4a5b9b4a056642a1ff4868b1d5d007273b7b422a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b6:ab:f4:b6:67:46:0b:4f:82:d9:8d:bb:f5:
5c:71:d8:c3:eb:3f:f6:f3:f8:80:e2:d6:3e:d5:26:
5b:db:d4:ff:b1:d8:1d:72:5b:cd:b4:66:40:8b:1d:
3d:04:bd:10:28:af:96:49:41:0f:98:62:bf:71:63:
04:fe:76:66:ad:c1:7d:d5:31:cb:b5:de:72:da:72:
5c:f8:b2:d3:21:bc:79:42:17:fe:8a:64:6c:57:1f:
f6:b5:c4:d6:f8:d7:a4:94:90:25:2e:b7:29:5f:56:
3f:ec:c0:d6:0b:ca:54:e3:41:7a:ee:47:06:10:1c:
b8:41:bd:73:40:1c:32:d4:0d:e1:b2:db:32:f7:d8:
02:9e:a3:4f:2b:72:00:94:62:81:53:3d:ac:fd:2a:
61:f2:79:69:e1:c7:07:71:96:6e:a2:32:7c:02:52:
91:d7:7b:3c:64:03:9c:fb:5e:94:50:07:cd:7b:55:
b9:48:56:b7:ed:49:be:7d:66:23:b1:79:cb:13:cf:
b3:95:11:ca:68:39:b4:aa:6d:e3:41:90:03:be:c9:
da:a1:2f:43:c7:4e:6a:7c:b5:40:b5:83:06:44:19:
c5:78:70:84:85:ee:fd:ea:bb:bb:c0:ce:45:02:2b:
1e:13:68:54:f7:b0:2a:62:a0:e4:ba:eb:48:88:6b:
96:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5B:9B:4A:05:66:42:A1:FF:48:68:B1:D5:D0:07:27:3B:7B:42:2A
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1f:c0:9a:5e:4c:33:5f:95:6b:77:26:46:9f:8d:45:f6:9d:
e0:59:ce:02:09:29:4d:de:42:6d:93:0a:8e:43:14:aa:a9:3d:
5e:18:2c:69:9a:c4:53:c4:32:8a:28:55:f5:a5:5e:70:f6:6f:
e1:fb:7a:64:53:a7:f2:3f:76:50:ee:c9:fa:2d:3d:e5:b1:a8:
9f:00:ef:60:40:7c:a4:cb:e0:f9:cc:35:48:ac:32:e2:a8:76:
0e:f8:64:e3:44:5b:3c:77:25:48:12:03:ed:d7:49:ec:12:6b:
43:af:10:63:f6:70:ca:d8:c8:90:b7:b0:5f:8b:31:68:e8:10:
bc:48:cd:4b:f5:9f:7a:ef:6e:18:e9:22:f7:7b:53:cf:e1:2c:
8d:8f:e2:49:19:6b:4b:19:97:a9:e4:b7:31:ae:00:11:9b:04:
a3:c6:3b:1b:e6:92:5a:a5:ed:23:73:c2:3f:df:46:07:82:a8:
7e:0b:74:f5:17:35:0e:64:51:d2:66:6e:ec:15:65:d0:db:55:
ba:a6:54:aa:9b:72:ba:39:05:34:5c:85:d5:ae:0b:bb:24:16:
d9:14:9d:aa:e8:cd:6e:a2:54:a1:e8:1b:01:35:35:1e:1c:73:
3b:66:1a:27:1e:6a:a7:9c:5d:f7:47:70:a0:ad:eb:cb:8f:3d:
1c:4b:ad:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4o79ZvqCpUTlX1/K0whxfuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzZmYjY1NTQ2MWQ3M2ZjZjIxZTg2MTJjMzE4NzA2YTA4
OWE1YzIwHhcNMjYwNTE1MDAwMTA3WhcNMjYwNTE2MDAwMTA3WjAzMTEwLwYDVQQD
Eyg0YTViOWI0YTA1NjY0MmExZmY0ODY4YjFkNWQwMDcyNzNiN2I0MjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Lar9LZnRgtPgtmNu/VccdjD6z/2
8/iA4tY+1SZb29T/sdgdclvNtGZAix09BL0QKK+WSUEPmGK/cWME/nZmrcF91THL
td5y2nJc+LLTIbx5Qhf+imRsVx/2tcTW+NeklJAlLrcpX1Y/7MDWC8pU40F67kcG
EBy4Qb1zQBwy1A3hstsy99gCnqNPK3IAlGKBUz2s/Sph8nlp4ccHcZZuojJ8AlKR
13s8ZAOc+16UUAfNe1W5SFa37Um+fWYjsXnLE8+zlRHKaDm0qm3jQZADvsnaoS9D
x05qfLVAtYMGRBnFeHCEhe796ru7wM5FAiseE2hU97AqYqDkuutIiGuWWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpbm0oFZkKh/0hosdXQByc7e0IqMB8GA1UdIwQY
MBaAFHfG+2VUYdc/zyHoYSwxhwagiaXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2Yt
YWIzMDgxYjJhYmE0LzEvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2YtYWIzMDgxYjJhYmE0
LzEvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnR/Aml5M
M1+Va3cmRp+NRfad4FnOAgkpTd5CbZMKjkMUqqk9XhgsaZrEU8QyiihV9aVecPZv
4ft6ZFOn8j92UO7J+i095bGonwDvYEB8pMvg+cw1SKwy4qh2Dvhk40RbPHclSBID
7ddJ7BJrQ68QY/ZwytjIkLewX4sxaOgQvEjNS/Wfeu9uGOki93tTz+EsjY/iSRlr
SxmXqeS3Ma4AEZsEo8Y7G+aSWqXtI3PCP99GB4Kofgt09Rc1DmRR0mZu7BVl0NtV
uqZUqptyujkFNFyF1a4LuyQW2RSdqujNbqJUoegbATU1HhxzO2YaJx5qp5xd90dw
oK3ry489HEutcg==
-----END CERTIFICATE-----
Generated at Fri May 15 10:34:59 2026 by rpki-client