Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
File: d8pTqKWgOwVcs_NA_L64XXrUh6g.mft (raw, json)
Hash identifier: ycTDyR+jFKB54JoZlUAlU4rj87FKRiXDX3u+Ce3UjjI=
Subject key identifier: BD:B0:A4:0E:A0:E1:40:6B:46:1D:DD:6E:27:C4:4A:C2:89:51:47:FE
Authority key identifier: 77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8
Certificate issuer: /CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
Certificate serial: 01A0CEFF9AA220F426BD4587389E78C12E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
Manifest number: 0E95
Signing time: Wed 23 Sep 2026 16:00:52 +0000
Manifest this update: Wed 23 Sep 2026 16:00:52 +0000
Manifest next update: Thu 24 Sep 2026 16:00:52 +0000
Files and hashes: 1: Kr3YNIOZuTADRy89OqB1M7GiF_A.roa (hash: KV4JFAX9LmQEN4ylvhyFAZOy/rrjX27pdPNOLsJgnUs=)
2: d8pTqKWgOwVcs_NA_L64XXrUh6g.crl (hash: 0/nX4IMqZMp4WI+r7X1lXCa7AH3zZrr8jk404s9Ncvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:9a:a2:20:f4:26:bd:45:87:38:9e:78:c1:2e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
Validity
Not Before: Sep 23 16:00:52 2026 GMT
Not After : Sep 24 16:00:52 2026 GMT
Subject: CN=bdb0a40ea0e1406b461ddd6e27c44ac2895147fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:c3:5d:b7:84:c6:ec:b3:5c:c9:52:d9:1b:
65:d7:be:d4:dd:9d:ad:77:0c:a3:ca:50:c6:84:be:
c0:eb:c3:3a:58:c2:18:68:4f:cc:b2:59:f0:84:71:
85:e1:5f:77:d1:17:3b:21:19:ff:82:f4:be:c5:58:
b0:a4:57:a0:50:2f:0b:ce:ed:8b:b4:b4:e3:4b:7e:
30:f3:35:d3:3a:b9:14:45:fb:77:69:f5:53:bc:c7:
d1:73:1b:c5:eb:f4:80:ac:3e:ac:d3:fe:a0:08:06:
e2:49:16:2b:b4:72:bf:eb:45:0b:7c:72:09:df:74:
4d:c4:63:98:2f:c3:15:19:4c:5a:04:15:7e:d7:dd:
66:71:7e:eb:ae:0f:46:a1:e1:cc:28:ac:d2:a1:fd:
0d:e4:95:7b:d7:45:db:e7:69:61:20:27:f3:5c:1f:
8b:ed:85:88:e7:39:73:77:73:f4:e7:43:42:3a:34:
c7:c1:9a:f4:0b:2a:3f:75:c8:3a:31:f0:5f:fd:b8:
49:1e:e8:9c:2b:3f:93:cc:33:83:e0:9c:f0:18:1a:
1d:ab:54:a3:18:d0:8a:a8:ed:1c:a0:f7:50:ea:84:
60:1b:e4:07:98:bd:94:dd:56:26:64:68:c6:36:9a:
37:8e:84:0b:35:9c:17:cc:67:b0:df:bc:b8:a3:7e:
67:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B0:A4:0E:A0:E1:40:6B:46:1D:DD:6E:27:C4:4A:C2:89:51:47:FE
X509v3 Authority Key Identifier:
keyid:77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c2:90:60:17:a4:cb:eb:88:89:c0:0c:55:be:71:cd:19:10:
39:a1:42:e2:7f:55:b8:13:64:da:47:87:71:88:14:77:8b:ca:
7c:28:7a:dc:0b:82:04:7f:78:84:47:c3:b8:ee:72:01:ef:16:
dc:fa:c1:81:43:20:0b:ca:2a:42:2a:53:d0:ec:cb:aa:61:1a:
fb:1f:a6:52:4a:b1:e8:91:91:82:2b:dc:a8:b3:f7:1b:90:4b:
bd:4b:c5:3e:9f:04:98:86:94:d0:60:10:a9:77:54:c1:a5:d8:
b2:2a:56:32:05:4a:2f:fc:5d:1c:96:68:d3:49:90:1f:78:39:
dc:3c:45:29:2d:11:fb:14:74:0a:40:5e:48:10:59:08:1a:7d:
5c:96:84:97:49:17:bd:a4:2f:f4:2b:71:91:90:fe:81:3d:09:
f2:65:48:59:ce:fd:d2:ab:8e:97:b3:fe:c5:86:6d:53:19:00:
4c:e1:59:30:53:e2:56:71:93:d5:f2:0c:79:37:79:86:1f:85:
2f:9a:ef:81:68:e4:ad:07:45:e8:2a:b4:99:73:ac:d2:8c:0b:
b4:5b:4c:a4:10:b2:69:5a:9e:e5:1d:65:60:55:22:5b:f7:95:
ce:47:69:29:dc:36:13:d8:9b:4e:4c:fa:22:00:2c:0b:77:7f:
d3:1a:bf:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:09:37 2026 by rpki-client