Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
File: d8jZS9834PkAzWqMQizbFNl860Y.mft (raw, json)
Hash identifier: Oz6yFhEHti0AJOr6KCjvv52Ew5EEmUuTJeQJR5syAiE=
Subject key identifier: 48:E1:F7:64:0A:E3:55:3C:F4:A6:FF:9D:D7:5D:EC:99:E2:4E:E2:51
Authority key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
Certificate issuer: /CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Certificate serial: 01A08B9FBE9F71CDC650455A863B6116013F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
Manifest number: 05CF
Signing time: Thu 10 Sep 2026 14:01:36 +0000
Manifest this update: Thu 10 Sep 2026 14:01:36 +0000
Manifest next update: Fri 11 Sep 2026 14:01:36 +0000
Files and hashes: 1: 3AKV0u3WSxtyrBn5vr3IyCaz8CY.roa (hash: eMq4UCU2DpJceG3vsiv0qnCLBJvV82fA2hJ3CQNxIsw=)
2: d8jZS9834PkAzWqMQizbFNl860Y.crl (hash: R0Ek35/le6WiGvsGQhdYmAW7FkHU6OveiIcE0wI7qE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:be:9f:71:cd:c6:50:45:5a:86:3b:61:16:01:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Validity
Not Before: Sep 10 14:01:36 2026 GMT
Not After : Sep 11 14:01:36 2026 GMT
Subject: CN=48e1f7640ae3553cf4a6ff9dd75dec99e24ee251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:08:32:de:29:1a:d5:91:ff:0e:06:ed:5c:d0:
5a:cb:ef:87:3b:f1:79:3d:ca:69:95:4c:a7:40:e7:
46:7c:a6:77:d3:6b:4c:81:2c:cc:8b:f7:5d:ff:70:
3f:24:d9:15:01:7e:08:30:7e:0f:e2:29:cc:45:fc:
5a:c8:49:fa:74:b1:8e:8f:49:70:03:6c:6f:84:6b:
fb:bb:b2:c3:be:4a:5d:b7:fc:33:ed:4e:10:9a:33:
ea:eb:26:ab:e8:63:48:27:0e:4d:d3:2b:0f:c6:3e:
10:e9:d4:8a:0f:e0:50:9f:94:5c:fd:97:f5:3e:7f:
78:8e:6b:fc:2b:ab:55:d8:f0:ba:16:ab:7c:9d:b5:
ad:6d:bb:ce:fe:d2:64:af:dc:57:e4:71:5f:e1:71:
db:ee:98:94:ca:95:61:f5:f0:3f:7f:0a:fa:06:0f:
d7:6e:cf:f6:55:cc:b5:f8:df:8a:c2:1f:a5:8d:ce:
74:0b:7b:c5:a5:ba:57:b0:a1:6a:fb:ca:58:f1:98:
6d:d9:64:cb:ed:19:af:d8:27:23:ee:cb:80:93:ea:
6b:9e:61:d0:3c:79:c9:b7:a6:22:7b:e8:85:5f:1a:
e9:f3:1a:72:00:c7:8f:df:34:ba:79:f2:7d:10:82:
62:e3:69:17:df:cd:55:8c:a8:1e:d5:56:65:b9:23:
88:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E1:F7:64:0A:E3:55:3C:F4:A6:FF:9D:D7:5D:EC:99:E2:4E:E2:51
X509v3 Authority Key Identifier:
keyid:77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:64:76:ef:ef:bc:90:4e:6d:d0:ea:22:01:0f:df:c0:97:0f:
22:7e:7a:e1:c6:75:dd:d4:05:fa:e7:1b:db:29:18:fa:bc:ba:
ee:0c:6d:00:31:e2:4d:16:ce:ed:81:ce:fe:85:36:cc:ae:73:
3e:e5:28:42:e7:47:54:cd:af:4e:35:2d:85:a1:5f:2e:9f:7e:
25:16:14:d9:07:3b:ff:a9:a3:2e:e9:9d:98:05:fe:f1:f9:c6:
e6:c9:6c:bb:56:b7:02:61:19:f0:c7:d6:d7:7f:38:ff:bb:6b:
f6:ef:01:bd:bc:bb:05:fb:82:ef:2f:6c:57:50:fe:da:67:2b:
58:92:c3:d7:b5:9b:95:98:e8:4d:b8:05:f2:35:4e:48:84:6f:
f2:e8:51:97:71:cd:87:18:fb:2d:fb:1d:19:97:72:a4:fb:a3:
da:bc:51:9f:c8:5d:8f:52:97:85:73:8f:09:22:99:ec:b3:80:
86:38:ad:1a:5e:08:fc:32:8c:e8:80:51:2b:18:96:9c:77:d4:
4c:02:93:a4:86:7a:41:d7:aa:39:50:5c:2f:47:b3:7b:e2:e6:
f9:f5:45:0b:eb:12:24:7b:83:e0:9a:11:f8:51:24:93:0e:81:
ce:81:14:bd:42:23:be:3d:81:75:a9:48:e7:18:0c:10:5a:71:
67:d8:e5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:31:33 2026 by rpki-client