Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
File: d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft (raw, json)
Hash identifier: Jq2ldUzLjHf/qQjbKvfLfCGBSk60kBc7YzoHACllt1Y=
Subject key identifier: 3B:45:B4:8E:0D:6B:FE:23:A8:1A:4F:AA:41:FE:CB:F0:01:A6:1A:E9
Authority key identifier: 77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
Certificate issuer: /CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Certificate serial: 019D265EEF14227916B03A60A58BC4274E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
Manifest number: 1028
Signing time: Wed 25 Mar 2026 19:00:48 +0000
Manifest this update: Wed 25 Mar 2026 19:00:48 +0000
Manifest next update: Thu 26 Mar 2026 19:00:48 +0000
Files and hashes: 1: d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl (hash: VWmuriIRdTK7lYz+zSQSxx51M0xEqekER7dZVNHm6UA=)
2: utBF4pjjAxN8gnwEZw-ZaW9VBYk.roa (hash: Rb/8giga2DKHr0xu9FiYkuTdiT2IO1AvhtunEnimjeM=)
3: zp6AvUoMe9iCoAq9x5r0S8AYxec.roa (hash: X3bBF0Ic6iTw88nHub1cmld7xWKzFn1W8243XqYcOlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:ef:14:22:79:16:b0:3a:60:a5:8b:c4:27:4e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Validity
Not Before: Mar 25 19:00:48 2026 GMT
Not After : Mar 26 19:00:48 2026 GMT
Subject: CN=3b45b48e0d6bfe23a81a4faa41fecbf001a61ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:3b:16:be:79:19:42:b9:4e:d5:06:2d:cb:
41:b7:43:e9:75:85:0e:0b:08:12:2d:ff:d6:fe:c4:
c3:f7:c1:b4:ad:b7:ea:5a:99:d5:cf:da:da:e5:ef:
7a:77:0c:9d:c9:09:f1:3e:e9:f4:d5:5f:17:c0:67:
07:66:e5:e2:4b:f5:3c:68:3f:5a:74:b1:a3:64:46:
43:d3:39:e6:29:87:6f:62:f4:2f:9c:ac:7a:c3:a2:
fb:cd:26:c0:0f:d3:ae:2b:aa:fe:f2:ff:96:73:1d:
4b:0a:c4:25:21:03:74:2c:4a:e3:f0:70:a9:71:de:
aa:99:3d:7b:38:73:00:a1:21:95:eb:91:28:30:bc:
a9:8c:ec:be:a8:13:78:c6:ba:8d:ea:51:63:cd:34:
ae:37:5c:14:f1:9b:0f:36:dc:af:31:1c:a2:b2:4c:
b2:1e:43:d3:5c:71:e4:63:d9:43:15:6d:fa:a5:59:
66:2c:28:73:c2:0b:81:a3:08:fc:58:19:96:b6:62:
f9:38:65:b2:46:26:80:8c:59:8c:9d:26:94:02:dc:
9b:43:00:68:76:0d:5b:de:d3:f2:7b:33:32:0a:11:
2e:38:88:80:71:4f:98:d2:92:50:4f:c4:f9:92:16:
37:88:72:1d:5d:48:25:73:fd:91:3c:a9:ca:1c:6e:
7d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:45:B4:8E:0D:6B:FE:23:A8:1A:4F:AA:41:FE:CB:F0:01:A6:1A:E9
X509v3 Authority Key Identifier:
keyid:77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:84:a1:72:2e:ac:27:32:be:d3:e7:2d:e9:fb:0f:2b:9b:75:
f1:2f:a9:12:e0:19:12:95:70:98:e9:87:7d:89:92:07:56:67:
71:0b:5c:c0:02:55:42:aa:5b:f8:4d:a4:53:0a:8c:dd:e4:08:
ce:4b:e8:1d:e8:a4:57:a0:3f:d3:92:10:a4:6a:c2:9c:b3:e2:
cc:91:d9:2a:cd:3c:67:77:24:df:52:d3:89:52:cc:cb:4a:44:
c1:52:d5:0f:bc:df:36:5d:8a:80:3d:88:e0:57:f2:34:1d:62:
38:f6:89:5b:e8:be:83:c3:30:8a:e0:12:26:03:fd:71:55:d7:
e3:42:46:e3:47:f1:a3:8e:75:d1:16:66:03:ef:11:e5:57:81:
55:95:5a:55:1e:8f:cd:7d:49:8f:b3:fd:a1:ee:ff:ae:b5:3e:
d7:fd:a1:7e:c2:2d:75:78:01:56:65:6e:51:84:3a:fe:99:fe:
e1:55:5d:0f:f1:73:86:c0:6d:42:e0:7b:53:85:fc:72:6e:17:
6a:50:2d:b2:80:47:e0:3d:19:04:f1:fb:06:c1:16:c3:ec:1c:
20:02:4c:ed:a9:3a:be:92:82:8c:d6:d9:e4:71:09:bd:2d:b4:
79:6f:4c:40:0d:e3:b8:20:17:51:4f:59:f1:b3:46:7e:8f:c9:
49:7e:1b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:06 2026 by rpki-client