Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
File: d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json)
Hash identifier: SdKfriW2ne5qs0bw2pD2yUwepi0uKeHCiS8VX1R4XEM=
Subject key identifier: 63:A8:D8:B9:13:F1:C1:42:E9:29:8E:A3:6C:88:77:C6:44:38:BA:0C
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 01A0E407580035BBF26B602B74D78A7B5B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
Manifest number: 151A
Signing time: Sun 27 Sep 2026 18:01:21 +0000
Manifest this update: Sun 27 Sep 2026 18:01:21 +0000
Manifest next update: Mon 28 Sep 2026 18:01:21 +0000
Files and hashes: 1: 5qHTg4smmrtrrX5zna14_iX7BYk.roa (hash: bTex3pwZL3UmEGT2D616ZNd//JAc7NnIdwAGgFlj7zw=)
2: FSRjH62OmIOzSD8Cw7TNZhyzeIE.roa (hash: oajsdOrMfY1vgE6M5+Oklmzh+pRKIVrhZXlk/pOgIMc=)
3: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: Qveq0r6/4MQ+7DK1wv0KDPG8/+hpir9GYmGg0rI9ngc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:07:58:00:35:bb:f2:6b:60:2b:74:d7:8a:7b:5b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: Sep 27 18:01:21 2026 GMT
Not After : Sep 28 18:01:21 2026 GMT
Subject: CN=63a8d8b913f1c142e9298ea36c8877c64438ba0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6b:4d:bf:b1:11:25:f7:ae:cd:60:e8:06:90:
9e:8f:18:15:11:0c:36:76:dc:0c:a3:9c:b4:83:db:
a3:95:1d:c9:c4:22:04:c9:c7:61:5c:48:ae:8c:11:
a4:b3:98:9a:13:c3:a5:9f:94:b9:31:87:7b:9f:5f:
80:4b:8b:b0:0d:0c:33:d6:87:7a:ee:f0:c1:bf:da:
b7:56:77:eb:6d:ff:0d:d1:f4:80:c3:ae:fd:ae:57:
af:08:ca:30:c5:77:86:ed:a2:08:a5:d0:37:f4:00:
08:4c:81:47:2e:bc:c8:f7:5d:bc:3f:07:7d:3f:a9:
03:4c:3f:90:aa:34:10:49:75:b1:39:60:46:09:9e:
ce:4e:24:b9:f5:fb:8d:e8:d5:0b:44:d3:42:9c:04:
e5:88:ee:c2:e1:5e:96:6f:ac:61:01:7f:af:2d:f5:
ab:4c:80:f6:a6:4f:bb:1e:1a:90:2b:c6:cb:bf:4a:
f1:6c:cd:3b:04:ca:21:99:5c:05:0c:e2:8c:d1:2d:
7a:f5:05:83:34:c9:f1:7d:4a:57:e8:f5:57:d9:d8:
8d:d5:ee:d4:eb:e8:af:f2:72:90:ab:08:b5:6f:e2:
b1:22:62:ac:6e:8f:f8:85:c5:91:97:d6:72:53:79:
fa:fa:cb:22:76:b8:14:57:e5:4e:70:fd:12:45:93:
fe:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A8:D8:B9:13:F1:C1:42:E9:29:8E:A3:6C:88:77:C6:44:38:BA:0C
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:61:5a:8b:01:85:a6:c1:31:ed:d9:50:68:0f:8a:92:67:ae:
7d:64:8f:e4:a3:2e:95:1d:3f:ce:76:7a:75:53:79:35:56:1c:
fd:76:93:92:a8:6f:f6:ae:c8:5e:97:40:fe:31:06:79:22:e8:
be:0e:d3:8e:2a:7a:f6:e4:70:2d:c6:2f:69:91:da:9f:e5:61:
ca:bb:5c:a1:60:c1:02:80:6a:aa:69:5b:82:3f:36:d7:c9:9a:
5c:38:c8:3e:c7:18:c3:0c:88:85:ea:8e:72:5a:f5:2f:45:67:
06:a8:6c:60:bb:c6:17:52:e2:e2:85:90:4d:83:3e:a3:0e:80:
6e:e0:5d:8b:9a:40:eb:4d:d6:39:7d:92:d1:66:43:6a:fb:e3:
09:9a:09:8a:a4:f7:fa:27:38:7d:ba:e8:f7:14:2e:3a:18:60:
0b:c5:32:17:03:67:52:a7:3d:be:a5:68:fa:f0:88:9b:22:f5:
ce:5a:a0:b1:84:45:38:ce:c6:cb:cc:3f:4e:da:59:ba:9b:90:
5c:42:23:ac:92:89:03:c0:58:5f:9a:30:4b:4c:4b:c0:a7:22:
c4:f8:6b:ad:16:4c:22:64:c8:ff:f6:b4:67:56:9c:c8:ba:15:
d8:55:41:03:25:bc:cb:7a:53:23:b6:4c:68:72:5e:ca:97:ce:
99:b9:ca:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:09:17 2026 by rpki-client