Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
File: 0b77TZQENocaJKhyLzydZNbIQBA.mft (raw, json)
Hash identifier: Pn0M2ZPuBymTCqDJPdzBdRJt5vjdB9tDBVdiOB1eKIY=
Subject key identifier: 94:85:2D:91:0C:6C:F6:C8:B9:E4:87:F0:3A:F5:45:FD:BC:E5:67:0A
Authority key identifier: D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
Certificate issuer: /CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Certificate serial: 019F8E34680F0518639638F6AE45A848F7DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
Manifest number: 03AC
Signing time: Thu 23 Jul 2026 09:00:26 +0000
Manifest this update: Thu 23 Jul 2026 09:00:26 +0000
Manifest next update: Fri 24 Jul 2026 09:00:26 +0000
Files and hashes: 1: 0b77TZQENocaJKhyLzydZNbIQBA.crl (hash: 0kQvLMVjODeamV+d1NWcFnRnFu9suWv9kMe/QeAdT+g=)
2: 2thteMXPE7HNuXgDy427RmN012w.asa (hash: AUokTZUmvO7vMDnJLm13XcC0mGvc1EfP2ch4mdqLW1c=)
3: aYA6TDe0FRGUQKWpi6CFPmb8si4.roa (hash: TWdXdIAzV6yUR6IvDamhx0hywiAE1G+KEAkggMUBFHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:68:0f:05:18:63:96:38:f6:ae:45:a8:48:f7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Validity
Not Before: Jul 23 09:00:26 2026 GMT
Not After : Jul 24 09:00:26 2026 GMT
Subject: CN=94852d910c6cf6c8b9e487f03af545fdbce5670a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:91:b1:60:0d:39:2f:c0:7d:9c:ea:19:35:
b9:63:6d:3c:f2:82:63:59:c3:f5:fe:40:b1:ec:f7:
ae:63:8d:72:e4:fb:06:d2:42:ba:ba:98:3c:d5:e8:
ae:b2:58:30:d7:b0:80:65:4f:62:11:25:67:25:2d:
9a:09:63:36:29:9c:ae:b0:3f:85:01:c7:0d:67:f4:
bc:54:79:27:66:86:ee:d5:db:bd:7d:8e:1f:4b:35:
ba:c9:5d:12:70:66:52:b5:23:c9:2b:0a:cf:4f:48:
f6:08:21:fe:b6:58:0b:51:48:25:8b:1f:da:1a:17:
c0:a0:20:03:39:6b:11:17:13:02:19:93:00:a6:11:
7e:0b:d6:e9:d4:c2:77:67:11:1d:ab:e1:07:76:3f:
88:ec:b7:2a:30:ce:d7:ee:e2:ee:d0:98:52:be:5f:
d8:16:7e:88:42:df:ef:49:ee:84:2a:96:7f:f2:47:
55:14:52:2d:c4:5a:bc:9b:32:3d:2e:df:c1:e6:c3:
90:5f:5d:09:1a:bf:fb:31:e8:0c:0f:e6:ca:ec:46:
f1:db:e7:8f:cc:f8:e5:5a:fc:37:61:5c:76:d1:67:
37:ce:8f:56:40:63:85:46:cb:45:20:7a:ba:ae:52:
d2:df:b3:30:3c:15:68:4f:32:f5:af:34:a6:75:a6:
69:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:85:2D:91:0C:6C:F6:C8:B9:E4:87:F0:3A:F5:45:FD:BC:E5:67:0A
X509v3 Authority Key Identifier:
keyid:D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:fb:57:f4:e7:a5:90:ba:3b:8c:de:df:62:c0:f5:da:df:ea:
