Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
File: d8Bx2YnlMJrDyzwLCNOsslIRErY.mft (raw, json)
Hash identifier: k8hskf58XSnx/N+zoOE5CgALvNcd9wQevQwFRdoIMzU=
Subject key identifier: 8B:0D:A7:62:7A:BB:1F:30:7D:CC:77:3A:E3:E1:15:06:06:DF:52:2F
Authority key identifier: 77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
Certificate issuer: /CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Certificate serial: 019D3789643D571B6B333FC68A99743D72FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
Manifest number: 14B6
Signing time: Sun 29 Mar 2026 03:00:44 +0000
Manifest this update: Sun 29 Mar 2026 03:00:44 +0000
Manifest next update: Mon 30 Mar 2026 03:00:44 +0000
Files and hashes: 1: 80Z8m6Z7JZuDHgqlRYLsoylq5hc.roa (hash: inbOmLYfTUWv8xqKpQqk0iSMIhKJkA0PbwgWW07QMo4=)
2: d8Bx2YnlMJrDyzwLCNOsslIRErY.crl (hash: 889mXjj3ZuqALhWFglq7q2Bd2yMm5AtBS+k21z/jWzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:64:3d:57:1b:6b:33:3f:c6:8a:99:74:3d:72:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Validity
Not Before: Mar 29 03:00:44 2026 GMT
Not After : Mar 30 03:00:44 2026 GMT
Subject: CN=8b0da7627abb1f307dcc773ae3e1150606df522f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1c:dc:66:2d:1a:ce:c9:1b:d9:f0:a0:a9:e8:
de:76:76:55:37:67:57:c1:eb:77:bf:3d:ad:ac:62:
4d:86:a5:ca:e0:ec:e8:31:43:b8:18:2f:75:af:a0:
99:70:df:fa:eb:ff:04:97:61:fd:bc:b5:e8:bf:ef:
d4:e1:27:84:5f:ae:5b:06:6f:4b:94:7f:4a:e1:3d:
c7:f0:7e:45:ee:0d:e1:86:51:ec:f4:c0:64:8a:4d:
d2:c9:90:0f:71:1c:af:7d:20:21:b9:92:b0:0c:9f:
1f:eb:0a:ab:83:62:b0:ed:e4:f0:68:68:87:c8:05:
38:42:60:db:c5:7b:b9:2a:82:67:d6:f1:54:47:1a:
f9:dd:c8:0f:30:ba:e6:41:10:8e:ec:51:1d:f2:4a:
a6:a6:a1:06:48:06:ec:ca:6e:82:ea:87:f3:ab:28:
57:f9:3d:bf:c0:d5:9c:0c:af:90:e9:c4:fe:d0:43:
fa:ec:17:24:10:40:d4:85:c8:1d:60:b2:cf:e3:b7:
3f:44:14:46:4d:0c:38:5b:13:67:70:80:54:e8:31:
74:e8:54:7d:e4:7a:a5:b5:a1:ea:9f:e3:e8:35:7d:
35:6c:46:d7:43:a7:05:68:ce:b1:9a:4e:38:e3:76:
f6:c1:d5:78:63:35:2a:78:6c:1f:e8:78:0a:1b:8a:
e7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0D:A7:62:7A:BB:1F:30:7D:CC:77:3A:E3:E1:15:06:06:DF:52:2F
X509v3 Authority Key Identifier:
keyid:77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b9:d3:d2:57:24:36:89:9e:89:b2:5d:b9:7a:71:41:21:50:
39:c9:8c:d2:70:33:45:53:02:f2:79:b8:5d:47:cc:cd:78:2a:
e9:6a:dc:18:e3:e0:3b:78:f3:bf:9b:f8:8b:62:0b:b9:62:5b:
db:83:65:92:97:1a:bb:d2:32:0f:fb:7a:02:71:0c:4a:0c:e8:
29:54:52:dd:00:5e:09:5f:3e:b3:62:d4:68:83:aa:ff:a8:e1:
f3:ea:81:90:68:87:d4:ea:33:ed:a1:5e:75:82:87:23:7d:ea:
b3:4a:ce:6d:d6:80:0a:a8:dc:ca:62:70:c2:69:10:57:9c:a2:
f3:8c:9f:c4:b6:b8:72:a8:49:09:0c:b2:0e:3e:18:b2:33:9b:
6f:dd:f3:60:b8:43:55:c7:10:ca:c0:48:4a:2c:93:85:9b:71:
12:fd:2c:43:3c:09:1f:af:ba:5b:28:d2:46:ad:c5:35:ab:eb:
5e:25:6b:75:82:60:a5:c1:a2:e2:18:7a:f4:83:9d:22:6a:ef:
cc:03:83:68:92:fb:45:43:8e:b3:d6:40:c1:fe:35:5e:c6:5c:
ae:b3:80:77:78:b1:8f:a9:d8:47:4d:58:16:80:aa:d4:49:ce:
1c:9b:3b:7a:f8:d7:4c:e8:ff:c2:f5:6b:1c:48:f3:db:c1:0a:
af:9a:bb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:23 2026 by rpki-client