Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
File: d88I7pookZe3EQCl8AsZUB2UwJM.mft (raw, json)
Hash identifier: VC/wDceHPaxK3s52IHSNOZzzdgsvwNV7v3jmla6N1wI=
Subject key identifier: 29:DC:2D:D7:98:FF:5E:09:E0:E8:E3:4A:D5:79:FF:71:4E:87:A1:7F
Authority key identifier: 77:CF:08:EE:9A:28:91:97:B7:11:00:A5:F0:0B:19:50:1D:94:C0:93
Certificate issuer: /CN=77cf08ee9a289197b71100a5f00b19501d94c093
Certificate serial: 019D2696072B1AFD8BB9790FE30F2C0E40B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
Manifest number: 048E
Signing time: Wed 25 Mar 2026 20:00:59 +0000
Manifest this update: Wed 25 Mar 2026 20:00:59 +0000
Manifest next update: Thu 26 Mar 2026 20:00:59 +0000
Files and hashes: 1: d88I7pookZe3EQCl8AsZUB2UwJM.crl (hash: kAAMjrDT7JjR4MmCiV2QwfvFtAo8h+qN9Cqmwn/Qdj4=)
2: r30a_HSpEMxu4ml0DY6HnohMS3c.roa (hash: 5aekVe+t3S9A1hcR3BgA46v7PVY1wUswoYPrIwPg0Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:07:2b:1a:fd:8b:b9:79:0f:e3:0f:2c:0e:40:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77cf08ee9a289197b71100a5f00b19501d94c093
Validity
Not Before: Mar 25 20:00:59 2026 GMT
Not After : Mar 26 20:00:59 2026 GMT
Subject: CN=29dc2dd798ff5e09e0e8e34ad579ff714e87a17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1a:0d:ee:b3:a3:f4:5a:9d:45:50:64:47:9e:
4d:a4:3a:4b:57:31:d7:36:c3:b5:14:45:6a:d7:5c:
e0:a1:e2:31:13:19:5c:96:a4:ff:a6:52:75:3f:c9:
ad:2d:9b:9b:60:c7:60:c1:ea:4b:89:fd:88:ed:69:
10:c2:5d:e8:21:12:e3:66:88:08:5e:6a:ed:9e:5d:
70:e8:2a:99:02:f0:9a:5a:8e:7d:c9:60:b1:6a:c1:
7c:90:51:01:ae:ca:3e:a5:10:e1:96:29:80:11:dc:
28:ad:72:1a:a2:3b:72:75:53:1c:ec:e3:bc:d6:d0:
88:91:5e:5b:44:be:e2:f0:1e:c9:b1:f3:94:85:bb:
4b:90:b3:19:13:2e:5e:b4:8c:1f:d5:22:12:45:c9:
8f:5c:8e:08:2e:5f:1c:d6:b3:8f:cf:bf:c1:eb:c5:
7f:fd:d8:0c:7d:54:f7:d5:a3:d8:08:a9:a9:0a:58:
05:15:25:21:ee:eb:cf:0a:5c:5c:b8:76:e1:a3:7f:
3c:e0:b5:56:9b:32:cd:3f:57:12:57:2f:0c:90:b5:
19:3a:1d:97:33:11:28:93:9c:8d:c6:78:81:48:76:
8d:8b:f9:00:64:52:13:ab:80:63:59:af:c5:ef:8b:
61:f0:32:ec:f7:4b:a0:b8:01:b3:c4:1a:1a:d6:45:
0a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DC:2D:D7:98:FF:5E:09:E0:E8:E3:4A:D5:79:FF:71:4E:87:A1:7F
X509v3 Authority Key Identifier:
keyid:77:CF:08:EE:9A:28:91:97:B7:11:00:A5:F0:0B:19:50:1D:94:C0:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8d:97:95:4d:54:a1:a9:40:9f:1b:bd:85:cb:9b:4e:e5:9f:
36:c1:4d:a6:2e:f5:27:11:5c:b2:7f:a6:87:e9:0e:96:78:3f:
c1:04:39:af:78:90:e0:86:49:b0:de:f1:29:cb:95:87:c8:33:
c2:52:0b:de:cf:dc:72:e6:d8:c8:b9:df:51:55:7d:92:32:ff:
74:d8:f8:a5:b2:d3:53:d9:7f:3f:ff:f7:63:b0:a0:73:ae:13:
97:54:a5:ab:14:b1:f9:43:70:d3:00:44:55:0b:44:73:2e:c0:
9b:e5:84:3f:88:93:b6:0d:fb:36:41:ae:54:ad:4e:cd:74:c0:
78:3f:aa:5b:c7:6e:52:f3:c0:b0:24:c9:a2:9e:5a:a8:7d:84:
82:4e:e1:28:d7:fc:ef:de:7f:64:73:70:38:25:b6:e1:3d:d9:
67:7b:19:f2:8b:3c:9c:a4:c3:bf:9a:e7:90:47:f0:3a:3a:6e:
db:fa:1c:2f:8b:aa:06:5c:96:6b:b7:f5:aa:4d:57:66:14:7c:
e1:f6:a7:f0:9d:41:1e:32:ef:cc:f2:c6:d6:0a:79:9c:cc:7d:
e2:ee:9f:7e:8c:85:57:5d:fb:33:83:ff:af:57:c5:38:da:0c:
ae:65:4f:7a:b7:67:c1:fa:bb:2f:d7:19:c0:81:06:5f:ff:4f:
3f:49:e8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:38 2026 by rpki-client