Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
File: d8LYpgGX_HveZPw_rRDrLaT-h3k.mft (raw, json)
Hash identifier: bANO0SlmHuQ5CyrUrifLyDiYrPxif2UbJaoWjWGZnzk=
Subject key identifier: 42:4D:88:7F:D3:E1:1C:DB:AF:56:A7:5A:17:F5:B9:86:79:D6:0E:C4
Authority key identifier: 77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
Certificate issuer: /CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Certificate serial: 019F916CF3B5DBF5675BA7259DB18F81371D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
Manifest number: 0A1C
Signing time: Fri 24 Jul 2026 00:01:04 +0000
Manifest this update: Fri 24 Jul 2026 00:01:04 +0000
Manifest next update: Sat 25 Jul 2026 00:01:04 +0000
Files and hashes: 1: aJHKOA-DMpMHSd964JXfuSmBfY0.roa (hash: oXACImzHioTx7c3QtWHlpndieWC52eNkX76flIoPyqE=)
2: d8LYpgGX_HveZPw_rRDrLaT-h3k.crl (hash: YCwdWRNUZNDTbDb4PzhS/9PIHDBjapP496qv7/vd5Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:f3:b5:db:f5:67:5b:a7:25:9d:b1:8f:81:37:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Validity
Not Before: Jul 24 00:01:04 2026 GMT
Not After : Jul 25 00:01:04 2026 GMT
Subject: CN=424d887fd3e11cdbaf56a75a17f5b98679d60ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c3:a3:dc:15:f2:a2:ec:a4:b9:3a:ad:4b:05:
dd:c9:74:9a:b0:47:8a:4f:03:13:16:40:a2:62:04:
48:9d:38:ef:29:94:48:e9:ab:2d:3a:50:63:69:cc:
50:ca:92:b2:6e:f3:df:6a:e6:d5:84:0f:02:14:2e:
9c:36:4a:c0:33:3a:57:a6:62:59:c5:81:53:8f:4c:
7e:98:65:04:fb:b1:d8:1b:c4:ef:dd:49:87:35:3d:
17:73:21:ca:0a:0b:46:bd:5b:6f:59:ea:ee:fa:77:
71:45:39:78:92:35:1e:96:b0:c5:59:da:5e:4a:70:
b4:74:18:1c:af:b4:7a:18:e9:ff:8e:72:dc:15:d4:
8f:50:c8:7f:19:a8:45:05:2a:01:8b:5d:bf:bc:30:
e2:14:7d:cf:3c:bd:29:ad:2a:92:be:12:d6:4c:a8:
9b:1f:25:77:00:da:78:75:b0:c9:98:2a:69:ba:84:
f3:13:c7:1d:4b:76:a8:92:ea:ee:7d:b4:36:78:e1:
0c:9b:09:50:23:fa:90:f4:b2:50:ed:78:a1:82:f0:
3c:32:12:90:be:46:4d:af:69:0a:eb:7b:c0:22:b5:
77:04:a9:62:de:81:b4:fd:ea:7d:6f:56:22:20:fb:
82:f8:58:77:5a:41:1b:2d:73:a7:0b:25:a7:43:3b:
ef:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4D:88:7F:D3:E1:1C:DB:AF:56:A7:5A:17:F5:B9:86:79:D6:0E:C4
X509v3 Authority Key Identifier:
keyid:77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:4b:4a:7a:36:04:8c:a5:c4:8a:72:2f:f1:6d:68:6b:ac:3f:
06:6a:ce:2c:96:65:7b:61:dd:f3:b5:56:1c:d1:e3:7d:58:08:
3b:65:5b:b5:ed:ce:df:ab:15:51:83:1a:4b:a9:fa:ab:18:3d:
2a:e9:6d:78:ec:09:c1:19:d4:51:ac:fd:ac:ae:df:ea:f9:76:
16:49:cb:3a:c8:d4:e4:f4:c6:33:3b:f8:e0:88:91:5d:69:80:
fa:09:ce:6b:4a:c7:87:4a:6c:ad:34:33:f2:a3:fc:f1:69:2a:
e0:83:84:bd:dc:2e:00:07:15:9a:92:ce:17:c9:fb:be:98:16:
7c:fd:e1:4b:33:8e:91:3a:7a:89:2f:9e:68:e9:30:f4:dd:3e:
3f:26:cf:46:b8:61:c4:dd:4f:55:de:39:78:8d:e3:aa:3d:59:
0f:1b:43:17:e2:f5:13:52:8c:bb:d1:1e:b9:20:0b:ad:9f:6e:
82:1a:ae:6d:66:d2:94:1b:a0:a0:9f:21:1c:64:5e:0e:a6:b2:
3b:61:c2:d5:7f:f6:59:00:1b:d4:67:67:b7:16:39:e6:fe:74:
d8:e6:7a:0e:43:2f:79:e2:b9:7a:9e:e2:d2:63:ef:f4:c8:4a:
0d:c2:27:a4:22:66:13:62:a9:2a:ef:94:cf:7d:f6:b6:17:f8:
46:8c:18:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:31:44 2026 by rpki-client