
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
File: d8jZS9834PkAzWqMQizbFNl860Y.mft (raw, json)
Hash identifier: ofy8SopAGWjnynDHnejQfss6b4G3aEqLpa1Adxxdqy4=
Subject key identifier: 77:24:0D:21:35:86:17:24:87:37:47:81:8A:15:CD:6A:0D:21:75:40
Authority key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
Certificate issuer: /CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Certificate serial: 019FA1F2159255378928793F96EDA1CC7AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
Manifest number: 0556
Signing time: Mon 27 Jul 2026 05:00:24 +0000
Manifest this update: Mon 27 Jul 2026 05:00:24 +0000
Manifest next update: Tue 28 Jul 2026 05:00:24 +0000
Files and hashes: 1: 3AKV0u3WSxtyrBn5vr3IyCaz8CY.roa (hash: eMq4UCU2DpJceG3vsiv0qnCLBJvV82fA2hJ3CQNxIsw=)
2: d8jZS9834PkAzWqMQizbFNl860Y.crl (hash: DlPO2M9Pol+d6OM/0qzf8HeEv6CoWYkQo7+ZGIWRe1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:15:92:55:37:89:28:79:3f:96:ed:a1:cc:7a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Validity
Not Before: Jul 27 05:00:24 2026 GMT
Not After : Jul 28 05:00:24 2026 GMT
Subject: CN=77240d2135861724873747818a15cd6a0d217540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:46:cb:bc:3d:76:1c:75:03:2c:09:54:18:34:
27:b2:21:d5:6d:1e:0d:4d:80:13:e0:c9:25:5c:47:
37:fa:b4:b6:55:18:89:87:50:ed:d5:5e:92:9f:02:
c8:ce:e4:1c:7f:63:d6:86:9e:f9:ca:18:8c:ca:7b:
b1:a2:c3:73:13:44:b8:f4:f1:8c:f9:0c:13:a6:cf:
39:9f:e9:98:e3:c9:bd:29:74:08:95:e1:68:2d:2b:
db:1e:0c:f4:16:9b:fd:8b:12:0a:60:bc:83:2e:f3:
47:d3:d6:7c:91:d5:44:3e:81:b1:16:44:28:42:7d:
f8:76:61:31:f7:76:97:68:12:75:d1:30:05:44:6e:
46:38:49:c2:cc:c1:c1:63:b3:65:68:0a:b9:40:fc:
00:4e:e1:90:ad:49:c6:28:85:db:01:a8:00:f3:55:
b5:7e:50:9b:ce:9a:4c:8e:ac:c0:70:f2:69:a9:44:
88:7e:ab:80:d8:1b:f8:4b:43:b0:4d:c0:28:94:24:
9d:b9:ec:d8:06:5f:16:6a:fe:2a:ab:f1:fa:db:be:
88:d5:83:fe:30:21:d9:91:61:0a:1b:5d:dc:2c:db:
27:7b:cc:79:00:e1:57:07:49:30:e6:79:1f:ab:90:
14:76:50:de:8d:a5:40:25:1a:11:03:d3:c1:88:47:
77:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:24:0D:21:35:86:17:24:87:37:47:81:8A:15:CD:6A:0D:21:75:40
X509v3 Authority Key Identifier:
keyid:77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:1b:75:30:2f:ec:04:be:05:af:8f:60:7c:96:bf:29:0c:33:
95:f2:06:10:86:d9:d7:df:d1:70:c3:99:25:62:3b:ab:02:d0:
a1:be:be:ba:f7:5c:24:46:f2:40:6b:d1:28:7f:25:a8:3d:db:
06:7b:65:45:0d:f4:5e:bd:b0:c8:38:b7:ad:e3:b6:5e:e6:a0:
e7:58:a2:59:05:06:69:92:e6:b7:fc:5a:ef:8c:3d:98:97:53:
c6:25:70:3b:a6:0f:6a:80:50:1b:8e:a2:62:d9:a8:1a:9f:dc:
ab:d9:12:ab:47:48:76:fd:be:73:1c:cf:67:c0:dd:51:89:8b:
5c:1a:82:d7:68:33:69:0e:91:f9:fa:e7:90:5b:aa:66:1d:d0:
08:62:36:f3:3c:bd:33:70:93:c4:59:b2:af:cf:f8:3f:13:ea:
49:31:a0:fc:70:c4:06:9e:a9:dd:4d:cc:f9:ff:0e:98:22:41:
39:64:42:71:e9:82:80:6e:52:48:85:15:d5:01:78:26:a7:9a:
f9:a4:63:ef:0d:f5:0b:50:5e:86:eb:b2:11:06:5d:67:cf:cf:
4c:1c:5d:f3:3b:37:60:11:a7:bb:e8:9b:fc:9f:04:68:9e:91:
c8:e2:43:57:f2:b5:b7:33:71:55:ab:c1:49:6b:ee:87:d6:cf:
8e:30:e6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:47:48 2026 by rpki-client