
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
File: d7AlLypnrNQplw-mSmQXd29y2NY.mft (raw, json)
Hash identifier: KedEJlvdf5MmgPPeUUsmJW8zWs/ZZF0JXBtQVdTzvuk=
Subject key identifier: 0D:1B:71:A5:B1:51:41:D0:5F:0A:A3:8D:E0:56:FF:36:90:49:47:23
Authority key identifier: 77:B0:25:2F:2A:67:AC:D4:29:97:0F:A6:4A:64:17:77:6F:72:D8:D6
Certificate issuer: /CN=77b0252f2a67acd429970fa64a6417776f72d8d6
Certificate serial: 01A03B960F63C701F753D1F2C5A073ED19E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
Manifest number: 08FB
Signing time: Wed 26 Aug 2026 01:01:24 +0000
Manifest this update: Wed 26 Aug 2026 01:01:24 +0000
Manifest next update: Thu 27 Aug 2026 01:01:24 +0000
Files and hashes: 1: GZzLxFCp1bVkiSpEsTLVVr4H9XI.asa (hash: ivqvyTFoXDuekBB8qUC8sgSfxDY8iNPCYAvAp+TmOlY=)
2: d7AlLypnrNQplw-mSmQXd29y2NY.crl (hash: BvrwnU89UYPvBr0PCkJJZSImKx90iNU5mkauAo6xFXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3b:96:0f:63:c7:01:f7:53:d1:f2:c5:a0:73:ed:19:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b0252f2a67acd429970fa64a6417776f72d8d6
Validity
Not Before: Aug 26 01:01:24 2026 GMT
Not After : Aug 27 01:01:24 2026 GMT
Subject: CN=0d1b71a5b15141d05f0aa38de056ff3690494723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:eb:52:92:cd:74:2c:7c:e9:81:3e:d2:43:11:
02:92:67:8c:f3:e0:7d:72:3c:2a:4c:b8:fa:a7:0d:
d4:50:19:c5:52:72:6f:6b:c4:5b:d9:f3:7c:68:b9:
bb:48:3f:2a:e6:18:fb:4f:26:7f:b6:39:ed:b4:18:
8d:32:e8:10:8d:9e:a4:c1:5f:6e:fa:4a:d5:e7:88:
a6:e5:ca:c3:81:a8:4d:e9:18:91:bf:c6:8f:4d:6f:
6d:83:29:54:c4:25:e8:72:d1:ca:37:66:da:6d:d1:
f8:6f:cb:b0:14:56:2e:ed:8e:dc:13:24:f7:51:79:
b3:fd:e1:2e:70:e9:46:5b:85:fc:e2:01:89:62:3d:
51:8a:05:6d:34:22:9c:fa:59:11:aa:92:83:13:33:
06:4f:07:17:09:e3:31:a4:6a:24:fc:8a:05:80:32:
1d:cf:7e:46:a1:99:8e:fd:f6:34:62:a7:c9:58:d0:
a3:e4:37:92:05:bc:a7:dc:25:2e:38:41:57:7b:d1:
4b:0d:d5:b3:b2:1b:f1:8f:f1:f9:cb:03:dd:d0:ff:
85:9d:b2:a2:df:ed:21:c2:e9:a5:32:c9:f2:d8:86:
71:e9:27:9a:c8:7e:44:2d:fd:68:0f:38:c3:e0:bf:
79:63:7c:5f:b2:6c:18:ab:68:e3:2f:c7:04:12:ad:
85:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1B:71:A5:B1:51:41:D0:5F:0A:A3:8D:E0:56:FF:36:90:49:47:23
X509v3 Authority Key Identifier:
keyid:77:B0:25:2F:2A:67:AC:D4:29:97:0F:A6:4A:64:17:77:6F:72:D8:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c1:e6:46:67:69:5b:d7:8b:b7:ab:68:d4:1c:d0:93:3f:cf:
35:53:ec:32:17:07:95:4f:cf:7c:34:7e:06:a0:6f:da:79:2f:
7a:38:59:c3:95:3c:e8:f1:d4:30:5f:e1:5b:48:9a:6a:d9:d8:
0a:e2:18:17:df:36:57:8f:0e:41:bd:71:54:4e:0f:b0:4f:e0:
09:28:39:ba:f2:c7:3a:ea:5f:3d:61:d0:af:4b:da:a7:51:43:
7d:10:1e:1a:c5:e4:72:18:4b:30:df:45:8b:5f:ef:7a:9b:1e:
1b:2c:a7:f7:2c:e0:e2:e3:15:ec:52:41:95:db:fc:fa:ef:e3:
ab:9a:9a:6a:88:e3:57:58:78:d0:af:42:b3:e3:78:83:53:09:
7b:fe:09:0c:29:39:ba:87:1a:83:be:aa:b3:0c:20:e5:34:af:
07:64:0e:7a:38:05:46:15:0b:bb:ca:84:d7:67:b8:bd:8b:ba:
c5:aa:10:cd:6f:d5:c8:15:36:c7:65:08:27:f7:47:5c:27:a0:
20:f6:01:1b:06:9e:12:9d:3d:02:d8:71:e4:c7:76:a2:c2:a6:
18:17:be:af:47:70:62:c8:2e:d3:d6:c2:b8:ad:4c:8d:15:83:
13:fa:9c:ad:d9:2f:1a:e5:7f:4d:55:ff:86:30:f4:14:b4:98:
7c:4e:36:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:38:56 2026 by rpki-client