Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
File: d_bMQsdY59p8S_q8ISEtHSghYDE.mft (raw, json)
Hash identifier: xNpcDfhW9dpHyrgGq4qPEIKODuDdhBYfLBXfLn1Y6+U=
Subject key identifier: E1:15:2C:71:C1:4C:43:EC:62:2A:55:13:CF:40:23:22:F1:45:F5:CF
Authority key identifier: 77:F6:CC:42:C7:58:E7:DA:7C:4B:FA:BC:21:21:2D:1D:28:21:60:31
Certificate issuer: /CN=77f6cc42c758e7da7c4bfabc21212d1d28216031
Certificate serial: 019D38D2A8BFD16AB35D5085D04CE4CBEA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_bMQsdY59p8S_q8ISEtHSghYDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
Manifest number: 0858
Signing time: Sun 29 Mar 2026 09:00:23 +0000
Manifest this update: Sun 29 Mar 2026 09:00:23 +0000
Manifest next update: Mon 30 Mar 2026 09:00:23 +0000
Files and hashes: 1: d_bMQsdY59p8S_q8ISEtHSghYDE.crl (hash: PTRw3UbgL47Lpzv/QelhnYdwnNNNooy0hC+1ZYXkY+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_bMQsdY59p8S_q8ISEtHSghYDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a8:bf:d1:6a:b3:5d:50:85:d0:4c:e4:cb:ea:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f6cc42c758e7da7c4bfabc21212d1d28216031
Validity
Not Before: Mar 29 09:00:23 2026 GMT
Not After : Mar 30 09:00:23 2026 GMT
Subject: CN=e1152c71c14c43ec622a5513cf402322f145f5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:51:b3:c4:83:b6:cc:c6:61:38:7a:14:70:
27:e8:9b:34:5a:48:be:e8:1f:42:9d:e9:23:d4:d2:
27:27:af:75:f7:9b:54:67:3e:f8:c9:c4:b0:79:14:
b2:f2:fe:9f:5f:78:e2:a2:a1:2e:4f:f2:06:0e:ef:
ef:9e:0a:ff:20:c4:b8:9e:47:f4:f8:00:25:56:91:
99:f5:99:c0:0b:3a:ef:c1:cc:6b:45:16:9c:b1:77:
bd:e9:a5:d8:08:44:e1:12:a0:d5:84:3b:59:ee:78:
4b:16:e5:cf:ea:b1:3f:cd:6e:41:b6:25:47:c1:a8:
3a:e3:27:6f:66:01:79:b9:d1:e2:ba:64:24:5f:73:
62:92:dd:b6:50:3b:72:15:5e:d5:af:0a:e3:9f:5f:
00:7b:b3:70:aa:0c:b8:a1:6c:02:3e:dc:8f:44:28:
22:66:f9:04:7d:59:1f:40:75:6c:28:9c:84:02:ab:
82:5a:a8:9e:64:17:45:02:bc:5d:85:7a:da:51:e6:
e1:34:0e:75:86:40:0b:72:0c:02:55:cb:3c:6f:8c:
73:ad:3b:a2:e7:9c:00:21:bb:68:fb:d7:88:d3:5d:
1b:d1:07:61:a5:4d:8a:6c:a0:ec:a3:8b:cb:44:88:
3b:e3:fe:c2:50:84:55:c8:70:42:7e:76:2a:58:45:
70:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:15:2C:71:C1:4C:43:EC:62:2A:55:13:CF:40:23:22:F1:45:F5:CF
X509v3 Authority Key Identifier:
keyid:77:F6:CC:42:C7:58:E7:DA:7C:4B:FA:BC:21:21:2D:1D:28:21:60:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_bMQsdY59p8S_q8ISEtHSghYDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3b:f6:34:8a:24:99:8c:63:6c:5a:7d:52:1c:b5:68:1d:b5:
eb:a7:0d:93:0d:a9:75:c4:b9:52:01:7d:f0:05:98:c4:fe:9f:
3d:b0:4f:48:fb:c1:f8:3e:fd:9a:1e:91:10:94:fb:6f:1e:b4:
53:9e:21:57:8d:10:ec:ec:06:77:1d:61:81:d1:19:20:5f:1b:
0c:27:27:7c:8c:ed:60:df:4b:75:89:59:60:ba:e8:f9:25:3a:
fb:7e:c6:a9:9b:f1:23:f0:ea:49:a0:81:00:81:86:3d:40:43:
86:58:08:0d:b1:30:5b:3d:db:00:91:27:01:67:fe:cd:5f:22:
d4:bc:f9:47:da:74:c4:43:01:2d:51:a1:86:0f:85:36:13:b3:
55:09:0c:6b:87:c5:b4:c4:f7:aa:c4:e1:96:23:ce:16:86:24:
1f:d4:5d:54:48:06:e8:0e:f6:a0:c9:b7:ae:3f:15:ef:72:6c:
73:95:ae:aa:78:2c:83:45:2a:b6:cb:d4:8a:04:3d:3d:38:d1:
2e:46:b0:96:5e:b9:5c:2e:6e:af:f6:da:73:25:8c:1c:4e:78:
97:c6:b3:40:f3:82:5b:74:a5:b5:97:ea:e5:12:3a:a7:64:1a:
47:e8:98:cf:07:fe:91:dd:3e:bb:60:2c:0d:d4:b3:8b:51:ee:
e4:26:1b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:48 2026 by rpki-client