Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
File: d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json)
Hash identifier: ytyKpUaEI9D5mXm4ncdiariV617FC2CHvFARzZb6hAE=
Subject key identifier: 77:7C:FB:9A:0F:38:70:B1:C7:FF:22:EF:F4:A0:49:EC:28:52:25:9D
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 019D9818F277C80D9D787EBECE4D3D96A622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
Manifest number: 1365
Signing time: Thu 16 Apr 2026 21:01:04 +0000
Manifest this update: Thu 16 Apr 2026 21:01:04 +0000
Manifest next update: Fri 17 Apr 2026 21:01:04 +0000
Files and hashes: 1: 5qHTg4smmrtrrX5zna14_iX7BYk.roa (hash: bTex3pwZL3UmEGT2D616ZNd//JAc7NnIdwAGgFlj7zw=)
2: FSRjH62OmIOzSD8Cw7TNZhyzeIE.roa (hash: oajsdOrMfY1vgE6M5+Oklmzh+pRKIVrhZXlk/pOgIMc=)
3: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: sJ/sHATSBJ5I/wHSBvFd6en48Dh7IvFOLv9kX3U2fsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:f2:77:c8:0d:9d:78:7e:be:ce:4d:3d:96:a6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: Apr 16 21:01:04 2026 GMT
Not After : Apr 17 21:01:04 2026 GMT
Subject: CN=777cfb9a0f3870b1c7ff22eff4a049ec2852259d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:e1:7a:d8:b5:58:45:6b:5c:b3:df:63:12:
ad:8c:90:45:4f:1b:2a:dd:9b:81:28:93:06:5d:a0:
9e:4b:3d:fa:1f:e0:96:06:74:23:4d:e4:2d:7f:3a:
89:45:dd:f6:9e:65:02:ac:46:f4:9c:0f:bf:e6:70:
e2:fe:78:bb:42:eb:c8:18:b4:8f:44:28:bf:b1:c8:
41:f4:ab:2c:69:69:12:d2:c7:16:85:2c:17:a4:b9:
81:61:84:51:56:9f:7d:18:c4:17:15:3c:80:95:fa:
9c:8d:be:a3:ac:a8:91:2b:5e:00:e8:4a:a3:51:13:
be:e7:32:1a:4e:a2:b6:b8:35:6e:41:8a:e2:1f:90:
92:5c:27:1e:d0:67:4f:5c:7f:50:82:61:01:43:35:
51:8a:50:eb:37:95:c9:1b:be:b6:99:bf:de:df:2f:
34:ba:4e:47:ea:65:82:12:34:9f:81:6a:0d:7f:71:
ae:b3:83:bb:75:5a:09:d1:7d:5f:c4:63:3a:6c:85:
95:f5:70:61:ba:7c:6f:28:4c:16:e6:28:bd:5a:0a:
ce:d3:26:72:02:4b:44:52:0b:39:da:53:f2:7d:e4:
54:bd:8f:70:01:44:64:13:b0:23:e4:41:b6:a1:31:
f8:ec:53:0b:c6:a2:d8:b5:78:38:9a:17:0f:05:63:
fa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7C:FB:9A:0F:38:70:B1:C7:FF:22:EF:F4:A0:49:EC:28:52:25:9D
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:2c:45:bd:73:0b:9b:a3:87:79:55:41:a5:ae:33:60:1c:d2:
a4:1b:9e:08:9d:69:9b:82:27:88:ba:ae:b6:bb:5f:91:f9:60:
1c:11:16:76:85:ab:e0:1b:c4:fd:73:0d:8e:96:a0:4d:aa:27:
d0:e2:aa:c9:f7:aa:91:2c:98:29:4f:30:3c:2b:f7:0d:ff:a7:
c0:ec:f5:e9:60:eb:28:68:32:62:ba:3f:fe:e5:f3:ee:17:04:
eb:cd:cf:40:36:00:21:c1:df:79:0d:41:ff:4a:cf:14:69:5f:
8f:be:4b:cb:1c:31:69:e3:ed:25:bc:32:f2:ef:47:63:69:ce:
70:51:cd:ab:b2:46:21:e4:a2:ed:03:09:4c:bf:41:29:1e:aa:
77:a6:ce:7c:43:93:7c:f3:06:3d:5a:27:7b:30:a4:54:91:60:
41:b7:44:36:69:1f:6a:08:c2:fc:0a:52:f3:5a:01:bb:e4:67:
2d:70:ca:48:9d:c5:d7:28:00:da:dc:d7:05:63:31:64:e4:06:
3a:44:73:4e:63:a7:e0:79:c5:9e:64:b0:92:1d:3f:95:04:1e:
21:a9:5d:d1:2c:05:00:94:fb:9f:4e:10:01:67:39:d7:cf:8b:
a8:90:5f:f9:d0:9c:10:75:9c:74:c2:c0:3e:24:38:af:f9:61:
84:49:80:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:25:39 2026 by rpki-client