
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
File: d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft (raw, json)
Hash identifier: amwEwIyEM8m87A8Acy6sh4K739XdKnk4sOHNr/FEOvM=
Subject key identifier: D9:12:80:EB:67:C2:F9:49:0A:FE:3E:B9:FA:91:E3:50:D5:F6:DB:98
Authority key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
Certificate issuer: /CN=777c49d3f627335190e3c2ec3654e154cfd45398
Certificate serial: 01A0D8049BED22E57CCD77F5A93D21429710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
Manifest number: 1159
Signing time: Fri 25 Sep 2026 10:02:55 +0000
Manifest this update: Fri 25 Sep 2026 10:02:55 +0000
Manifest next update: Sat 26 Sep 2026 10:02:55 +0000
Files and hashes: 1: 1JIM2kMeVJoHRDwhcEraJMNWzzk.roa (hash: 7HnRkqXRdr1xWTIy9iiHnk4cqifwXb86Gt3ZsfiE8YQ=)
2: d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl (hash: p+ZFOcom4aY9tNHsBmdzApPwr7A7gMgdD6DRdOHlQtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:9b:ed:22:e5:7c:cd:77:f5:a9:3d:21:42:97:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=777c49d3f627335190e3c2ec3654e154cfd45398
Validity
Not Before: Sep 25 10:02:55 2026 GMT
Not After : Sep 26 10:02:55 2026 GMT
Subject: CN=d91280eb67c2f9490afe3eb9fa91e350d5f6db98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:75:c9:a6:82:74:46:93:98:52:e7:a9:37:
02:1d:64:94:36:6e:f6:e1:a7:1e:28:19:60:41:d2:
36:a6:3b:7b:5c:c1:23:38:72:23:37:cd:a7:d8:23:
59:db:c9:14:79:af:8a:6c:45:7c:e6:37:bf:c8:6a:
b1:21:25:c8:a4:6f:7a:67:85:c0:f5:29:a1:6c:60:
f4:ca:f9:3c:1b:93:f0:fd:d9:7d:4f:80:79:41:19:
30:9b:2b:cd:6e:d5:ff:3b:bd:f0:c7:d6:10:8b:3e:
af:b1:09:bb:d5:75:3c:f0:83:d9:9f:e6:95:af:31:
4b:2b:71:bb:34:58:ee:35:d0:da:da:cb:1c:4b:7a:
65:e6:99:ad:de:20:61:15:e0:dd:78:06:9c:61:c6:
ec:58:2b:52:db:01:2d:00:c9:c2:8e:7e:b4:21:1e:
50:c8:64:d1:03:b9:9f:a0:1e:e2:ca:7e:3c:4b:95:
65:e5:8a:24:84:a9:1a:f5:dc:a2:7a:e6:42:c2:46:
d3:fa:32:a1:88:28:71:55:88:54:02:cf:c3:94:ea:
a1:cc:7e:ef:34:92:7a:b3:4a:1c:c6:c6:db:ef:6e:
ff:26:5d:b0:2d:cf:56:49:d7:ef:92:e0:03:21:d5:
ca:50:56:81:73:3f:81:ff:87:a3:7d:10:84:ad:1b:
dc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:12:80:EB:67:C2:F9:49:0A:FE:3E:B9:FA:91:E3:50:D5:F6:DB:98
X509v3 Authority Key Identifier:
keyid:77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:03:30:ff:3d:5b:a3:1d:6b:31:9e:f0:1f:e9:2c:7e:df:09:
16:af:71:c8:06:c5:4c:f9:2b:ba:44:eb:26:96:8d:ac:42:f3:
72:dc:b8:4c:fd:35:61:25:e1:42:3e:6b:73:5c:e5:6a:b1:bc:
4b:73:13:5e:e1:66:f9:02:d4:a1:2f:69:a5:49:e5:3f:65:b4:
71:67:7b:2b:c2:58:88:78:a1:f6:f7:49:25:37:88:6c:7c:66:
43:c4:36:b4:54:dc:9d:75:3d:69:56:cb:42:81:46:bb:8b:16:
a0:fc:41:d4:22:dc:c4:8b:56:49:2f:ce:7a:95:80:c3:76:b1:
44:51:0d:83:d8:ee:b4:4f:43:3b:3e:01:6d:eb:48:18:3c:e6:
dd:93:13:11:eb:e2:28:cb:90:25:c8:a8:88:7b:95:f3:31:b9:
98:01:36:75:4c:99:2f:ee:14:ba:d4:59:36:11:8e:d1:c8:a5:
76:34:f3:44:dd:fd:98:c3:a5:a5:b4:47:f8:ca:67:7e:0d:99:
7b:39:e8:b0:6b:2d:b9:d1:fe:55:3b:b7:27:c5:cc:ec:55:a6:
43:a0:55:5e:e6:39:2d:e9:1e:a5:6e:00:42:85:8a:9c:e2:bf:
d5:61:67:70:41:98:08:f8:a7:a4:ae:bb:5a:41:26:f7:a3:42:
ba:c2:f4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:21:31 2026 by rpki-client