Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
File: d8LYpgGX_HveZPw_rRDrLaT-h3k.mft (raw, json)
Hash identifier: 0Kw03cRr4tI4BBcbNm4MNRnPermGLq55KiP286CS5zI=
Subject key identifier: BB:8A:0C:64:A3:58:7D:D0:55:75:85:AE:A3:A0:5D:91:EF:0B:46:42
Authority key identifier: 77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
Certificate issuer: /CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Certificate serial: 01A0035E1E0539EC3DC8EE67D0160E79A7A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
Manifest number: 0A57
Signing time: Sat 15 Aug 2026 03:01:34 +0000
Manifest this update: Sat 15 Aug 2026 03:01:34 +0000
Manifest next update: Sun 16 Aug 2026 03:01:34 +0000
Files and hashes: 1: aJHKOA-DMpMHSd964JXfuSmBfY0.roa (hash: oXACImzHioTx7c3QtWHlpndieWC52eNkX76flIoPyqE=)
2: d8LYpgGX_HveZPw_rRDrLaT-h3k.crl (hash: cclZmdVK7x5UTULTpOEeBvmMM9+qKSpe+bXSzJdPSzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5e:1e:05:39:ec:3d:c8:ee:67:d0:16:0e:79:a7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Validity
Not Before: Aug 15 03:01:34 2026 GMT
Not After : Aug 16 03:01:34 2026 GMT
Subject: CN=bb8a0c64a3587dd0557585aea3a05d91ef0b4642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:88:7f:35:aa:0c:50:08:74:ed:6b:2c:f7:a8:
f7:17:76:d9:5d:47:5b:7a:90:37:60:95:51:a8:12:
b8:c0:78:73:b9:42:56:78:70:ca:bf:59:c0:14:43:
66:14:88:e4:c3:31:2f:8e:53:dd:cc:1d:d1:4d:be:
a1:88:df:41:36:9e:3f:d3:f0:b7:d6:89:62:9e:a8:
05:4f:1a:30:36:5e:e3:2c:55:68:34:b7:f7:da:5e:
c0:39:7d:b4:a1:d9:ac:94:f1:56:38:51:af:14:4c:
73:fc:06:68:78:5d:e7:44:f7:8d:71:fb:d3:71:13:
a7:18:3d:2d:8a:6e:a1:80:52:be:21:00:b3:eb:03:
f7:a1:31:07:f9:e2:00:c7:41:a9:c8:1d:18:50:f9:
94:93:57:80:84:ae:aa:61:3b:9a:68:90:11:8b:c8:
72:aa:a3:60:c9:08:31:84:7e:7d:a2:c2:d3:16:4f:
13:32:e2:44:64:41:cc:3a:14:e1:46:a5:48:94:82:
34:f7:e9:e1:54:9d:b0:a5:83:c5:98:79:3f:9c:b4:
34:43:0b:37:60:8e:ea:c7:90:91:98:20:0b:ed:53:
70:94:77:c4:7f:ea:8f:72:d1:ff:20:6f:e3:bb:96:
fa:8b:8e:05:4e:a5:62:d2:5c:f1:ae:e9:ae:28:9e:
84:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8A:0C:64:A3:58:7D:D0:55:75:85:AE:A3:A0:5D:91:EF:0B:46:42
X509v3 Authority Key Identifier:
keyid:77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4e:18:2b:62:5c:a5:ea:69:12:8d:42:69:06:44:f7:fb:c8:
e1:8c:81:4e:2d:8a:86:29:18:69:2a:7b:df:95:ad:74:9a:f6:
53:04:42:a6:cb:be:8c:7d:ff:53:ee:07:c8:77:79:96:79:97:
0f:45:9b:ad:50:f6:4e:8b:e5:fa:5a:a7:cb:d9:e4:70:8e:6f:
8e:77:ea:b3:53:ce:da:7b:14:76:c0:21:f1:c1:c3:d9:fc:42:
fa:51:ee:a8:c6:e2:fe:4c:e6:82:ee:e2:64:74:24:ae:fa:64:
9a:a5:91:b5:b7:c4:ea:42:25:30:0f:73:b4:75:64:a6:0c:e6:
21:46:50:46:7a:74:d6:54:e3:ee:bd:4f:7d:ed:86:96:f2:3d:
42:cd:79:cf:18:1c:72:7e:dd:53:35:8a:3d:94:51:85:be:b7:
7d:91:27:e5:ff:ca:11:db:25:38:a4:21:78:bd:27:c5:91:11:
5b:83:fa:94:ae:0d:92:50:ee:9a:9b:5a:e5:cd:e8:f5:ea:c9:
9c:4d:54:8c:03:ca:45:c0:9e:16:5d:6b:46:34:3b:12:eb:5b:
dd:3a:db:6b:3a:4a:70:e9:13:b7:6f:e4:c4:47:04:b2:71:56:
23:9c:39:44:6b:df:81:6a:3e:e0:fb:b6:2d:c4:25:b7:81:47:
e0:02:23:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:35:47 2026 by rpki-client