Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
File: d8pTqKWgOwVcs_NA_L64XXrUh6g.mft (raw, json)
Hash identifier: GWakhVxDV78A1MIoAbXopked3MffX4Hx8NKLmOmM/N0=
Subject key identifier: 9A:0D:F4:84:CE:38:70:7F:40:76:61:EA:05:92:42:C4:6D:DC:84:85
Authority key identifier: 77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8
Certificate issuer: /CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
Certificate serial: 019D265EF444C37B51626D74BA79E361F0F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
Manifest number: 0CB0
Signing time: Wed 25 Mar 2026 19:00:50 +0000
Manifest this update: Wed 25 Mar 2026 19:00:50 +0000
Manifest next update: Thu 26 Mar 2026 19:00:50 +0000
Files and hashes: 1: Kr3YNIOZuTADRy89OqB1M7GiF_A.roa (hash: KV4JFAX9LmQEN4ylvhyFAZOy/rrjX27pdPNOLsJgnUs=)
2: d8pTqKWgOwVcs_NA_L64XXrUh6g.crl (hash: oyXftM/EdcqUT2AZZIHTCS8Mfd8v05Rjg1UE26oCQ9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:f4:44:c3:7b:51:62:6d:74:ba:79:e3:61:f0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
Validity
Not Before: Mar 25 19:00:50 2026 GMT
Not After : Mar 26 19:00:50 2026 GMT
Subject: CN=9a0df484ce38707f407661ea059242c46ddc8485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f0:2f:e1:b2:60:50:c6:2b:94:f8:c3:dd:f0:
a5:04:31:62:06:ab:ba:34:e5:ec:4c:62:fc:de:78:
a5:5b:c9:80:db:73:55:63:74:ed:ed:26:aa:4c:f2:
3c:22:1c:e7:91:df:d6:57:0c:93:99:3e:0f:21:7f:
a9:5c:e4:ef:ac:64:ab:34:84:3f:9e:04:f3:23:5d:
0e:21:af:18:f3:a9:e3:22:9f:d7:07:c4:e2:b2:ee:
b8:4c:40:2c:fe:f5:b8:9c:eb:b5:69:36:f1:30:4a:
06:db:09:7b:5a:4a:e1:c6:15:20:e7:ae:6a:a8:41:
93:9e:99:30:3c:86:f0:ad:d8:e1:54:34:a0:62:a4:
3b:06:f7:69:43:50:a7:7c:ae:10:cd:b9:64:15:9a:
33:b8:11:33:a3:de:88:fb:00:7a:34:15:cb:46:04:
08:b0:2b:07:04:dc:4b:e3:de:cd:c0:2e:1c:75:1f:
d0:ff:b3:ca:9f:0a:55:59:b1:00:88:55:4b:69:1d:
68:f9:89:93:e2:41:36:ab:0d:e6:5a:46:5e:73:fb:
f4:49:59:72:a5:66:87:4c:da:ae:8b:9a:a4:5e:a7:
f4:c4:41:98:c5:45:87:9f:63:30:90:d3:a1:14:60:
fa:36:c0:50:7f:5d:65:ac:f3:4d:96:cb:45:db:23:
80:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0D:F4:84:CE:38:70:7F:40:76:61:EA:05:92:42:C4:6D:DC:84:85
X509v3 Authority Key Identifier:
keyid:77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:20:8b:a0:43:24:2b:87:b7:4e:69:4e:44:61:29:2e:16:10:
1e:56:a1:bd:20:ef:c4:6f:60:1d:bc:9a:76:35:5c:8f:61:53:
99:82:5d:73:51:97:eb:ab:e8:bb:2e:a8:26:d4:47:55:ef:be:
76:5a:21:88:6f:71:63:14:c9:51:de:5b:73:f9:3e:42:3c:51:
6d:c6:7d:e7:16:0b:11:95:0e:10:23:73:a8:15:fc:71:56:87:
0e:fa:49:91:98:6b:92:4b:67:98:14:f5:01:13:c8:c6:c4:de:
50:0f:f9:74:d6:ef:ca:e0:d7:eb:59:ac:76:ef:fb:79:87:19:
0f:6f:c6:f7:3a:94:0a:09:fd:a5:d5:70:12:34:6f:bf:71:09:
fb:ec:9e:85:7e:03:60:6e:c9:d7:9c:4a:35:f3:2c:5a:c4:a8:
1f:b3:ca:67:45:1e:78:51:73:73:c9:ba:1f:22:64:f3:a3:34:
d1:04:cb:fb:3b:c9:b6:8b:88:54:9d:48:ea:a8:61:e8:2a:2f:
ca:48:f1:9f:4e:86:c4:3f:89:bd:c4:60:98:59:60:76:0e:c0:
f3:f5:48:c9:e1:8f:76:2f:a3:62:03:cc:c1:45:2c:5c:28:e7:
fd:2e:96:c7:f3:b6:97:34:fc:37:39:8f:68:aa:25:98:dc:14:
45:1b:a0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:54 2026 by rpki-client