Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
File: d8LYpgGX_HveZPw_rRDrLaT-h3k.mft (raw, json)
Hash identifier: VnD01DWgJmRN6ibWwNqaSB1eqJj7GlrQ5/1GVr3oz/E=
Subject key identifier: 4F:2D:CE:6E:37:1E:21:0B:08:B3:29:56:A2:71:5C:A5:B2:69:16:FD
Authority key identifier: 77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
Certificate issuer: /CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Certificate serial: 01A16A9100C39644D4E50D153495FA74CEBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
Manifest number: 0B11
Signing time: Fri 23 Oct 2026 21:00:50 +0000
Manifest this update: Fri 23 Oct 2026 21:00:50 +0000
Manifest next update: Sat 24 Oct 2026 21:00:50 +0000
Files and hashes: 1: aJHKOA-DMpMHSd964JXfuSmBfY0.roa (hash: oXACImzHioTx7c3QtWHlpndieWC52eNkX76flIoPyqE=)
2: d8LYpgGX_HveZPw_rRDrLaT-h3k.crl (hash: 8McehwwUUGzn2VDQ8MgVylUTTqrkGtbCSZWvUrySoS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:91:00:c3:96:44:d4:e5:0d:15:34:95:fa:74:ce:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Validity
Not Before: Oct 23 21:00:50 2026 GMT
Not After : Oct 24 21:00:50 2026 GMT
Subject: CN=4f2dce6e371e210b08b32956a2715ca5b26916fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:88:6f:fc:e5:e6:ca:65:f0:e1:ec:c0:6b:6e:
ac:23:06:e5:4a:95:2d:18:69:a1:3f:71:20:a9:ee:
1a:92:68:8d:16:e1:d2:50:08:17:ba:4b:5e:19:f5:
0f:9a:22:40:02:e6:5f:8e:b2:83:3d:b3:37:a0:b8:
f4:1c:d3:c6:d0:0b:10:ce:d8:ab:b1:fe:50:e9:ee:
3b:d2:96:22:e3:a9:56:bf:92:a5:9d:fc:c0:f1:91:
85:0c:a2:1c:a4:39:b4:2a:58:0e:05:17:16:ce:5a:
72:02:d1:2b:6f:fd:59:3b:a3:c9:e4:83:5b:02:ef:
0d:d0:47:92:21:cd:dc:52:aa:fd:06:19:47:b7:d6:
2d:61:49:fb:0e:39:51:b2:e2:5f:8c:e3:6d:71:c9:
51:a2:f7:e5:a3:28:81:7b:ce:27:98:65:ce:4e:c0:
41:5c:1c:86:06:d3:64:95:48:4b:6c:4e:89:68:10:
a8:a0:1e:6a:f3:c7:ab:c7:6a:b0:4d:ec:f8:fd:0f:
18:ee:48:e8:75:87:7c:07:f4:87:1b:50:7f:df:ef:
15:fe:68:e4:05:b2:05:8b:9f:4d:13:b0:4c:21:f1:
a1:31:40:ad:b3:72:64:d9:d6:d9:10:de:aa:24:19:
2d:9e:9e:5d:78:97:f6:53:94:c8:36:59:47:87:db:
15:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2D:CE:6E:37:1E:21:0B:08:B3:29:56:A2:71:5C:A5:B2:69:16:FD
X509v3 Authority Key Identifier:
keyid:77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c3:56:2a:bf:47:8a:aa:de:45:cf:50:3d:0e:8c:5d:65:45:
96:d2:0c:16:2e:59:75:50:0d:3b:8a:08:71:4f:c3:58:c2:b6:
0a:ac:a6:03:81:fa:83:b2:dc:ad:3e:74:70:02:eb:cf:28:38:
74:a2:83:b0:9e:77:24:be:0e:d2:d6:7f:e0:12:e1:db:08:6f:
ef:8f:5c:39:42:5c:12:72:04:c5:9f:06:33:ac:4a:d7:47:ef:
cc:7c:ce:5d:cf:2a:b2:07:c8:0d:fb:6e:7a:a9:0d:c3:ff:63:
89:a9:3e:2d:e0:97:4a:52:a6:4e:69:cd:9d:00:74:d0:1c:72:
85:cb:27:88:6b:d1:51:f5:c6:1b:3d:94:b1:64:e0:e8:d3:35:
96:52:4f:dc:ed:ac:f1:37:45:1b:d5:c9:d0:51:b2:d7:ed:70:
d1:6c:36:38:1c:7d:8a:61:54:5e:5e:02:65:42:ca:16:08:f5:
d9:15:1c:40:23:b9:ea:76:16:0c:a6:f7:1a:2c:75:2c:c2:2a:
5d:ec:91:1a:bd:fc:84:9b:fb:7f:c7:2c:8a:23:bf:9d:59:cb:
32:ba:71:82:0f:bc:26:68:a8:bf:22:86:1a:e7:05:8e:93:f0:
83:f1:e7:b5:8b:96:ad:6d:61:58:45:de:a4:0f:1a:d7:33:fa:
11:a9:f7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 03:20:12 2026 by rpki-client