Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
File: d8LYpgGX_HveZPw_rRDrLaT-h3k.mft (raw, json)
Hash identifier: SWa6voUF3DL9eeeg5yJeMzkILWbYXm6cK6d0GTj0Qsk=
Subject key identifier: ED:76:DE:E5:A2:A7:09:10:10:91:97:8C:F4:91:A5:0C:24:F1:C0:61
Authority key identifier: 77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
Certificate issuer: /CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Certificate serial: 019D29612F49A659BC1013332FCE2FF78DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
Manifest number: 08DD
Signing time: Thu 26 Mar 2026 09:02:08 +0000
Manifest this update: Thu 26 Mar 2026 09:02:08 +0000
Manifest next update: Fri 27 Mar 2026 09:02:08 +0000
Files and hashes: 1: aJHKOA-DMpMHSd964JXfuSmBfY0.roa (hash: oXACImzHioTx7c3QtWHlpndieWC52eNkX76flIoPyqE=)
2: d8LYpgGX_HveZPw_rRDrLaT-h3k.crl (hash: nG8Y52gfIZ3y0vSVAud3w8z77gg1s1Tz9kf2lJl29Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:2f:49:a6:59:bc:10:13:33:2f:ce:2f:f7:8d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Validity
Not Before: Mar 26 09:02:08 2026 GMT
Not After : Mar 27 09:02:08 2026 GMT
Subject: CN=ed76dee5a2a709101091978cf491a50c24f1c061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ad:48:7e:55:bd:29:f2:31:de:8e:d6:5a:e4:
8e:62:12:e4:2e:7a:7e:3c:4c:96:1c:fb:29:82:63:
cd:7e:c1:2a:81:92:02:4c:05:a3:ce:a6:44:f2:ce:
cb:b1:ae:72:2b:79:50:97:ef:2e:f9:1a:79:06:77:
95:85:1a:65:49:0a:e6:dc:ad:f3:4a:b1:6c:b5:5f:
81:e6:f3:a3:8d:df:84:77:e4:fb:97:77:55:1d:78:
6b:69:6a:90:fa:9c:25:ab:20:9d:87:75:e7:93:e8:
21:90:ef:1d:00:75:1f:7e:50:9a:6b:7c:b2:08:d3:
f9:1f:0c:03:1e:c9:fd:9e:da:a6:35:01:5f:21:e1:
88:45:86:3d:39:c7:57:9c:a3:43:43:cb:69:2c:63:
15:10:de:86:91:f5:d0:63:52:d6:88:07:79:93:cb:
62:d1:51:77:1f:97:f2:9b:4c:a2:32:a9:4e:4c:b3:
b0:2c:04:e5:55:b2:ef:15:2e:10:06:17:b4:53:57:
a4:64:d3:b2:61:c7:ab:9d:85:88:15:af:16:50:86:
36:cd:01:54:29:3d:1b:76:c6:aa:2b:ac:f7:08:8a:
ce:3b:d3:06:07:57:43:ba:d8:34:dc:5e:ca:65:59:
39:21:b7:2b:6f:b8:44:95:33:d9:ae:ae:72:90:95:
ff:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:76:DE:E5:A2:A7:09:10:10:91:97:8C:F4:91:A5:0C:24:F1:C0:61
X509v3 Authority Key Identifier:
keyid:77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:83:38:13:10:c3:b5:27:42:59:c8:94:42:9b:68:e5:27:01:
f1:3a:16:67:ce:e1:2f:7a:b8:d2:b8:dd:42:e3:0f:ad:5c:e7:
5b:e7:a7:ba:a3:08:86:e1:64:f5:a3:c9:33:6b:c3:76:64:9c:
7b:c6:80:cf:d2:e5:9a:34:1c:ff:98:17:cb:69:19:70:73:66:
2b:26:34:f4:4f:c8:f7:1e:35:d7:c7:2b:9a:31:37:08:53:ea:
55:26:6f:12:38:08:26:e9:f2:80:42:88:a5:93:5e:a8:48:19:
25:42:e6:f5:73:30:fb:67:44:3c:b8:50:d3:dd:99:09:2c:58:
b9:97:e4:4a:81:f0:34:ff:97:e4:02:7a:85:6a:12:4c:5d:4d:
11:fa:61:d7:04:52:85:fe:c2:58:13:bf:ed:62:7e:1a:93:c4:
8b:da:b7:f2:63:76:19:7b:e4:ef:88:c4:52:1b:c6:09:9b:5d:
41:0c:27:62:86:51:65:ea:7d:21:00:5c:56:22:6b:02:72:49:
4a:45:9a:ca:5b:9e:90:22:69:f1:a0:7a:2f:69:71:83:c1:3f:
15:09:30:9e:06:d8:7b:97:3d:88:a9:e2:78:34:ab:e5:38:44:
8f:80:96:6a:e9:8d:13:0d:f6:8f:b9:4f:e4:de:ae:99:e6:7c:
d0:2c:0d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:17 2026 by rpki-client