
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
File: d8jZS9834PkAzWqMQizbFNl860Y.mft (raw, json)
Hash identifier: sJ3c+uoHqhkaU7rxZIV3kQu6fnq0GZfpwpgwHoCqTtg=
Subject key identifier: 9F:D4:2A:F8:ED:F1:FB:79:09:15:D4:FB:12:8C:74:86:DE:2C:7B:3B
Authority key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
Certificate issuer: /CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Certificate serial: 019E1FB5CA61D9F3E0374D983F53B3492B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
Manifest number: 048E
Signing time: Wed 13 May 2026 05:01:07 +0000
Manifest this update: Wed 13 May 2026 05:01:07 +0000
Manifest next update: Thu 14 May 2026 05:01:07 +0000
Files and hashes: 1: 3AKV0u3WSxtyrBn5vr3IyCaz8CY.roa (hash: eMq4UCU2DpJceG3vsiv0qnCLBJvV82fA2hJ3CQNxIsw=)
2: d8jZS9834PkAzWqMQizbFNl860Y.crl (hash: hlApRKdMpKnTkXAaxfC2jEeG2gZsu+lvJnYok80o8+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:ca:61:d9:f3:e0:37:4d:98:3f:53:b3:49:2b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Validity
Not Before: May 13 05:01:07 2026 GMT
Not After : May 14 05:01:07 2026 GMT
Subject: CN=9fd42af8edf1fb790915d4fb128c7486de2c7b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:4c:1c:63:a7:19:7a:5e:4c:4a:8f:d0:ec:
64:26:69:91:ac:48:6e:9e:22:3f:a1:0e:29:9a:8b:
dd:6c:2a:6c:9f:10:fe:dd:d6:ce:6d:17:bb:34:79:
ea:75:7b:6b:5f:54:60:e2:0d:a4:4a:2b:bb:6c:ae:
04:a3:ee:6e:e0:df:95:ea:17:48:c6:90:15:80:ca:
91:86:30:c2:33:54:1d:a6:87:fb:68:7d:45:2f:ab:
93:3f:50:bc:57:13:10:68:12:c0:7b:6a:eb:48:c5:
7e:08:59:53:a4:23:52:03:11:e1:41:e1:17:08:7c:
2d:60:41:f9:ee:5a:ef:0c:79:57:71:bb:f8:f3:43:
16:45:54:92:46:b0:85:4d:81:02:b4:c8:97:45:40:
c1:21:bd:14:8d:61:b1:af:2b:ee:76:2d:15:5a:40:
e6:42:14:c2:d1:b9:2b:a1:11:7e:22:59:f6:16:20:
d5:8c:b8:1e:f9:29:39:83:bd:f7:e1:fb:3f:6e:16:
9b:4b:a3:04:2e:45:c1:b6:2b:42:57:13:71:fc:2f:
1c:97:85:95:b3:6c:8a:9f:24:f2:63:6f:fb:6a:7c:
6d:2c:90:7f:5d:d0:45:b5:8e:0e:e5:f6:c3:ad:25:
ce:75:22:20:15:10:3a:31:ed:69:57:59:ad:25:5d:
71:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D4:2A:F8:ED:F1:FB:79:09:15:D4:FB:12:8C:74:86:DE:2C:7B:3B
X509v3 Authority Key Identifier:
keyid:77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:60:d8:c5:00:31:44:2a:94:66:a7:6c:a4:d5:e8:d1:57:1c:
76:1e:45:80:52:9b:b2:9a:8a:cd:07:08:f5:f5:40:08:ff:aa:
51:27:e0:d5:16:31:02:8f:4e:03:1a:a5:8d:b3:cf:6b:3c:69:
b9:6b:23:71:1b:f2:a7:6b:a8:11:98:8f:0b:81:9f:9e:da:a5:
05:69:d8:98:64:54:9d:41:80:f9:20:f1:29:ff:1f:28:1c:74:
27:92:f3:95:bb:5e:82:c7:0f:9a:3b:9f:a3:46:ae:b3:13:b6:
ac:de:b1:b6:6e:dd:84:20:9c:90:b8:9e:3e:c4:6d:2b:81:ab:
f3:3b:04:73:8a:ef:2a:91:68:f8:40:3e:82:99:1f:6c:34:d6:
e2:2c:5e:f8:f4:98:9b:be:b2:e5:3e:d3:1c:be:37:ff:26:26:
11:95:6a:e6:00:3e:22:e0:35:ee:5d:d7:7d:cf:69:c5:40:12:
18:ee:d5:61:98:1d:63:da:be:fe:96:ce:45:71:15:94:4d:9e:
1d:8f:ad:4d:f0:e7:d3:9b:54:31:c7:5f:5a:06:04:f4:d3:93:
b0:4e:41:dd:47:ee:32:0f:94:b1:32:ec:36:50:ca:96:71:1c:
50:44:34:55:44:63:d7:07:a3:80:cc:bc:9f:6a:ed:e4:59:87:
c3:8d:2f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:31:32 2026 by rpki-client