Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
File: d8jZS9834PkAzWqMQizbFNl860Y.mft (raw, json)
Hash identifier: XjF8rPZiTsnJf/d7B2N0PauUniRX9I6SZWUTteXChUQ=
Subject key identifier: 10:C8:2B:06:5B:A6:2F:FD:86:53:39:71:8E:A3:24:2B:B9:F3:DE:83
Authority key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
Certificate issuer: /CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Certificate serial: 01A1754C1E3B565E5FE2E98D82471F841066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
Manifest number: 0648
Signing time: Sun 25 Oct 2026 23:01:25 +0000
Manifest this update: Sun 25 Oct 2026 23:01:25 +0000
Manifest next update: Mon 26 Oct 2026 23:01:25 +0000
Files and hashes: 1: 3AKV0u3WSxtyrBn5vr3IyCaz8CY.roa (hash: eMq4UCU2DpJceG3vsiv0qnCLBJvV82fA2hJ3CQNxIsw=)
2: d8jZS9834PkAzWqMQizbFNl860Y.crl (hash: bh3AMawM8ghr3XQtEFENtP1Xe2wyZXYxKSYAmNv650E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:4c:1e:3b:56:5e:5f:e2:e9:8d:82:47:1f:84:10:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Validity
Not Before: Oct 25 23:01:25 2026 GMT
Not After : Oct 26 23:01:25 2026 GMT
Subject: CN=10c82b065ba62ffd865339718ea3242bb9f3de83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:33:05:7e:77:86:96:42:88:4f:df:71:77:0f:
9f:fe:17:3f:8d:94:80:9e:97:ef:e7:56:7b:b2:9a:
1c:b0:93:94:e4:12:9d:74:96:91:b1:59:29:00:c7:
e5:22:2d:e8:b9:81:4d:9c:64:a6:9d:a1:2f:c7:92:
7f:b8:bb:74:2e:79:05:a1:b8:c5:48:31:26:b0:e6:
0b:a0:77:11:23:4c:c5:4d:81:bb:49:ca:a5:94:2a:
f5:3a:3c:20:cd:73:12:14:e3:7a:19:43:95:28:26:
06:02:df:8d:e5:ba:ba:25:52:ad:c9:e4:5f:0c:65:
3a:cb:4d:6d:b4:e9:ba:d3:af:8b:7a:3d:1d:16:a9:
c0:fe:8b:19:c6:4d:14:11:71:ce:b9:f2:c2:2a:97:
e0:e3:84:85:5c:b3:52:50:59:ed:f1:1c:53:f1:7a:
4e:09:9f:0c:78:97:1e:f2:e0:fd:35:e6:de:02:08:
93:9f:de:7d:d1:12:18:bb:f6:20:62:a1:8a:32:90:
f1:8f:26:f2:bc:b7:6b:54:30:3c:4a:74:8f:71:4a:
cc:8a:fd:27:d4:81:82:39:2f:73:08:d9:1a:db:20:
38:61:14:a3:85:52:a8:1f:9b:fd:93:8d:b5:8d:37:
a8:c6:89:2b:a7:7d:5e:d4:46:2a:a8:f2:f7:2c:91:
43:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C8:2B:06:5B:A6:2F:FD:86:53:39:71:8E:A3:24:2B:B9:F3:DE:83
X509v3 Authority Key Identifier:
keyid:77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:66:71:f7:d5:11:8b:66:19:4c:ea:e2:12:a0:f5:bb:c0:dc:
4c:b8:ab:e4:43:f1:69:4d:7d:e3:8c:d7:66:43:99:10:4c:36:
a8:cb:61:37:bd:79:59:e1:f5:35:3f:0f:8b:5e:dc:e7:fa:68:
6e:8d:14:47:06:b5:25:0c:98:12:7c:ea:8b:0c:df:31:8e:f0:
ba:c0:e5:65:c9:77:e7:b3:fb:45:15:94:9d:63:d3:74:6e:85:
51:5c:59:86:e4:5a:54:81:51:a5:38:e7:a5:17:14:03:3b:39:
09:28:d2:36:4d:02:b7:fa:de:d8:fc:2d:1a:76:7d:1c:2e:0e:
c5:32:6d:75:8c:4b:38:07:78:4c:f6:9e:33:29:d6:8f:cf:a0:
a1:c7:9a:7d:b7:a7:42:a4:65:8d:4e:67:81:92:a7:4c:84:81:
9b:5a:1f:a7:39:00:6b:8f:fc:01:7c:d5:b5:72:90:a1:ec:02:
a2:38:a0:9b:0d:48:a2:af:3f:81:ae:3d:a2:b8:83:c1:4e:0a:
f7:b7:05:91:09:f0:75:67:73:92:e7:86:7e:3b:f5:c7:7f:24:
24:03:de:2f:c6:df:68:cc:cc:5a:db:8b:e5:e9:9c:2d:a0:03:
2f:da:b3:57:5f:60:98:c4:37:27:19:fe:de:68:5c:ca:7d:93:
0b:16:ec:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:07:02 2026 by rpki-client