Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/b81756-3c57-4937-a1fe-445a2c2ab2ca/1/d8ggit5qFhm9IAB1mRSyXGKbDJk.mft
File: d8ggit5qFhm9IAB1mRSyXGKbDJk.mft (raw, json)
Hash identifier: OvRqdzucJGsaflZoAwhNNqBk1FHv931uXstNbqXcdMY=
Subject key identifier: 53:21:B2:6F:00:A8:CB:2E:FC:CB:BA:B1:44:1E:CB:97:45:D6:9D:8C
Authority key identifier: 77:C8:20:8A:DE:6A:16:19:BD:20:00:75:99:14:B2:5C:62:9B:0C:99
Certificate issuer: /CN=77c8208ade6a1619bd2000759914b25c629b0c99
Certificate serial: 019D3308383BF99CFFABD4C73320556B2023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8ggit5qFhm9IAB1mRSyXGKbDJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/b81756-3c57-4937-a1fe-445a2c2ab2ca/1/d8ggit5qFhm9IAB1mRSyXGKbDJk.mft
Manifest number: E0
Signing time: Sat 28 Mar 2026 06:01:09 +0000
Manifest this update: Sat 28 Mar 2026 06:01:09 +0000
Manifest next update: Sun 29 Mar 2026 06:01:09 +0000
Files and hashes: 1: _lGkvkdm9SeHy9gEQ7Iw5DdyD8k.roa (hash: 9GwKeaFt0nYG97+rXWl0xJdoSrCjCcg4111rrC+L+94=)
2: d8ggit5qFhm9IAB1mRSyXGKbDJk.crl (hash: olPTE/CcWAqe1m2wbpxtEhpQcbR9Zg3U2njYobNan5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/b81756-3c57-4937-a1fe-445a2c2ab2ca/1/d8ggit5qFhm9IAB1mRSyXGKbDJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/b81756-3c57-4937-a1fe-445a2c2ab2ca/1/d8ggit5qFhm9IAB1mRSyXGKbDJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8ggit5qFhm9IAB1mRSyXGKbDJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:38:3b:f9:9c:ff:ab:d4:c7:33:20:55:6b:20:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8208ade6a1619bd2000759914b25c629b0c99
Validity
Not Before: Mar 28 06:01:09 2026 GMT
Not After : Mar 29 06:01:09 2026 GMT
Subject: CN=5321b26f00a8cb2efccbbab1441ecb9745d69d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:d4:15:94:a4:d4:6b:d2:c5:8c:b2:4d:ac:
6a:96:88:4c:bd:e7:17:b1:1c:30:ee:9d:16:90:45:
e1:c9:fa:f9:c1:dc:f4:f9:eb:16:1a:e7:f9:c4:b6:
7c:f6:d5:e6:13:fa:30:8a:42:e2:96:ce:30:ff:92:
00:47:19:00:bb:d6:04:9f:7b:61:8f:0c:48:e6:ce:
99:bb:3c:05:df:7c:24:87:03:01:44:94:f9:d9:3b:
fe:cf:f7:08:c5:1f:fa:63:ba:03:a4:f7:33:ef:36:
4f:a2:3b:fa:48:98:8b:5d:ec:1c:17:09:c7:f0:61:
f5:0a:d0:00:4c:5e:31:3f:74:a2:76:ad:bc:24:32:
3e:69:19:4a:60:ae:a1:c9:aa:a4:91:09:61:ce:c0:
ce:86:09:97:69:65:12:d7:c7:63:c6:c0:7b:d1:b5:
1b:0f:92:13:a5:98:85:5f:fc:14:d0:98:74:cc:40:
8d:55:87:87:78:45:e3:27:92:37:76:c7:7f:cf:d7:
23:5e:01:93:9e:a1:ca:55:27:95:1c:73:0b:49:96:
f9:60:09:f7:0b:b3:e3:9c:61:14:b3:0e:6a:78:ec:
55:70:43:50:e3:7e:b5:f0:34:bf:38:13:c3:29:5f:
ec:ca:60:71:fd:33:2f:a8:60:f9:f5:52:ea:02:ab:
07:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:21:B2:6F:00:A8:CB:2E:FC:CB:BA:B1:44:1E:CB:97:45:D6:9D:8C
X509v3 Authority Key Identifier:
keyid:77:C8:20:8A:DE:6A:16:19:BD:20:00:75:99:14:B2:5C:62:9B:0C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8ggit5qFhm9IAB1mRSyXGKbDJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/b81756-3c57-4937-a1fe-445a2c2ab2ca/1/d8ggit5qFhm9IAB1mRSyXGKbDJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/b81756-3c57-4937-a1fe-445a2c2ab2ca/1/d8ggit5qFhm9IAB1mRSyXGKbDJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:d2:62:1c:4b:1d:bb:d6:a1:52:a8:f3:32:df:b4:61:52:0a:
ee:d7:f2:67:92:ae:a8:67:9b:df:cf:fe:0a:e4:6a:6b:6b:06:
38:ce:90:3b:93:4d:27:23:a1:c0:af:41:93:60:3e:b7:e7:17:
55:85:0a:b6:d9:88:a9:bf:90:b9:22:17:09:c1:21:8d:b0:da:
ab:85:fd:ad:fa:28:10:d5:f3:95:c4:61:57:7b:f5:2b:24:f4:
8e:24:ca:1b:43:db:c6:51:11:ab:8a:2a:da:23:96:31:f1:28:
89:b8:a6:95:49:48:31:58:05:15:dc:65:85:da:cb:bc:cd:cd:
7e:f4:56:6a:2f:43:0c:3c:07:33:69:67:b9:48:dd:bd:cc:70:
f8:95:0b:2e:a1:ec:32:62:ff:83:3b:3b:a7:85:76:71:f8:c4:
68:c6:73:18:a4:04:b6:a2:5f:74:2a:89:e5:a0:fc:7c:94:aa:
03:a6:7b:0a:76:07:0c:e0:25:27:4c:ed:2b:17:95:d1:1e:08:
9c:59:a7:05:01:fd:11:2b:67:34:37:9d:21:5e:23:09:e1:c9:
98:f4:a6:cc:a4:e0:c2:5e:d1:35:6c:38:f9:5c:9d:8c:7e:5d:
e7:7c:19:49:a7:76:fb:7d:f8:17:17:76:9a:63:4e:c7:c9:9a:
56:a2:cf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:53:49 2026 by rpki-client