Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
File: d8jZS9834PkAzWqMQizbFNl860Y.mft (raw, json)
Hash identifier: 2zAFG1aZVRPIXamNKM7cW963NnjAKtY7HUDPkVE+6ps=
Subject key identifier: AF:9B:9C:6A:B3:6D:75:8A:C2:7B:70:C5:3A:B0:A2:61:AE:63:8F:C0
Authority key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
Certificate issuer: /CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Certificate serial: 019D39E5477A41C212EDBA382EC12A9925EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
Manifest number: 0417
Signing time: Sun 29 Mar 2026 14:00:20 +0000
Manifest this update: Sun 29 Mar 2026 14:00:20 +0000
Manifest next update: Mon 30 Mar 2026 14:00:20 +0000
Files and hashes: 1: 3AKV0u3WSxtyrBn5vr3IyCaz8CY.roa (hash: eMq4UCU2DpJceG3vsiv0qnCLBJvV82fA2hJ3CQNxIsw=)
2: d8jZS9834PkAzWqMQizbFNl860Y.crl (hash: khwrZPcgnoiPEQQdvl24c+3yKOoUb85/PLSdNPOb3QM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:47:7a:41:c2:12:ed:ba:38:2e:c1:2a:99:25:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Validity
Not Before: Mar 29 14:00:20 2026 GMT
Not After : Mar 30 14:00:20 2026 GMT
Subject: CN=af9b9c6ab36d758ac27b70c53ab0a261ae638fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6c:8c:be:30:f7:b8:4d:a8:1a:75:fd:bd:33:
2a:5b:8b:70:ec:95:7b:5c:50:a3:56:27:11:a0:36:
ff:78:ba:f8:d4:64:13:20:68:0b:23:01:27:43:24:
ce:7a:63:0f:c5:c9:f6:53:8a:87:43:49:0b:b4:8b:
4d:de:0a:75:ba:2a:fc:bd:eb:31:35:8e:be:35:c1:
5f:a6:33:5d:3c:82:6a:b2:d8:06:03:92:74:d4:1e:
32:95:dc:19:a6:b6:45:96:53:9c:a9:c4:7d:06:2a:
55:2b:fb:7d:84:c9:81:5e:51:1a:bd:23:26:47:1c:
66:b3:44:8d:87:a6:16:5a:ae:7e:b3:a0:52:59:eb:
d6:ee:a1:ec:e0:5c:7d:5f:41:97:79:fb:8d:9b:b2:
06:bc:43:6f:2d:27:35:27:a5:41:b0:9a:20:0c:ec:
b9:5c:54:39:ae:54:23:ac:6e:d7:2c:50:cd:17:9f:
35:68:0a:cb:c9:4c:ad:63:0f:9a:da:4a:85:9c:b7:
d9:20:82:e8:73:7b:a6:c7:e6:47:95:12:74:cd:b7:
e7:be:a9:0f:81:d9:34:f6:0b:2b:f4:ea:95:c2:78:
df:c3:e4:75:17:77:ec:75:31:26:d5:33:74:2f:fc:
0e:a2:75:1a:d3:ec:d8:ce:a1:c8:ba:5d:a6:63:76:
6b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9B:9C:6A:B3:6D:75:8A:C2:7B:70:C5:3A:B0:A2:61:AE:63:8F:C0
X509v3 Authority Key Identifier:
keyid:77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b8:53:69:e6:f9:eb:fb:34:4f:c5:f6:e2:77:64:ec:a8:3d:
5d:99:a8:be:bf:62:f4:e5:a2:50:24:e0:5a:9b:da:80:a3:7b:
e2:c5:e3:25:b7:12:bb:45:78:86:88:30:f2:fa:ef:08:be:02:
fc:f7:95:a4:0e:9f:d3:0f:8f:5d:11:d2:93:8b:17:48:30:68:
b8:28:aa:27:7f:1f:6d:0c:2a:73:32:b5:91:78:47:af:e9:57:
9f:f6:84:1d:ce:01:29:3f:d2:d9:46:f0:39:ac:17:a2:e9:5c:
8b:25:0b:88:48:5e:d0:ce:89:38:4d:64:25:5f:1a:fa:d6:41:
5f:cf:6a:0d:c8:1a:0e:51:de:d2:cd:b2:4c:be:9f:d4:18:e3:
66:69:f2:45:ed:9f:4e:2f:e7:8c:c5:3c:27:a4:22:a4:9a:b7:
bd:45:64:27:08:bf:d3:d4:91:2e:13:f7:79:fc:6d:4e:e7:69:
28:0b:60:42:88:40:2a:44:83:e9:5c:a8:94:53:7a:7d:fb:e9:
68:8a:31:8a:5e:ff:87:96:4d:5a:e6:b9:25:23:22:2c:93:f7:
3f:b4:bf:74:c3:fd:20:0f:da:94:04:76:58:8f:a2:f4:9a:e9:
0f:ac:33:f2:9b:8f:49:f0:95:75:d3:d5:c3:54:35:f9:b2:d4:
85:d5:da:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:42 2026 by rpki-client