Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
File: d8LYpgGX_HveZPw_rRDrLaT-h3k.mft (raw, json)
Hash identifier: hIpJbxHNDbAdXhVYF/Ph80PXji+s0hZFCk4zjCDbn9c=
Subject key identifier: 6D:A7:2F:05:FB:10:DE:DF:65:B1:B6:8B:F4:8A:54:F1:AB:34:2B:0D
Authority key identifier: 77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
Certificate issuer: /CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Certificate serial: 019E31F2B11DD535547B4005D5B742FEA1AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
Manifest number: 0966
Signing time: Sat 16 May 2026 18:00:49 +0000
Manifest this update: Sat 16 May 2026 18:00:49 +0000
Manifest next update: Sun 17 May 2026 18:00:49 +0000
Files and hashes: 1: aJHKOA-DMpMHSd964JXfuSmBfY0.roa (hash: oXACImzHioTx7c3QtWHlpndieWC52eNkX76flIoPyqE=)
2: d8LYpgGX_HveZPw_rRDrLaT-h3k.crl (hash: nQr2JOwrS/TCPNiByJ1AalIMrHLMptTYaOQh5FV/upk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f2:b1:1d:d5:35:54:7b:40:05:d5:b7:42:fe:a1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Validity
Not Before: May 16 18:00:49 2026 GMT
Not After : May 17 18:00:49 2026 GMT
Subject: CN=6da72f05fb10dedf65b1b68bf48a54f1ab342b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ec:58:1f:72:8d:ac:ea:11:72:1e:cb:40:b8:
5d:7c:41:04:ce:28:d7:65:b1:e3:74:67:4f:81:5f:
af:3a:22:6a:d4:5d:b8:a1:40:48:fb:84:4d:e9:b8:
25:9b:23:fe:d5:bf:0f:ff:53:5b:96:f1:2e:b3:76:
10:84:23:2a:e9:77:12:a3:b3:47:1a:26:2d:a6:68:
53:5f:e0:dc:b0:92:b9:2b:4d:e6:7a:6d:cf:60:50:
89:27:fa:29:09:77:2f:66:89:21:f5:d0:ba:49:f5:
58:73:73:6e:87:10:81:24:62:ae:fe:f9:a2:8f:e5:
69:ef:c0:b6:dc:09:0a:1b:b6:ad:67:c0:6f:b3:cd:
37:76:8c:5c:44:de:9e:81:0f:7e:4f:e6:ca:45:b0:
6d:9a:45:b4:e8:78:60:ae:f7:41:a2:ae:84:37:77:
23:b8:fc:5b:4c:8b:31:62:30:06:5d:00:c0:74:6f:
ca:35:10:e3:d1:31:26:ff:db:77:11:d2:e4:ac:3b:
37:ae:b4:c5:df:6b:4a:34:0d:e2:1c:ba:19:cf:7e:
8c:df:4b:db:f6:10:89:f6:f2:9f:ab:cf:6c:5d:e7:
8a:d3:57:87:d9:f1:4e:50:be:f3:a9:d6:c6:34:80:
7d:48:0b:16:6f:05:2f:ac:61:73:73:ba:24:30:d4:
38:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A7:2F:05:FB:10:DE:DF:65:B1:B6:8B:F4:8A:54:F1:AB:34:2B:0D
X509v3 Authority Key Identifier:
keyid:77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:5c:1c:3a:0b:48:b8:3f:99:1f:3c:50:2d:d8:88:a1:11:bc:
56:32:a4:b3:6d:fb:a0:31:87:6c:be:c6:c3:44:d6:41:53:34:
00:50:dc:3b:22:85:6d:1c:bf:aa:e4:aa:6a:7c:b3:33:6f:bf:
d9:cf:d4:5d:c3:5c:e2:6d:30:df:ba:b3:ed:a9:93:8f:65:e7:
83:1c:e5:9e:51:51:dd:88:b8:8d:6d:6e:4b:cb:f3:7f:14:29:
f9:0a:11:bf:9f:86:43:ca:1a:33:e4:87:38:ab:17:bb:6e:6d:
f9:b6:b6:39:a5:11:7e:4b:78:5d:ac:41:76:34:33:7b:ba:01:
8a:2e:ed:cd:c4:e6:d6:74:4b:43:b1:34:1f:ce:81:2e:48:d9:
64:a9:8f:4d:06:5f:d3:51:f0:df:ef:2b:fe:c0:28:85:da:8b:
07:42:94:81:ae:96:b6:e7:c7:ca:f9:f4:48:ba:d4:2d:cc:de:
15:09:0a:8f:b0:8f:e6:e2:b2:02:f8:2e:80:2c:18:af:e6:fb:
ab:c9:51:45:bc:10:05:4a:c1:d4:db:2c:09:fd:0e:65:aa:9e:
67:96:ae:77:2c:f1:a1:ee:16:79:7a:c1:10:da:c0:06:bd:f3:
46:b1:29:43:b4:09:f8:bd:fa:12:91:21:15:d2:1b:3d:18:0b:
da:0e:27:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:42 2026 by rpki-client