Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
File: 77RcySOXjBokve6WzHs683OG0qg.mft (raw, json)
Hash identifier: ihxZ0mMHR9//4I0jYghG0Dvog8ZFLr3yA1IBd0eeU4c=
Subject key identifier: A7:11:AB:B5:AF:41:41:80:A0:17:38:51:B5:1A:3E:63:0A:B5:D9:85
Authority key identifier: EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
Certificate issuer: /CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Certificate serial: 019D32630DF7A4418184E7D0F86EA72E6A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
Manifest number: 102E
Signing time: Sat 28 Mar 2026 03:00:45 +0000
Manifest this update: Sat 28 Mar 2026 03:00:45 +0000
Manifest next update: Sun 29 Mar 2026 03:00:45 +0000
Files and hashes: 1: 77RcySOXjBokve6WzHs683OG0qg.crl (hash: 3BSjEtawupbgTKX4kPgDfz6JKDDpO+AqP8bkz9ZMhoI=)
2: u_-bKVkvV1_IEBiW7GWJfYQG3Kw.roa (hash: Cp1BYoJHxmwK4gyFN+04N6JzdugvrevYPjr0cqKdM10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:0d:f7:a4:41:81:84:e7:d0:f8:6e:a7:2e:6a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Validity
Not Before: Mar 28 03:00:45 2026 GMT
Not After : Mar 29 03:00:45 2026 GMT
Subject: CN=a711abb5af414180a0173851b51a3e630ab5d985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:23:d0:5a:d6:31:b4:22:38:8b:85:4f:ca:f7:
a0:32:8e:7d:56:78:2a:63:a0:6e:c0:8e:c9:4a:21:
5b:da:08:20:db:b0:d3:e9:00:de:11:a1:b0:5e:7b:
a0:ef:94:b6:70:23:5d:7d:90:6d:bb:46:f0:3b:bd:
36:41:ee:86:f0:7c:2d:29:f5:f9:4c:47:97:e2:2b:
d7:fd:09:94:5f:39:0f:1f:28:2e:35:ff:c6:17:b3:
ab:e9:61:be:10:d8:66:76:7e:35:a8:c7:d5:e5:56:
1e:88:1a:d6:aa:33:b9:60:68:26:09:84:50:7b:d8:
04:6c:dc:47:76:d5:b5:2a:04:3e:fe:16:9c:25:3f:
82:87:15:dd:6b:e3:14:3e:55:62:b4:c0:9f:17:44:
63:da:3f:e9:39:0f:2b:d1:dd:fd:c3:23:e1:b1:b9:
f0:74:03:2a:f9:99:e1:98:6c:bc:4e:7b:ff:61:0f:
04:6d:9e:ea:d2:a9:d8:f5:4f:fe:80:e5:75:f4:b3:
7d:17:da:bf:b8:9c:1c:a1:1f:b0:7b:51:87:96:a3:
65:7e:2b:d4:61:c7:53:0b:b3:4d:15:05:e9:c5:34:
d6:14:2f:1c:d5:74:16:04:27:a8:07:2b:59:ca:c5:
d2:f5:57:cd:b2:c3:e7:c8:22:30:c4:e2:b4:5c:d3:
6e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:11:AB:B5:AF:41:41:80:A0:17:38:51:B5:1A:3E:63:0A:B5:D9:85
X509v3 Authority Key Identifier:
keyid:EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:64:10:94:70:df:66:41:51:08:7b:7f:ec:27:b8:40:6e:a9:
9b:76:d7:93:f0:50:31:25:13:be:c5:f4:e3:e7:2a:19:dd:f4:
82:c9:12:1a:9a:34:6c:6d:4e:f4:e8:83:4a:b1:63:18:49:f8:
05:3b:5e:f1:b1:00:56:e6:6f:98:db:68:b7:cf:29:26:07:f0:
0f:98:44:fe:60:a7:a8:56:88:0e:72:bb:c6:f3:c6:da:2e:ec:
d2:39:5a:6f:53:06:fc:5c:29:20:12:ec:03:d3:97:f6:53:a0:
46:56:ec:17:09:8c:7e:ad:1c:6e:21:a1:03:92:46:74:a0:dc:
e9:4d:c7:5e:39:ec:be:e7:60:b8:2d:72:cc:23:a8:b6:a2:aa:
00:62:41:b0:b0:22:89:96:2b:b1:4f:87:41:85:97:88:bd:d7:
92:93:33:15:11:33:df:70:dd:18:bb:91:c0:d1:85:79:bf:86:
14:4f:a8:68:93:2f:9e:98:38:7c:70:53:4f:54:3d:c2:1c:a0:
9c:bf:8d:39:12:3f:c3:ef:ed:cc:68:26:58:dc:ac:39:4d:18:
d6:39:43:73:fb:ab:45:81:1e:84:c6:6a:10:80:eb:b1:47:19:
55:b1:be:fc:d1:50:56:38:94:78:04:8b:91:3f:0b:a3:6a:67:
f1:46:d5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:23:15 2026 by rpki-client