Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
File: 0b77TZQENocaJKhyLzydZNbIQBA.mft (raw, json)
Hash identifier: q6lG8ly+x7h5Gaal+qyl3h99u3v3VN6z3JosVoVFV3o=
Subject key identifier: C5:D1:E5:64:97:C8:64:BE:04:02:18:F9:F0:AC:F5:E5:F9:C4:4A:17
Authority key identifier: D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
Certificate issuer: /CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Certificate serial: 019E28EFF0E0672EF54358C946CF5468C466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
Manifest number: 02F3
Signing time: Fri 15 May 2026 00:01:13 +0000
Manifest this update: Fri 15 May 2026 00:01:13 +0000
Manifest next update: Sat 16 May 2026 00:01:13 +0000
Files and hashes: 1: 0b77TZQENocaJKhyLzydZNbIQBA.crl (hash: jGzu7HAz9WTzBndDjp9jZSV0F1LVSCWy05A/R+5S2Zs=)
2: 2thteMXPE7HNuXgDy427RmN012w.asa (hash: AUokTZUmvO7vMDnJLm13XcC0mGvc1EfP2ch4mdqLW1c=)
3: aYA6TDe0FRGUQKWpi6CFPmb8si4.roa (hash: TWdXdIAzV6yUR6IvDamhx0hywiAE1G+KEAkggMUBFHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:ef:f0:e0:67:2e:f5:43:58:c9:46:cf:54:68:c4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Validity
Not Before: May 15 00:01:13 2026 GMT
Not After : May 16 00:01:13 2026 GMT
Subject: CN=c5d1e56497c864be040218f9f0acf5e5f9c44a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2c:3e:b5:de:4e:bb:62:7d:d8:75:ad:67:a9:
90:7a:40:3b:de:6d:4a:01:aa:81:25:48:a0:b6:29:
48:f0:be:27:b1:bd:50:f2:40:88:66:db:e6:65:2d:
19:62:49:a2:2a:11:2a:67:75:d7:83:7a:52:ca:83:
9b:ee:63:85:89:d0:b7:0c:c5:1e:f8:7a:5d:ce:43:
46:a3:83:b6:ac:13:fc:40:6c:26:a3:78:59:0b:22:
6e:48:6d:7b:cd:fe:5e:c8:90:31:92:ee:d8:8a:a1:
a4:4e:8d:27:2e:c8:d1:7e:cf:3b:72:8c:cd:16:f9:
ad:5b:ba:d8:9d:c6:23:f7:be:f2:b8:f7:3c:a7:d7:
31:0c:86:bb:c4:0f:83:6e:b6:1a:d8:71:db:a4:5a:
6e:cf:e6:f1:73:12:26:9b:9d:d4:6e:06:88:7a:c8:
af:f7:0f:cf:62:75:65:93:22:68:4d:ba:35:ff:54:
ec:21:36:63:15:0c:d8:ef:36:46:4d:69:d9:d7:88:
7b:b2:3d:0b:48:cf:96:6a:00:d9:f1:67:87:fb:a8:
bf:5d:54:10:34:23:9a:3a:fb:20:2a:a0:fc:13:26:
b8:91:e2:80:3a:1d:34:9c:96:7f:00:4f:46:3a:2b:
14:05:3d:6c:d2:21:3d:bf:2f:a0:6b:3b:b4:3e:2f:
ca:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D1:E5:64:97:C8:64:BE:04:02:18:F9:F0:AC:F5:E5:F9:C4:4A:17
X509v3 Authority Key Identifier:
keyid:D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:2c:ae:09:ea:bc:90:0e:49:73:d6:ac:f6:09:a8:5c:b8:90:
ba:e5:de:99:1b:bf:ac:37:da:4e:19:d7:5e:b6:43:5a:5b:e6:
4c:b6:2f:17:69:1a:84:41:a6:3b:39:4a:04:d5:8c:ae:f2:84:
0e:5d:a7:f2:7d:a3:28:6a:d2:53:3f:cb:6a:c8:c7:42:23:17:
fe:7d:a9:a7:24:fe:b4:cd:07:ce:4f:c0:36:84:1b:8d:1b:e1:
48:d2:f6:7f:f5:3f:0b:f2:0a:67:0a:49:c6:c3:90:5b:71:c8:
73:59:cd:cf:5b:26:86:d9:30:ff:ab:29:80:bc:ad:f0:c0:7a:
d1:53:07:da:6d:45:3a:49:56:b0:dd:02:ad:16:71:47:b3:c3:
7e:0d:0e:5c:41:fa:b5:05:b4:7b:d0:cd:23:af:2c:b2:15:d1:
e9:3c:31:cd:2f:60:26:6b:1f:3b:d4:57:ae:9e:a7:61:64:cc:
6e:0b:5a:90:0c:3c:33:03:ab:3b:d9:a6:1e:c4:5d:34:67:81:
74:d4:d4:7d:78:69:67:f7:0d:b0:19:4e:1c:8b:ca:68:b0:64:
d7:14:bc:92:ca:4e:e6:eb:27:e8:25:eb:a3:fc:c4:5b:8f:b6:
6c:5a:8e:d0:60:a5:8f:c8:59:fb:71:48:07:3a:b1:dd:ab:d7:
0f:05:f5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:01:47 2026 by rpki-client