Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
File: d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json)
Hash identifier: mJ0cYeQQQnqGKcjcesrCWI3PmvI9tfbOB2XhJ763u5M=
Subject key identifier: 17:01:98:D6:34:9F:00:DA:11:43:7F:56:99:F2:F1:B4:17:E6:06:15
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 019CAA8F824AD6FF7C168004071AE4B77164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
Manifest number: 12EA
Signing time: Sun 01 Mar 2026 18:00:57 +0000
Manifest this update: Sun 01 Mar 2026 18:00:57 +0000
Manifest next update: Mon 02 Mar 2026 18:00:57 +0000
Files and hashes: 1: 5qHTg4smmrtrrX5zna14_iX7BYk.roa (hash: bTex3pwZL3UmEGT2D616ZNd//JAc7NnIdwAGgFlj7zw=)
2: FSRjH62OmIOzSD8Cw7TNZhyzeIE.roa (hash: oajsdOrMfY1vgE6M5+Oklmzh+pRKIVrhZXlk/pOgIMc=)
3: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: bWvY2Rvh1rQXG3j1YER3F+p0OxYSBazhs8DVnckCvP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:82:4a:d6:ff:7c:16:80:04:07:1a:e4:b7:71:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: Mar 1 18:00:57 2026 GMT
Not After : Mar 2 18:00:57 2026 GMT
Subject: CN=170198d6349f00da11437f5699f2f1b417e60615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:6e:eb:ff:dd:76:96:31:34:45:39:27:de:
41:89:16:11:43:c3:8c:da:de:27:bc:a7:3d:ff:55:
9e:b0:99:ff:49:c2:b6:fb:ee:1c:bd:2b:c5:e5:25:
2c:89:96:8e:f2:a3:76:52:7c:bb:5a:fa:22:18:e2:
ed:b9:ae:32:14:af:73:0d:11:fe:64:5b:d7:ba:e9:
50:32:73:7a:3c:d7:08:2c:d1:a9:0d:64:15:16:de:
49:83:eb:f2:86:f7:8f:7d:2a:5b:08:94:e3:1f:87:
38:7e:01:ae:7e:5e:e9:cc:d8:f9:83:e1:09:0e:d0:
67:e5:85:53:f1:c3:d5:04:5e:75:0f:d7:ac:bd:03:
ae:ef:7e:0b:e3:66:b8:2e:31:2d:38:3a:44:83:5d:
fa:cc:94:ba:f7:e7:d0:19:c5:a8:93:e6:e7:e4:65:
f5:37:d1:89:5a:1e:d6:ea:bf:6d:f8:ba:a0:57:12:
80:a9:8e:28:fb:b6:d8:8b:88:ab:77:41:4f:e5:13:
d9:a3:65:29:d9:bf:d2:cb:3f:66:52:a2:cb:bb:cf:
f4:d1:2e:09:79:95:76:52:08:53:71:4b:ad:91:62:
99:66:e1:57:07:97:00:e4:75:67:ac:ab:86:76:1e:
fa:ba:ab:a4:69:47:d3:12:c0:31:21:ce:f3:57:f1:
08:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:01:98:D6:34:9F:00:DA:11:43:7F:56:99:F2:F1:B4:17:E6:06:15
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:21:0f:5e:dd:e1:1a:49:18:c2:74:f2:13:b5:93:34:21:62:
a7:38:c6:8e:2f:ad:d6:11:74:17:80:af:96:49:a9:17:ea:0b:
43:92:56:ba:57:a9:34:8a:83:9d:1f:4a:8d:9d:59:29:29:79:
84:3d:c8:9e:c5:45:4b:69:8a:0a:99:19:5b:85:86:3b:4d:73:
67:12:77:89:0c:d4:ce:0b:40:dc:fa:99:83:ec:94:4f:2d:5c:
3f:b1:4c:b0:af:0b:7b:50:5c:a6:6f:80:62:3d:f0:e5:b1:7d:
3d:3e:3f:6a:b0:12:96:b8:b1:1d:f5:3d:b1:05:51:3b:be:68:
38:c8:8d:81:85:88:75:76:d6:77:f6:7e:6d:83:13:7a:16:b4:
32:36:84:93:c4:73:b9:46:0f:c1:f7:de:e4:03:c9:85:a7:2c:
5d:d1:35:ef:5d:37:ee:c8:66:c8:0e:6e:ca:dc:48:de:5e:5b:
5e:22:0a:27:e1:e2:ba:c7:59:74:88:af:bb:45:01:0b:08:44:
42:63:c5:be:d9:ff:64:07:23:54:89:6f:49:d6:38:81:d8:4d:
da:7a:9a:20:61:a5:7a:c5:1c:b3:e5:dd:25:dd:af:e1:51:64:
d4:da:0f:43:34:b6:55:4d:5e:d5:63:54:8e:11:3f:f4:09:b5:
21:34:fd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:00 2026 by rpki-client