Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
File: d8LYpgGX_HveZPw_rRDrLaT-h3k.mft (raw, json)
Hash identifier: 9O1H4UoRd0Xn0tw9rmqTNpSqW0qaNaFBX0YTqnSxalA=
Subject key identifier: C7:BE:C0:01:B4:6F:47:44:7D:D4:FE:82:CC:DD:44:58:A9:F4:DA:FE
Authority key identifier: 77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
Certificate issuer: /CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Certificate serial: 019E1EA2D112C893001DF1FB3C3A680DFB41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
Manifest number: 095C
Signing time: Wed 13 May 2026 00:00:47 +0000
Manifest this update: Wed 13 May 2026 00:00:47 +0000
Manifest next update: Thu 14 May 2026 00:00:47 +0000
Files and hashes: 1: aJHKOA-DMpMHSd964JXfuSmBfY0.roa (hash: oXACImzHioTx7c3QtWHlpndieWC52eNkX76flIoPyqE=)
2: d8LYpgGX_HveZPw_rRDrLaT-h3k.crl (hash: ci+fwSLU0IDZoG37TQ7OTxbOf8mUr/55DGTOAZShrwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:d1:12:c8:93:00:1d:f1:fb:3c:3a:68:0d:fb:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Validity
Not Before: May 13 00:00:47 2026 GMT
Not After : May 14 00:00:47 2026 GMT
Subject: CN=c7bec001b46f47447dd4fe82ccdd4458a9f4dafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:dc:75:6e:51:d3:a4:57:25:9b:82:90:80:
10:18:7e:77:24:4e:d2:83:fe:64:15:26:f5:81:eb:
e5:90:8c:79:82:ec:cf:69:6b:d0:77:c9:a1:0b:5f:
06:fc:c9:7a:a1:bd:b6:4c:2d:49:f5:fc:30:a8:88:
85:85:b6:b0:9d:bb:92:68:80:e4:c8:e1:28:bd:05:
a8:de:eb:1c:9c:d4:e9:24:08:03:44:d9:18:07:ef:
4e:c1:90:b8:5f:c3:d5:48:73:5c:82:f5:48:23:b1:
33:33:db:e8:85:de:58:7e:3b:e9:fd:03:bd:21:07:
cf:fb:93:7a:6b:76:63:02:a9:0e:fd:6d:0c:40:dc:
4b:08:eb:8e:b6:73:f3:26:40:a0:b9:70:f8:20:18:
a2:72:3a:44:3f:47:6b:da:c8:a5:14:40:6e:0c:cb:
79:66:d2:22:61:d2:5b:83:f0:9f:0e:b7:a5:b6:92:
07:ea:25:a5:b0:8c:ac:e2:9a:61:15:ca:e6:33:4b:
21:6e:84:8c:c3:7c:15:eb:b5:ab:a1:99:f9:60:f1:
06:61:36:ee:90:c8:24:ef:06:17:a3:0b:76:2b:51:
9a:45:70:09:5a:82:f0:4d:2b:1b:ed:b7:15:42:a0:
91:85:3a:8d:97:84:ae:72:24:a4:83:b3:9a:69:02:
c4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BE:C0:01:B4:6F:47:44:7D:D4:FE:82:CC:DD:44:58:A9:F4:DA:FE
X509v3 Authority Key Identifier:
keyid:77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c8:3f:3f:d7:5b:83:f8:94:ab:35:f6:6f:a5:4b:9b:07:b4:
b5:51:42:5f:88:ed:a1:6f:16:ff:24:d6:e8:9f:43:b8:41:73:
f1:58:e3:43:58:92:cf:bd:26:ed:f2:bd:8d:c3:9e:7e:55:f8:
40:5d:5e:4d:8e:86:92:ee:6f:aa:09:e6:e3:2a:f8:10:8c:d9:
b8:f3:88:2e:54:bf:cd:3c:9b:7e:6a:65:b0:fc:80:7a:f2:bb:
e2:82:1f:b4:85:9a:9a:cc:37:bf:7d:58:b3:ec:09:20:28:b2:
3c:af:55:73:b1:76:d6:45:3a:3f:a5:33:2c:22:ac:23:3b:2b:
01:ac:63:53:5e:e7:f6:b0:89:8d:5c:62:21:e6:d2:50:d3:0b:
3c:ef:69:5b:67:6f:f3:f1:70:79:f6:c4:1b:6d:4b:36:f3:4b:
1b:12:55:82:1c:cc:a6:02:d7:26:c5:e8:82:10:36:5e:61:ad:
27:62:67:bf:19:19:35:14:76:7d:c2:c6:84:42:0f:85:3a:c6:
ac:63:03:ce:d7:e7:03:c1:31:c1:bc:97:7a:26:10:60:62:f8:
eb:bf:6f:42:34:f6:c5:20:c2:3d:f1:8f:2e:31:ab:1c:65:ea:
7d:b2:a7:cb:4f:ac:c6:7b:ba:c7:41:11:36:12:95:71:e8:5e:
97:15:46:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:41:04 2026 by rpki-client