Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
File: d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft (raw, json)
Hash identifier: HlFhXi6VHJHuwWFq+FXe+dRWrgEEJMhGg+aHyyLiLRk=
Subject key identifier: EC:FB:C2:FC:B0:0C:3F:57:56:B8:C2:11:C6:38:49:D3:95:71:5C:57
Authority key identifier: 77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
Certificate issuer: /CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Certificate serial: 019D39AE5000319A580523A28957A567540C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
Manifest number: 1032
Signing time: Sun 29 Mar 2026 13:00:18 +0000
Manifest this update: Sun 29 Mar 2026 13:00:18 +0000
Manifest next update: Mon 30 Mar 2026 13:00:18 +0000
Files and hashes: 1: d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl (hash: l40rJn99uVbNddF2ITnDZEZqxARqwckTv0/BKPbiZRY=)
2: utBF4pjjAxN8gnwEZw-ZaW9VBYk.roa (hash: Rb/8giga2DKHr0xu9FiYkuTdiT2IO1AvhtunEnimjeM=)
3: zp6AvUoMe9iCoAq9x5r0S8AYxec.roa (hash: X3bBF0Ic6iTw88nHub1cmld7xWKzFn1W8243XqYcOlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:50:00:31:9a:58:05:23:a2:89:57:a5:67:54:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Validity
Not Before: Mar 29 13:00:18 2026 GMT
Not After : Mar 30 13:00:18 2026 GMT
Subject: CN=ecfbc2fcb00c3f5756b8c211c63849d395715c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:83:41:ac:1a:c4:e1:45:5d:f0:48:b8:53:
a9:62:11:b6:ae:1d:0b:c6:35:49:22:46:4e:07:a5:
03:8a:97:07:64:27:0c:04:42:73:fa:72:88:d0:fc:
8c:a7:6a:f6:35:e6:c0:17:04:28:7c:0e:6c:62:3e:
e9:d5:02:55:bd:e8:3d:4b:24:5c:79:18:fb:50:e3:
bf:4b:d2:5f:27:86:94:f6:f0:44:ee:46:9d:31:fb:
27:eb:2f:fe:33:30:80:b0:3a:10:74:4d:55:93:e4:
95:d7:98:62:ae:7a:e3:09:38:8a:7c:a0:7b:24:b3:
14:96:7d:95:66:3c:f3:aa:bc:ce:60:77:e9:7d:86:
43:ba:de:bf:7c:d3:10:fd:ab:12:50:7b:a1:3d:bb:
bd:5c:42:fa:9d:73:f5:a6:59:13:1a:53:80:66:7e:
49:3d:f8:84:e9:3b:2b:b9:20:33:5b:78:9c:2a:38:
a2:e8:45:e8:73:17:0a:ae:27:73:35:71:3a:37:0c:
1f:c1:e3:7a:95:28:0e:a0:8c:84:94:3f:60:9b:d2:
c7:56:87:cd:3b:de:48:2a:4e:68:8d:67:97:3c:1f:
94:78:7d:41:91:9a:3d:69:01:1e:93:07:7a:f2:fa:
ac:8d:34:2e:84:51:a6:e2:b4:3e:9a:56:20:e7:04:
16:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FB:C2:FC:B0:0C:3F:57:56:B8:C2:11:C6:38:49:D3:95:71:5C:57
X509v3 Authority Key Identifier:
keyid:77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:86:e8:d8:9d:9f:8d:c4:a0:7f:ca:a0:36:fd:59:7d:a9:72:
7a:21:ed:db:74:d3:91:2c:39:26:90:cc:1a:fe:28:2d:ed:f6:
d7:1c:ef:b7:6e:0b:9b:71:12:1d:08:18:dc:e0:37:c1:b2:1d:
61:d9:bf:52:32:7e:37:bd:9e:99:58:6c:d8:13:bd:7e:cc:3c:
8b:f5:de:1d:10:da:d5:72:fc:44:f7:41:c5:9d:80:4d:76:67:
48:a3:bf:b0:11:af:82:a5:61:c6:9b:e0:b3:f5:75:dc:42:6f:
20:a6:db:6c:6a:2b:54:89:bf:3f:a5:19:60:34:79:b5:28:c7:
8b:75:cd:ad:6d:d4:33:eb:c6:0c:fc:b5:0b:48:e0:86:c4:5b:
08:37:53:a1:2f:b9:99:46:64:5a:dd:21:78:87:f8:c6:f2:ab:
4b:26:23:46:94:90:93:44:26:ab:28:82:cb:00:51:47:56:18:
58:22:1d:f5:5e:62:a3:11:2a:22:13:06:c4:9e:2e:5f:ad:79:
09:c8:65:9d:e7:63:bc:a7:83:1f:3a:26:e1:12:42:25:c0:42:
9d:22:27:9d:36:9b:26:72:1e:21:9f:fe:5f:fb:3e:32:05:40:
b3:d0:59:fe:9c:c1:23:5a:d5:9d:0d:11:3c:24:b5:65:bf:67:
be:97:c3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:27 2026 by rpki-client