Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
File: d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft (raw, json)
Hash identifier: Mk8xjoG8uyc28acJy36FwWAX+iAVN6XNWPs4f+/8C8w=
Subject key identifier: 1D:CF:FE:2B:2D:F5:93:14:69:57:D1:B2:2A:BD:DA:C9:0C:A4:F3:E0
Authority key identifier: 77:C1:55:21:FE:D9:0D:11:4E:76:35:31:0B:30:7F:55:3F:57:D2:6C
Certificate issuer: /CN=77c15521fed90d114e7635310b307f553f57d26c
Certificate serial: 019D28F3285D1839B3E7E4A951A98E07C0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
Manifest number: 1070
Signing time: Thu 26 Mar 2026 07:01:57 +0000
Manifest this update: Thu 26 Mar 2026 07:01:57 +0000
Manifest next update: Fri 27 Mar 2026 07:01:57 +0000
Files and hashes: 1: d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl (hash: Sk5+v5J9fxNgGpBQ1bclpKgxS8/cODS5mj6dwTX6U4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:28:5d:18:39:b3:e7:e4:a9:51:a9:8e:07:c0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c15521fed90d114e7635310b307f553f57d26c
Validity
Not Before: Mar 26 07:01:57 2026 GMT
Not After : Mar 27 07:01:57 2026 GMT
Subject: CN=1dcffe2b2df593146957d1b22abddac90ca4f3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f7:cb:b3:6e:2c:8d:b4:d6:3e:3e:9a:79:6a:
46:8a:08:fa:9d:99:c7:24:4d:d8:7d:9c:6a:f8:9d:
a2:4d:1d:0c:f7:19:d7:b2:ac:d0:06:f3:67:48:65:
40:14:9a:dd:60:45:83:45:02:9c:65:e7:0f:c0:4a:
ce:07:df:18:e2:51:a5:a4:5c:f2:90:9e:9d:77:09:
41:91:3b:a5:a6:bb:39:ed:ec:7e:b2:42:0d:65:f4:
43:1a:89:c9:6a:f7:8f:93:b2:c8:cf:42:88:1f:b4:
52:60:07:9d:e5:6c:99:37:7d:3b:59:a9:07:b2:03:
9c:0c:90:5e:34:31:99:75:b8:3d:c5:a6:de:b2:bb:
6f:28:b6:a6:68:3e:34:70:ed:fb:a7:e7:8c:af:10:
60:2d:90:4c:c4:87:e3:8f:64:5b:61:a0:23:cd:75:
bf:51:0d:b7:02:e1:97:28:62:dc:b4:92:42:7f:cc:
68:ed:55:3d:23:03:44:34:4e:78:a9:1f:04:ee:21:
35:01:54:9a:1b:fe:3e:25:9b:89:dc:72:e1:f3:fe:
ee:59:77:52:84:ac:cc:1e:4d:a7:85:c7:02:c8:f1:
cf:36:84:89:ac:5a:29:d2:de:b5:27:88:8f:82:2e:
e9:bc:31:6e:de:24:71:9f:92:56:54:cc:b5:6c:8e:
9d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CF:FE:2B:2D:F5:93:14:69:57:D1:B2:2A:BD:DA:C9:0C:A4:F3:E0
X509v3 Authority Key Identifier:
keyid:77:C1:55:21:FE:D9:0D:11:4E:76:35:31:0B:30:7F:55:3F:57:D2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fb:7e:fb:3e:a2:ab:0b:ca:f9:d2:89:61:1e:ae:7c:0c:22:
18:ce:50:f7:a3:18:f6:60:c6:5a:d5:07:a3:b5:be:b9:b1:3f:
63:84:f6:a9:cc:fa:09:21:83:13:09:a6:f6:e7:93:a2:d8:93:
f0:c4:e1:cb:6a:fb:49:d3:12:fd:f5:b5:0d:88:10:02:8a:61:
76:00:33:b0:17:de:1c:99:58:3b:97:ab:e7:90:6d:04:13:07:
4e:bc:33:05:27:8b:46:f0:3f:85:52:78:63:a1:7d:90:a9:fc:
f1:82:00:bf:91:91:ad:99:5e:3e:26:3a:06:e4:c6:ef:ad:1e:
b3:77:1c:16:e2:4f:15:cb:74:fc:4e:ac:ae:0f:30:61:6e:d8:
b1:8c:ba:2b:2e:52:7e:31:2c:d0:9c:90:fe:63:ca:3b:7a:ec:
fa:a9:9c:c1:3a:39:fb:45:b0:b5:32:2e:e7:95:0c:00:49:79:
39:22:f8:26:3b:c2:ee:7a:c8:d7:86:87:c1:7f:c7:8f:3c:4d:
93:e0:fa:1c:ca:5e:c3:34:20:18:c5:51:56:a4:3f:39:f8:ec:
3b:cb:2d:04:09:80:36:61:85:37:c8:c8:fb:88:66:e8:a5:77:
a0:6d:6b:36:b0:5e:54:54:cf:40:d0:56:1d:09:4f:98:32:ff:
06:4e:02:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:53 2026 by rpki-client