1d:06:72:16:85:fe:6f:4d:73:da:5f:a7:89:b6:29:50:b6:1b:
42:d6:d9:ee:c8:cd:61:79:37:f6:de:04:fd:81:6b:97:14:0c:
44:d0:53:db:43:f5:ad:a6:cc:8d:af:ca:0b:c6:46:cc:fb:8f:
a9:d1:7e:af:ff:65:c3:a0:9c:80:34:8e:62:06:a5:9b:4e:59:
06:cf:a5:41:3b:8e:f5:f4:49:e6:1d:1a:1e:31:aa:d3:e3:a5:
f8:e7:b3:b3:8d:6f:6f:74:2c:7a:2f:4d:77:7d:46:c0:35:38:
7a:2a:71:5d:3b:c1:4a:e5:80:8d:14:ac:5b:83:50:1b:ec:7d:
a0:db:e1:cf:2d:01:da:6f:c9:de:49:b8:50:35:2d:db:e8:a5:
bd:25:89:7b:68:4f:09:d0:dd:cc:8c:8c:fd:df:cd:d4:82:17:
9e:ad:d3:bc:93:2d:d6:46:cc:93:1e:a7:05:e3:8c:95:af:d5:
11:e2:99:94:d7:59:70:d5:5d:44:51:cd:a6:13:77:a6:6a:fd:
35:fe:cd:ef:5e:0b:95:66:72:0f:62:0b:3c:06:15:e4:03:4a:
af:d8:68:3c:e5:3d:ac:f4:59:3b:01:fe:6e:cd:eb:1b:b3:8c:
f7:ee:d9:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ONGgPBRhjljj2rkWoSPffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYmVmYjRkOTQwNDM2ODcxYTI0YTg3MjJmM2M5ZDY0ZDZj
ODQwMTAwHhcNMjYwNzIzMDkwMDI2WhcNMjYwNzI0MDkwMDI2WjAzMTEwLwYDVQQD
Eyg5NDg1MmQ5MTBjNmNmNmM4YjllNDg3ZjAzYWY1NDVmZGJjZTU2NzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0GRsWANOS/AfZzqGTW5Y2088oJj
WcP1/kCx7PeuY41y5PsG0kK6upg81eiuslgw17CAZU9iESVnJS2aCWM2KZyusD+F
AccNZ/S8VHknZobu1du9fY4fSzW6yV0ScGZStSPJKwrPT0j2CCH+tlgLUUglix/a
GhfAoCADOWsRFxMCGZMAphF+C9bp1MJ3ZxEdq+EHdj+I7LcqMM7X7uLu0JhSvl/Y
Fn6IQt/vSe6EKpZ/8kdVFFItxFq8mzI9Lt/B5sOQX10JGr/7MegMD+bK7Ebx2+eP
zPjlWvw3YVx20Wc3zo9WQGOFRstFIHq6rlLS37MwPBVoTzL1rzSmdaZpgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSFLZEMbPbIueSH8Dr1Rf285WcKMB8GA1UdIwQY
MBaAFNG++02UBDaHGiSoci88nWTWyEAQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGI3N1RaUUVOb2NhSktoeUx6eWRaTmJJUUJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83ZGMyZWItNGUyNy00ODNhLWIzNTEt
MGQ1ZDk1MTAxMmU3LzEvMGI3N1RaUUVOb2NhSktoeUx6eWRaTmJJUUJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi83ZGMyZWItNGUyNy00ODNhLWIzNTEtMGQ1ZDk1MTAxMmU3
LzEvMGI3N1RaUUVOb2NhSktoeUx6eWRaTmJJUUJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPtX9Oel
kLo7jN7fYsD12t/qHQZyFoX+b01z2l+nibYpULYbQtbZ7sjNYXk39t4E/YFrlxQM
RNBT20P1rabMja/KC8ZGzPuPqdF+r/9lw6CcgDSOYgalm05ZBs+lQTuO9fRJ5h0a
HjGq0+Ol+Oezs41vb3Qsei9Nd31GwDU4eipxXTvBSuWAjRSsW4NQG+x9oNvhzy0B
2m/J3km4UDUt2+ilvSWJe2hPCdDdzIyM/d/N1IIXnq3TvJMt1kbMkx6nBeOMla/V
EeKZlNdZcNVdRFHNphN3pmr9Nf7N714LlWZyD2ILPAYV5ANKr9hoPOU9rPRZOwH+
bs3rG7OM9+7Z1A==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:45 2026 by rpki-client