Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
File: d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft (raw, json)
Hash identifier: IBvLAZIjTKtUgd8NpkxKNqBr2WvmWogpb3xTfOzMZFk=
Subject key identifier: 70:9B:12:CC:A1:5F:F9:9D:E0:B8:09:20:1B:1B:73:A3:BC:41:B9:AB
Authority key identifier: 77:C1:55:21:FE:D9:0D:11:4E:76:35:31:0B:30:7F:55:3F:57:D2:6C
Certificate issuer: /CN=77c15521fed90d114e7635310b307f553f57d26c
Certificate serial: 019D3865FFFFF0C87EC349317D1ACF175DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
Manifest number: 1078
Signing time: Sun 29 Mar 2026 07:01:41 +0000
Manifest this update: Sun 29 Mar 2026 07:01:41 +0000
Manifest next update: Mon 30 Mar 2026 07:01:41 +0000
Files and hashes: 1: d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl (hash: LN+3e53De0+ja6bu4gZIovfZBi4yur1CT1BhgvO0/NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ff:ff:f0:c8:7e:c3:49:31:7d:1a:cf:17:5d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c15521fed90d114e7635310b307f553f57d26c
Validity
Not Before: Mar 29 07:01:41 2026 GMT
Not After : Mar 30 07:01:41 2026 GMT
Subject: CN=709b12cca15ff99de0b809201b1b73a3bc41b9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:dd:1f:fe:66:93:ea:23:e4:14:2a:f9:d2:
88:f2:1d:48:84:b9:75:75:74:4f:2a:b1:46:56:4d:
3b:cc:ea:4e:70:42:78:ea:da:13:03:c4:26:76:2f:
c0:79:a5:24:25:2b:aa:e0:8e:3b:ba:60:8c:c1:47:
7c:54:3b:ce:16:16:f3:41:d2:67:fc:7b:c2:9a:79:
f7:b1:e4:ba:a4:11:9d:a9:c3:9f:5f:49:44:c0:dc:
76:3a:82:e1:aa:3b:02:6f:96:ad:72:31:39:1a:93:
4b:1c:a5:8c:de:35:62:b1:46:9d:92:54:c5:6a:66:
ed:e9:e4:58:7f:2c:c4:f5:dd:04:36:e8:3e:38:60:
b8:4a:d6:50:3b:68:c1:43:49:55:3e:b7:53:36:f5:
3e:46:65:72:59:2f:e2:a0:e1:fb:09:79:e8:52:1a:
6f:bb:0f:a5:67:a6:ce:42:06:6d:85:20:d5:c0:39:
20:25:f9:36:3c:2c:5c:d1:91:4a:d9:04:ab:98:40:
41:4b:99:ab:a5:9d:7e:f0:d4:a5:d5:c4:6a:1f:c0:
34:26:b6:85:f1:0d:6d:6c:49:41:05:ea:33:8b:a3:
d2:78:7d:12:39:1e:76:00:f4:b0:be:b8:cd:f1:e1:
2f:03:16:ff:f5:dc:fe:a9:24:d5:a8:35:8b:b7:9e:
4a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9B:12:CC:A1:5F:F9:9D:E0:B8:09:20:1B:1B:73:A3:BC:41:B9:AB
X509v3 Authority Key Identifier:
keyid:77:C1:55:21:FE:D9:0D:11:4E:76:35:31:0B:30:7F:55:3F:57:D2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ef:ec:ce:68:de:72:92:06:f6:1e:1c:3b:86:64:e1:a1:d3:
1c:db:15:42:a6:2f:e4:58:c0:aa:fa:90:e2:1b:a9:e7:fe:06:
2d:84:5c:3a:5b:b3:19:5b:6a:fe:e8:c0:ab:51:db:08:0b:dd:
2b:fd:17:6b:19:f9:0c:bf:06:b1:f1:c4:af:35:25:c5:ff:05:
f6:78:88:90:d0:bd:25:74:67:08:5e:0a:7e:23:10:d7:9f:15:
c4:80:79:ce:c5:f6:1b:d3:be:1a:1f:35:27:eb:cc:2d:23:a5:
65:fe:1d:8c:aa:c6:c5:55:b5:50:14:f4:65:d7:d2:ad:ce:30:
c9:bc:db:c7:66:de:c5:e5:90:ee:00:22:a8:b8:56:d5:1a:40:
cb:bd:7a:fc:16:d6:b4:4d:71:29:b6:57:e0:47:05:9c:f0:68:
cf:bd:bf:24:4d:82:d8:2a:ff:9f:cb:5d:5f:86:63:d7:9e:04:
b8:0f:3b:ff:a8:cd:f3:f6:50:df:cf:e3:9e:19:58:7b:e8:1b:
61:b1:e9:44:b3:d7:31:8c:85:94:b6:3a:36:22:7b:eb:cd:ef:
25:12:6f:9e:5f:41:71:0c:a8:97:be:88:95:2e:9e:f1:40:8f:
93:26:f7:37:5b:55:11:c6:d4:0c:f5:08:07:f2:fc:46:ea:0e:
a3:d5:60:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:06 2026 by rpki-client