Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
File: 0b77TZQENocaJKhyLzydZNbIQBA.mft (raw, json)
Hash identifier: 4uCkw5JaCWgdvUJyFo1F7NQD/UUDMxCBGGgcghjmZBY=
Subject key identifier: 6E:AF:82:F2:03:E3:05:11:48:59:1D:5C:7E:14:09:F8:28:3C:A3:EB
Authority key identifier: D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
Certificate issuer: /CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Certificate serial: 01A0CCDA0063D35BE74B6AC43827C2A3C64E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
Manifest number: 0451
Signing time: Wed 23 Sep 2026 06:00:33 +0000
Manifest this update: Wed 23 Sep 2026 06:00:33 +0000
Manifest next update: Thu 24 Sep 2026 06:00:33 +0000
Files and hashes: 1: 0b77TZQENocaJKhyLzydZNbIQBA.crl (hash: +4r3lcVvRBHDzclRbOdTyzCYj+ieLnPSbUxrXrumZ6w=)
2: 2thteMXPE7HNuXgDy427RmN012w.asa (hash: AUokTZUmvO7vMDnJLm13XcC0mGvc1EfP2ch4mdqLW1c=)
3: aYA6TDe0FRGUQKWpi6CFPmb8si4.roa (hash: TWdXdIAzV6yUR6IvDamhx0hywiAE1G+KEAkggMUBFHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:da:00:63:d3:5b:e7:4b:6a:c4:38:27:c2:a3:c6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Validity
Not Before: Sep 23 06:00:33 2026 GMT
Not After : Sep 24 06:00:33 2026 GMT
Subject: CN=6eaf82f203e3051148591d5c7e1409f8283ca3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:58:9d:43:dd:8f:62:45:ef:42:46:1b:14:64:
48:7e:50:ee:80:69:29:81:69:68:5f:db:93:33:36:
72:8b:5f:cc:e7:12:a4:41:aa:24:1f:b7:06:97:7e:
41:ee:7d:9a:d2:77:08:ae:e3:82:3d:5a:ee:ad:10:
b1:8c:7f:94:f4:88:89:5f:e8:82:a8:4b:61:5c:33:
32:1b:a3:f8:f6:83:04:f2:94:19:22:80:0b:d8:41:
61:ed:b5:17:7e:9f:13:4f:94:57:a5:c7:f1:ad:04:
7d:c5:2d:c4:f3:39:7d:c0:4e:2c:51:6f:5b:24:2f:
09:3e:87:72:03:3a:2e:aa:6f:63:f7:5e:3a:50:c9:
2d:ee:c2:ab:cc:3f:70:d9:38:c7:c3:37:3b:0d:35:
5d:98:68:29:e0:0a:58:7f:b5:f7:f5:5c:ed:e2:8c:
55:68:52:ca:30:e5:b6:a4:07:52:eb:50:2c:c0:64:
40:fc:51:90:10:97:c7:bf:2f:f5:cf:19:40:39:61:
46:e1:b4:59:8b:d9:5a:b6:c9:b1:2a:c2:a6:28:cc:
ae:28:98:b7:d7:96:39:73:59:11:e4:95:71:e1:0e:
72:0d:b8:1d:0b:51:26:35:da:4a:c7:72:22:e8:b0:
1e:43:fa:aa:11:0c:e0:b1:9c:6c:61:46:ce:b5:b2:
fc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AF:82:F2:03:E3:05:11:48:59:1D:5C:7E:14:09:F8:28:3C:A3:EB
X509v3 Authority Key Identifier:
keyid:D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d5:41:5d:db:14:b4:7e:99:5f:ad:2c:15:a8:3f:63:48:19:
e6:56:1a:e7:75:d5:ac:c8:f8:19:f9:66:07:6e:24:9f:35:bf:
76:3f:ba:43:0c:65:03:a4:98:6a:7f:ad:d3:50:a2:2d:6f:97:
52:2c:b5:44:cd:d9:45:89:b8:5d:e6:59:11:03:f3:5c:54:65:
f7:40:e5:35:45:be:57:e8:6a:33:cd:d1:9d:93:df:15:69:a3:
da:d1:d0:17:74:83:38:dd:dd:b8:a2:e5:a8:82:24:79:2e:14:
d9:5b:23:d8:ea:49:d8:f7:ea:3b:b9:c0:9d:c9:02:57:99:d9:
2d:1e:b8:1a:96:99:6e:c5:5f:35:74:fa:dc:7d:e7:e0:25:3f:
39:68:e8:5f:b1:d7:61:78:3b:68:ee:dd:4c:6f:f6:3b:36:02:
40:2d:31:25:a2:05:8a:f3:99:1e:07:ac:26:36:d5:56:cb:0e:
bf:13:a5:34:93:0f:0a:4b:b2:97:5f:5e:d9:5c:9f:a7:6f:6c:
9f:59:fc:10:dc:1a:b7:0b:6f:3f:dd:dc:df:f5:d4:fc:05:d5:
c5:e2:d4:a7:02:42:67:3a:b4:bc:50:aa:d5:47:2d:af:e6:09:
a7:9c:46:e9:b8:80:96:62:a4:72:b5:62:4c:58:c6:e5:db:4a:
04:c1:17:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:15:03 2026 by rpki-client