Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/b81756-3c57-4937-a1fe-445a2c2ab2ca/1/d8ggit5qFhm9IAB1mRSyXGKbDJk.mft
File: d8ggit5qFhm9IAB1mRSyXGKbDJk.mft (raw, json)
Hash identifier: ZCaRzDC8LJaZPQZQHZiL4t009vhJZgP0C16qFnofQZU=
Subject key identifier: A2:D8:D6:72:DD:28:46:D8:07:C9:16:37:0C:A8:FC:20:75:95:7A:DB
Authority key identifier: 77:C8:20:8A:DE:6A:16:19:BD:20:00:75:99:14:B2:5C:62:9B:0C:99
Certificate issuer: /CN=77c8208ade6a1619bd2000759914b25c629b0c99
Certificate serial: 019D38D3959A4DC20D9B55FCB57032F950A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8ggit5qFhm9IAB1mRSyXGKbDJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/b81756-3c57-4937-a1fe-445a2c2ab2ca/1/d8ggit5qFhm9IAB1mRSyXGKbDJk.mft
Manifest number: E3
Signing time: Sun 29 Mar 2026 09:01:23 +0000
Manifest this update: Sun 29 Mar 2026 09:01:23 +0000
Manifest next update: Mon 30 Mar 2026 09:01:23 +0000
Files and hashes: 1: _lGkvkdm9SeHy9gEQ7Iw5DdyD8k.roa (hash: 9GwKeaFt0nYG97+rXWl0xJdoSrCjCcg4111rrC+L+94=)
2: d8ggit5qFhm9IAB1mRSyXGKbDJk.crl (hash: J9rmAODO6rivxcjEXdRwN6CS2O/zPe2zACd0RLAi2rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/b81756-3c57-4937-a1fe-445a2c2ab2ca/1/d8ggit5qFhm9IAB1mRSyXGKbDJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/b81756-3c57-4937-a1fe-445a2c2ab2ca/1/d8ggit5qFhm9IAB1mRSyXGKbDJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8ggit5qFhm9IAB1mRSyXGKbDJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:95:9a:4d:c2:0d:9b:55:fc:b5:70:32:f9:50:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8208ade6a1619bd2000759914b25c629b0c99
Validity
Not Before: Mar 29 09:01:23 2026 GMT
Not After : Mar 30 09:01:23 2026 GMT
Subject: CN=a2d8d672dd2846d807c916370ca8fc2075957adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:00:55:43:62:3e:77:8a:e9:4f:b1:72:96:
6b:ba:30:b7:5e:cc:fa:42:9a:9a:81:0d:a6:9d:96:
ee:b5:5f:6e:f2:7f:91:38:33:aa:42:59:7e:03:fb:
be:b6:91:7c:6b:92:50:d2:b2:61:86:ae:eb:6b:b5:
f6:b9:1c:ba:97:39:d2:63:79:d6:44:67:1b:15:a2:
50:51:3f:0f:62:3f:c9:1e:9a:18:d1:22:d9:0f:da:
f5:07:09:da:62:15:aa:96:51:29:72:17:9f:9f:0a:
e9:6d:92:69:f9:ac:82:ed:8d:18:60:7c:1b:9f:46:
01:5d:eb:53:e5:83:6a:d5:52:47:3f:44:2a:ac:b3:
8f:6c:db:94:ea:07:0a:68:9e:94:4e:fe:8c:12:76:
78:ec:e4:4a:59:4b:1a:16:6f:32:19:ce:38:4c:45:
ae:aa:81:75:5f:ab:56:ca:45:83:7a:ed:ba:2a:b4:
36:34:c1:16:79:d0:e6:1d:b9:a8:9e:fc:3c:03:43:
e4:52:96:9e:a4:b1:a2:d0:37:60:b4:f4:1a:a1:29:
95:59:5e:dd:46:7d:f1:9e:fd:b2:13:2c:6e:18:3f:
d7:c7:5a:94:77:9f:be:be:66:78:72:08:3f:66:f8:
09:ce:06:f9:1a:3b:87:82:18:1e:5b:a0:23:d8:ef:
1b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D8:D6:72:DD:28:46:D8:07:C9:16:37:0C:A8:FC:20:75:95:7A:DB
X509v3 Authority Key Identifier:
keyid:77:C8:20:8A:DE:6A:16:19:BD:20:00:75:99:14:B2:5C:62:9B:0C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8ggit5qFhm9IAB1mRSyXGKbDJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/b81756-3c57-4937-a1fe-445a2c2ab2ca/1/d8ggit5qFhm9IAB1mRSyXGKbDJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/b81756-3c57-4937-a1fe-445a2c2ab2ca/1/d8ggit5qFhm9IAB1mRSyXGKbDJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3b:58:c7:63:a4:85:4f:b6:5c:0c:dd:4f:83:e7:1f:09:b6:
06:03:79:a8:68:15:d4:b8:f3:3f:57:1e:8b:c5:f8:ba:e5:c7:
e7:14:5f:97:96:32:61:20:69:21:04:68:47:98:d8:9c:bb:23:
30:53:4b:57:77:df:a9:37:4a:a5:b9:59:91:e1:f3:4a:c0:b5:
12:45:3f:e7:a5:6a:39:37:8b:e1:a1:9f:23:12:bf:9e:34:48:
3a:82:dc:9f:ae:59:7c:43:cf:5b:ba:e9:6f:a9:10:1f:34:80:
65:c0:84:ce:bf:18:79:e6:c9:fe:d9:ad:0c:a2:13:ce:7c:15:
0c:74:b8:fe:e2:56:bb:4a:5c:55:8d:d9:73:2e:8e:4f:92:08:
5c:a5:c8:c6:a7:a9:f8:4d:d2:d6:19:9c:cb:34:22:f6:93:cf:
29:d4:c4:89:04:b6:a1:23:d7:ab:47:62:6c:ae:7b:b1:61:9a:
df:cf:27:44:7c:bf:9d:f1:84:6a:e0:2e:2d:7c:6d:78:84:ae:
c0:58:3b:7b:51:ee:2d:57:d9:63:48:83:34:4a:fb:e4:15:70:
56:82:77:4e:cc:09:c4:37:b9:77:15:62:62:80:68:b1:87:1c:
63:49:d9:c6:4f:90:3d:9f:4f:e5:74:ee:6a:3f:83:93:b2:79:
0c:33:12:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:00 2026 by rpki-client