Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
File: d8LYpgGX_HveZPw_rRDrLaT-h3k.mft (raw, json)
Hash identifier: kWESpk52N/RSJXYnXvUfE3pMwIpdJmJvuE/GGS6D1r8=
Subject key identifier: 72:18:1A:D5:1E:19:D1:1F:42:5B:81:91:A3:37:23:28:47:86:6E:7B
Authority key identifier: 77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
Certificate issuer: /CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Certificate serial: 01A0ED0BCDE1FB9D4AC4A4E56275DDA1818F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
Manifest number: 0AD0
Signing time: Tue 29 Sep 2026 12:02:48 +0000
Manifest this update: Tue 29 Sep 2026 12:02:48 +0000
Manifest next update: Wed 30 Sep 2026 12:02:48 +0000
Files and hashes: 1: aJHKOA-DMpMHSd964JXfuSmBfY0.roa (hash: oXACImzHioTx7c3QtWHlpndieWC52eNkX76flIoPyqE=)
2: d8LYpgGX_HveZPw_rRDrLaT-h3k.crl (hash: SBGD8gbiLSNbAnL6twPoufAQ6JVXVjiHZVTjXcCoNns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0b:cd:e1:fb:9d:4a:c4:a4:e5:62:75:dd:a1:81:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Validity
Not Before: Sep 29 12:02:48 2026 GMT
Not After : Sep 30 12:02:48 2026 GMT
Subject: CN=72181ad51e19d11f425b8191a337232847866e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:8f:1c:84:f9:39:c4:b8:47:c2:64:85:61:
66:05:80:58:4e:ab:03:80:0e:98:8e:90:23:f2:e8:
3e:be:4c:07:e5:b2:ef:fd:a4:80:4d:f0:a1:a2:67:
88:44:f8:7e:0f:c7:bc:b7:19:c0:d4:1c:cf:81:2e:
7a:54:30:40:94:3e:58:61:08:87:a5:31:c3:21:b8:
e0:a5:24:37:53:d0:d0:fa:71:51:b1:5c:c2:19:7d:
37:70:57:8a:f9:dc:ed:53:85:fe:cc:6b:2e:37:f5:
f6:93:0c:b3:39:35:ab:12:e9:e9:1b:d4:f7:05:14:
66:c7:68:58:bf:9f:6c:87:71:cf:3c:a2:f1:ca:4d:
3e:1a:68:17:db:bf:df:52:36:b5:c8:f7:d6:38:37:
69:37:93:eb:5d:d0:4b:94:c6:5f:a3:58:ef:cc:63:
0b:d8:2d:a5:b5:9c:81:51:2a:4c:14:79:89:3d:3e:
d2:3e:73:ce:33:2c:f9:96:fd:54:6f:1d:c8:74:21:
10:cf:93:1c:3c:a1:d5:da:ea:5f:e0:df:ff:92:67:
4b:88:01:99:e0:03:38:9a:50:7e:c6:42:71:9d:80:
41:f8:64:23:53:b3:93:77:67:44:d7:2f:38:cc:61:
2a:7e:23:88:cd:4f:ba:61:2b:17:6c:ce:d3:23:9c:
15:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:18:1A:D5:1E:19:D1:1F:42:5B:81:91:A3:37:23:28:47:86:6E:7B
X509v3 Authority Key Identifier:
keyid:77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:32:d0:d7:f6:5f:5d:64:75:c7:ce:5a:be:25:f4:77:a2:fc:
a3:5e:59:df:69:a0:94:2d:c5:55:64:ff:c0:6e:cf:95:86:1f:
83:20:09:1b:88:12:71:7e:06:ec:a0:a6:91:7f:c1:25:92:df:
a3:07:ec:8b:3e:0d:43:e9:71:26:4f:b4:cf:ca:5c:78:12:56:
75:c2:6a:6b:66:94:c4:af:06:7c:0d:58:51:91:11:47:61:e1:
0d:4a:14:a4:f2:b1:1d:23:69:b8:1e:74:bb:f8:80:ee:11:e9:
28:f8:66:cc:f3:f5:27:be:de:de:89:a2:79:46:07:e6:f1:3e:
41:b3:07:66:b2:db:14:12:81:a3:b3:e5:86:37:b2:d8:e2:35:
5f:8e:98:f1:5a:7f:3d:3d:7c:de:89:69:a9:eb:b5:73:22:13:
95:6b:c2:95:1d:eb:50:09:7e:47:20:27:fe:c9:dc:bc:72:d8:
0b:27:fe:80:6a:f4:79:0d:ff:c4:68:da:0d:a4:31:1e:69:01:
57:63:ba:e8:e5:a3:01:55:ae:5e:06:b2:ec:05:3c:2a:59:ba:
8d:ce:4e:8e:2c:6f:f6:12:6d:5a:7a:04:9a:03:24:df:00:5b:
e7:03:c5:56:17:fc:bc:6d:e3:d8:b1:8d:b0:45:9f:fd:d8:78:
be:b3:f1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 18:23:51 2026 by rpki-client