Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
File: 0b77TZQENocaJKhyLzydZNbIQBA.mft (raw, json)
Hash identifier: 6Qk9Ct2rsjbnMCxHZUKg6lPQNUnXq6F30vLkqwVNTSg=
Subject key identifier: 54:69:B0:17:C5:68:04:9D:D3:6D:27:37:F6:EF:12:8C:8D:D5:2A:C6
Authority key identifier: D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
Certificate issuer: /CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Certificate serial: 019D2A3C4C1D021542785C443DC88687D75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
Manifest number: 026E
Signing time: Thu 26 Mar 2026 13:01:27 +0000
Manifest this update: Thu 26 Mar 2026 13:01:27 +0000
Manifest next update: Fri 27 Mar 2026 13:01:27 +0000
Files and hashes: 1: 0b77TZQENocaJKhyLzydZNbIQBA.crl (hash: KNfH0e/JTUqqmqJ+yYZyoSOW2/XH6O2OWC+1aq/jpT8=)
2: aYA6TDe0FRGUQKWpi6CFPmb8si4.roa (hash: TWdXdIAzV6yUR6IvDamhx0hywiAE1G+KEAkggMUBFHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:4c:1d:02:15:42:78:5c:44:3d:c8:86:87:d7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Validity
Not Before: Mar 26 13:01:27 2026 GMT
Not After : Mar 27 13:01:27 2026 GMT
Subject: CN=5469b017c568049dd36d2737f6ef128c8dd52ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:38:ad:e5:c9:1b:27:ad:1c:7e:98:b9:b6:3f:
34:e4:a5:56:7d:fc:31:d5:2a:cb:f0:54:4d:ba:21:
03:5e:7f:da:3f:90:49:7a:a3:ed:a9:8b:5d:83:c4:
2f:29:90:83:1f:9d:72:77:8e:7f:22:1f:61:31:e1:
1e:1c:60:f8:3f:13:f3:9b:ea:7f:af:4c:4d:ba:8f:
44:7a:b7:5c:a0:b4:3a:47:a2:02:b1:18:e5:86:32:
66:9b:17:02:f7:78:bc:cd:2c:9f:08:4b:57:68:d8:
e6:49:69:d1:2b:68:b9:ce:55:3a:5d:0a:ae:5f:14:
ba:71:0b:1c:1a:be:28:05:c0:96:51:6a:29:19:b0:
b4:d0:0d:1c:27:68:e2:81:4d:10:20:9b:13:79:0a:
60:ce:7e:ac:18:70:df:eb:1a:4d:53:31:c3:b4:74:
4b:77:95:b7:68:92:3e:0a:43:2c:ca:0a:91:ac:d4:
4f:08:d4:92:8d:3d:21:2e:0f:c9:9a:2f:09:3c:39:
5c:aa:6a:87:d5:59:96:be:58:a2:4b:55:d3:aa:f6:
b1:d0:22:9a:cf:c7:7f:00:83:6d:fe:be:44:ec:fa:
ff:26:60:0e:a0:28:30:21:d9:55:6e:07:03:f7:cf:
ba:44:c1:fb:f3:85:fd:19:99:21:be:dc:41:1d:e8:
6a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:69:B0:17:C5:68:04:9D:D3:6D:27:37:F6:EF:12:8C:8D:D5:2A:C6
X509v3 Authority Key Identifier:
keyid:D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:62:9e:ec:37:b1:ae:a8:86:29:9a:5c:16:7d:c2:67:3b:ca:
a3:12:19:2d:3f:b7:64:8d:d9:27:2c:9c:f6:f8:75:2a:6d:dd:
ec:dd:7b:5d:c5:e5:05:c6:90:f5:d9:09:a0:20:d9:d9:c9:59:
db:3a:e8:c6:15:77:f5:d1:aa:0b:99:d8:a1:26:32:df:53:84:
1f:e9:00:9e:f3:4d:bd:41:f3:a3:69:b9:c2:a1:b9:85:23:95:
17:19:31:32:e6:00:12:91:99:17:0a:63:2f:44:2d:8b:e5:ed:
4a:7b:f8:04:12:0d:a8:a2:a6:89:69:d4:83:77:bb:97:75:cb:
3f:5b:0b:11:4a:7f:77:1a:aa:36:05:43:92:e9:0a:7a:04:09:
5a:74:e0:e2:b4:aa:82:3f:85:f2:2b:1a:d8:ba:e5:bc:c0:22:
3f:27:ae:fc:2b:d4:78:49:ba:b8:96:ea:44:d2:cc:fc:63:36:
36:92:a8:fd:5b:53:4a:ed:aa:36:13:4b:11:f2:08:fe:3a:2e:
08:9b:3e:97:6c:52:41:b6:cd:54:28:a3:8c:3b:e2:2b:f1:eb:
af:7f:02:5f:af:91:42:28:72:01:25:b1:99:7a:d8:05:06:ca:
f4:7c:96:c7:26:ed:d7:d1:a1:45:cf:2a:bc:23:de:37:c3:82:
8e:72:f4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:34 2026 by rpki-client