Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
File: 0b77TZQENocaJKhyLzydZNbIQBA.mft (raw, json)
Hash identifier: 8MV+C8mfvFg/r6xn5c12mvdbo876BF4/6xxy5EMFMY4=
Subject key identifier: 72:66:D5:A5:1A:2B:41:1D:0C:7D:69:92:95:11:E3:41:E4:B7:AB:3D
Authority key identifier: D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
Certificate issuer: /CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Certificate serial: 01A03FE09542F91FE01BD0214AFF3CEE45A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
Manifest number: 0408
Signing time: Wed 26 Aug 2026 21:01:17 +0000
Manifest this update: Wed 26 Aug 2026 21:01:17 +0000
Manifest next update: Thu 27 Aug 2026 21:01:17 +0000
Files and hashes: 1: 0b77TZQENocaJKhyLzydZNbIQBA.crl (hash: qMJbNk9YI46ZHNDh8n9CxyiOCeaO7dNdZtG7cj0eWGA=)
2: 2thteMXPE7HNuXgDy427RmN012w.asa (hash: AUokTZUmvO7vMDnJLm13XcC0mGvc1EfP2ch4mdqLW1c=)
3: aYA6TDe0FRGUQKWpi6CFPmb8si4.roa (hash: TWdXdIAzV6yUR6IvDamhx0hywiAE1G+KEAkggMUBFHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:e0:95:42:f9:1f:e0:1b:d0:21:4a:ff:3c:ee:45:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Validity
Not Before: Aug 26 21:01:17 2026 GMT
Not After : Aug 27 21:01:17 2026 GMT
Subject: CN=7266d5a51a2b411d0c7d69929511e341e4b7ab3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:aa:0d:4c:9a:69:da:9e:42:a4:ba:3b:b6:3c:
8c:78:f3:3f:ee:f4:9f:ed:10:28:38:95:e3:01:47:
f4:ec:d7:b2:c0:90:74:e5:6e:42:51:76:80:3b:99:
12:0e:bf:b7:d9:a2:fa:d7:8c:f2:b2:4b:e7:31:9e:
12:be:8d:3b:31:f9:b6:12:0a:a4:cc:c7:76:ec:18:
16:79:97:a9:d9:c9:bd:88:39:ea:3d:4f:cc:5a:ba:
32:63:c4:1b:bd:a9:41:7b:a5:d2:f8:5a:65:10:f4:
cd:3b:4f:85:55:38:72:77:65:10:ea:51:70:a5:69:
be:c3:56:1b:23:74:a1:dc:c2:fe:68:27:8c:13:7a:
63:62:e5:ff:99:8a:e6:54:a5:ca:1f:7b:51:de:25:
ce:fb:91:d7:d2:16:ee:c7:64:80:0b:6e:11:e1:5d:
67:2b:e3:1c:bf:63:d9:0c:05:84:e1:01:a2:54:e7:
19:9c:10:2f:ea:93:e8:0e:42:89:6e:00:f2:15:30:
d8:bf:cf:8c:a6:02:fe:0d:f7:91:a6:03:2b:0b:24:
eb:8d:6c:a2:fb:6b:1f:ef:15:8d:ea:84:6d:5d:02:
1b:fb:f1:99:af:f6:05:90:97:c4:84:4a:72:9e:3b:
5a:2f:cd:a0:f8:7c:ea:71:30:98:49:cb:ab:97:88:
9c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:66:D5:A5:1A:2B:41:1D:0C:7D:69:92:95:11:E3:41:E4:B7:AB:3D
X509v3 Authority Key Identifier:
keyid:D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:82:14:03:8f:2b:b6:b6:1b:1d:f6:84:f6:03:71:5a:25:67:
b4:61:47:1b:42:b7:19:f4:f4:0f:df:59:d4:ed:85:e5:cf:0b:
7a:7c:7d:3d:a5:1c:8e:73:6b:c9:ea:7b:9c:6f:be:4e:39:b6:
82:b6:30:9a:e0:62:b9:1e:eb:69:87:5a:94:1e:59:f8:af:2e:
d0:98:c6:27:03:ea:04:37:c5:27:7a:bb:8f:6c:58:56:26:cf:
8f:9f:bb:3c:51:51:43:3f:79:de:ab:c7:f1:72:a1:a8:62:ac:
e5:c8:a1:af:b8:cb:38:b7:b0:d2:12:1d:96:e5:0c:7f:7d:94:
1f:cd:00:9e:84:3f:98:c2:a4:c7:0f:d1:a1:8c:47:b6:ef:a9:
16:2a:ea:d6:2f:48:3f:30:24:32:92:c7:40:64:8f:1d:34:c3:
84:6c:a7:f8:ed:7c:2e:15:e5:04:75:d1:e1:c9:c2:8b:f5:31:
44:e4:bd:f7:d0:21:ce:46:0e:8b:d7:83:23:72:b3:1d:c2:bf:
8a:c2:34:5d:3b:20:6e:2b:20:31:b9:d4:73:6a:1a:b0:43:14:
02:d1:80:31:2e:5f:47:f6:35:a8:54:52:aa:e3:c9:86:77:dc:
a4:15:85:56:62:09:e5:04:eb:e0:db:6e:93:32:a8:d8:f8:d9:
78:95:e1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:14:22 2026 by rpki-client