Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
File: d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json)
Hash identifier: 0PfrgmP8IcrTMQgATyXyI99R1p06YPAon257OMISr6Y=
Subject key identifier: 11:B0:C7:48:62:95:98:AF:AE:A8:82:8D:43:42:08:3C:D2:37:46:23
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 019D31BECCFEF08463CF3C8A4BAF97DFB6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
Manifest number: 1330
Signing time: Sat 28 Mar 2026 00:01:20 +0000
Manifest this update: Sat 28 Mar 2026 00:01:20 +0000
Manifest next update: Sun 29 Mar 2026 00:01:20 +0000
Files and hashes: 1: 5qHTg4smmrtrrX5zna14_iX7BYk.roa (hash: bTex3pwZL3UmEGT2D616ZNd//JAc7NnIdwAGgFlj7zw=)
2: FSRjH62OmIOzSD8Cw7TNZhyzeIE.roa (hash: oajsdOrMfY1vgE6M5+Oklmzh+pRKIVrhZXlk/pOgIMc=)
3: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: e1IpzEwn7dmtpbZ35vwY7ELti/IcyyvyhzohPjL478Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:be:cc:fe:f0:84:63:cf:3c:8a:4b:af:97:df:b6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: Mar 28 00:01:20 2026 GMT
Not After : Mar 29 00:01:20 2026 GMT
Subject: CN=11b0c748629598afaea8828d4342083cd2374623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:85:bb:34:d7:63:b2:0d:d7:85:e7:0d:76:4f:
8e:7a:6e:52:22:e5:d1:ad:86:95:1a:1c:1f:fc:1b:
f0:da:5e:48:40:aa:ff:cc:1c:67:e1:e7:99:dd:7a:
7f:13:de:2a:8a:af:7d:91:51:23:cc:a7:99:9d:48:
09:a0:6c:1b:3c:9a:d3:66:83:92:fe:ed:39:5a:2d:
cc:6e:7b:50:52:44:05:5d:cf:ec:d0:85:9d:fe:53:
c7:2c:c3:4b:b8:a2:3a:2b:76:fc:b4:56:5a:c9:ab:
0b:fd:78:46:8f:18:0d:b6:d6:ef:ac:da:55:c6:df:
f3:30:41:b1:ff:26:6c:f0:f6:a9:40:a7:f5:f5:98:
07:1a:e0:45:40:22:f5:70:f6:2a:c0:b0:9f:31:93:
cc:5a:0d:4f:35:1e:dd:f5:19:59:e2:25:af:e8:b3:
e9:c7:14:ee:ae:f0:83:dd:00:70:f4:ef:41:ea:d5:
b0:bf:b5:72:44:ad:3c:55:f7:a8:a4:b4:e5:e7:2f:
13:25:6d:55:5c:5d:ed:3a:1c:af:60:8d:c7:82:fd:
9e:64:cc:88:f0:1b:a0:65:2d:8d:93:e8:b3:46:29:
47:ff:72:df:ce:3f:9d:ff:cc:2e:ad:b0:03:4d:4a:
5f:6d:78:c1:bb:db:5c:0c:ed:2e:20:9a:f0:16:23:
45:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B0:C7:48:62:95:98:AF:AE:A8:82:8D:43:42:08:3C:D2:37:46:23
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8e:5a:4a:dd:59:83:6a:db:01:e0:d2:60:cc:93:88:65:d6:
06:cb:eb:53:90:55:4a:f9:c1:52:d6:fd:60:a2:4f:f4:55:90:
5d:15:60:94:09:15:1d:2a:ee:7f:ae:a1:97:23:7e:a4:1a:4c:
14:d7:75:2c:b5:99:12:76:2a:0a:56:41:6e:66:46:ea:96:b2:
8f:a6:ae:39:de:8e:61:60:c9:7c:67:bb:16:3f:81:9f:5d:1f:
8e:6e:8a:d2:2c:83:e7:95:5f:df:b3:cb:ca:0b:bd:3f:3d:5f:
7c:46:5d:73:d1:60:2f:e1:c2:0e:07:d3:98:42:8d:2f:f0:60:
ff:d4:88:c0:53:fd:27:a6:81:da:5c:4d:b8:1a:f4:dd:8b:84:
3e:10:db:06:f3:2f:a5:85:12:2a:49:4b:f1:69:ab:68:c8:5b:
56:21:fc:78:c5:de:83:ea:e9:43:d9:9c:52:0e:66:5f:8a:8f:
e7:d1:66:55:14:f7:9a:d7:77:e9:de:85:6b:12:18:48:a6:f7:
00:82:1e:8d:47:d9:a0:e5:6c:e5:da:89:b4:1d:4e:57:b5:55:
4e:f7:4e:6b:fe:4f:67:67:e6:e4:dd:e0:8b:a4:d1:3c:5b:64:
dd:5a:ae:9b:c4:32:82:1c:1d:a4:65:5e:ea:39:92:70:df:82:
bc:62:7b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:18:19 2026 by rpki-client