Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
File: d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json)
Hash identifier: R/SBXl+Jx7XfydSidDcVdSNX8Vj3vyoo1qN4qZn/1pU=
Subject key identifier: F2:D8:00:90:18:9B:A5:46:27:C7:1C:8E:4F:D3:2E:FE:B3:82:23:C3
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 01A1DF1580E5A75A66764814A0E9709D2347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
Manifest number: 159C
Signing time: Sun 15 Nov 2026 12:01:30 +0000
Manifest this update: Sun 15 Nov 2026 12:01:30 +0000
Manifest next update: Mon 16 Nov 2026 12:01:30 +0000
Files and hashes: 1: 5qHTg4smmrtrrX5zna14_iX7BYk.roa (hash: bTex3pwZL3UmEGT2D616ZNd//JAc7NnIdwAGgFlj7zw=)
2: FSRjH62OmIOzSD8Cw7TNZhyzeIE.roa (hash: oajsdOrMfY1vgE6M5+Oklmzh+pRKIVrhZXlk/pOgIMc=)
3: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: azMsGvtpQW4XAq0jFg3D4Tn4FLCjLhMqF89fQw6HkB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:80:e5:a7:5a:66:76:48:14:a0:e9:70:9d:23:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: Nov 15 12:01:30 2026 GMT
Not After : Nov 16 12:01:30 2026 GMT
Subject: CN=f2d80090189ba54627c71c8e4fd32efeb38223c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:f0:49:32:5f:6a:3d:12:73:fe:44:5e:82:
f2:f9:f1:1d:5b:d5:e8:11:7a:b3:6d:fa:50:26:1c:
f4:04:0e:98:af:f3:bb:fa:9d:d8:89:a8:b1:cb:32:
43:37:97:7a:4e:f0:1f:2f:75:9e:3a:2e:f8:62:08:
70:96:89:ad:17:ee:61:69:3a:06:da:e1:f9:8a:9a:
21:c2:62:0f:87:c2:1e:9f:ab:2d:cb:ee:00:a9:8d:
51:e4:3f:83:0d:f6:7f:da:c1:d5:48:63:3c:f9:bf:
76:7b:25:e5:ce:99:cf:a7:31:e2:b6:f2:c8:f5:6f:
65:d3:ce:e4:19:80:b0:69:a5:54:f7:97:a7:ed:28:
c4:e8:57:8e:09:78:fb:02:0b:5b:23:f3:9c:2b:de:
50:26:3f:46:68:f0:cb:c7:5f:a1:3a:9d:1b:24:c6:
d7:21:dd:ad:8f:a1:2e:78:af:1c:16:51:79:63:dd:
c8:45:d0:7a:d4:4b:03:24:ac:7f:c5:97:d0:29:ae:
41:df:4e:ab:1a:20:21:33:49:bf:37:75:41:70:88:
be:22:e8:2b:f7:5b:c4:8f:80:31:f7:7f:7c:b8:77:
e0:ef:cb:df:dc:75:4c:9d:5e:f3:54:cb:30:66:f5:
49:f4:ce:13:2d:79:94:26:9d:c9:81:ad:16:fb:ef:
b3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D8:00:90:18:9B:A5:46:27:C7:1C:8E:4F:D3:2E:FE:B3:82:23:C3
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:64:87:74:9a:08:e7:4e:9b:c5:e2:9f:9a:c1:7e:f5:25:af:
e3:99:5e:66:b0:ed:c3:dd:87:e3:9b:8c:12:46:8b:d9:46:2d:
89:63:a9:46:2f:75:95:02:f3:97:28:7b:a3:7e:b6:a9:c9:30:
93:f8:57:e6:a1:9c:5c:e2:2b:9d:ee:e5:62:bf:e7:2b:e6:b2:
05:35:c7:a0:c8:bb:10:dd:88:2e:af:d6:8c:6b:e6:53:27:c9:
7d:dd:d8:1b:33:f8:56:22:19:e9:05:9d:18:f4:08:d3:32:53:
af:5a:ca:9e:23:0f:f1:71:0e:32:32:63:90:80:3f:7a:fe:db:
ab:8c:da:41:e7:d7:7d:48:b7:44:65:2a:4a:92:13:25:fa:81:
97:d7:34:e8:20:08:0f:12:ce:86:26:ee:58:1b:ed:e3:fd:4b:
07:51:7c:d2:03:37:87:d6:5b:e5:35:19:7e:dc:84:1c:72:ec:
cb:cb:dd:38:69:d7:80:55:7d:25:f5:4e:1e:52:4f:4a:d1:79:
e4:18:26:de:ad:b6:79:d3:72:0a:d7:f1:de:2a:96:08:84:6c:
35:f3:74:74:a0:36:8e:6d:5b:cb:0b:78:e5:3a:4f:96:9d:a0:
90:e9:4e:fa:07:bd:a5:3b:29:9f:44:20:d3:02:80:74:03:75:
0b:b9:f7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:23:21 2026 by rpki-client