Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
File: d8LYpgGX_HveZPw_rRDrLaT-h3k.mft (raw, json)
Hash identifier: P8QW6rF6svTIVZZQNwMDqCScqTjTF7wn4DpXUoKIl0Q=
Subject key identifier: 36:19:9E:DB:37:DA:9F:91:BB:A7:9A:AA:CF:89:FC:2A:A1:9F:02:77
Authority key identifier: 77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
Certificate issuer: /CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Certificate serial: 019FAA87FC26B307CB0A75E9525DDBE2E55A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
Manifest number: 0A29
Signing time: Tue 28 Jul 2026 21:01:06 +0000
Manifest this update: Tue 28 Jul 2026 21:01:06 +0000
Manifest next update: Wed 29 Jul 2026 21:01:06 +0000
Files and hashes: 1: aJHKOA-DMpMHSd964JXfuSmBfY0.roa (hash: oXACImzHioTx7c3QtWHlpndieWC52eNkX76flIoPyqE=)
2: d8LYpgGX_HveZPw_rRDrLaT-h3k.crl (hash: Aya1frZnzxbySIPyDtZWnyNGmQ29LJHwvTe3zSG0DFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:fc:26:b3:07:cb:0a:75:e9:52:5d:db:e2:e5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Validity
Not Before: Jul 28 21:01:06 2026 GMT
Not After : Jul 29 21:01:06 2026 GMT
Subject: CN=36199edb37da9f91bba79aaacf89fc2aa19f0277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:58:1f:95:a5:15:9d:1b:da:fd:19:ab:78:63:
7b:36:3b:1e:89:7e:24:5f:e3:8c:c1:cc:78:2f:42:
0d:1e:a4:9f:d5:bf:ac:5c:ed:aa:40:21:64:29:54:
d0:1d:ff:99:75:5b:5b:f7:1b:59:c6:0b:dd:9b:aa:
b2:38:98:c3:57:1e:6b:55:c2:72:1d:50:22:db:b5:
48:a3:9c:d9:65:6e:a1:1d:8f:21:b3:20:72:74:90:
e3:87:44:f4:b8:e7:23:23:5b:73:1e:d5:bc:0d:05:
81:6e:5a:0d:35:a5:0b:40:75:c7:60:65:bb:da:ec:
a7:22:ee:71:de:5e:41:84:49:60:0e:d5:06:01:8a:
bd:bc:c1:e1:6b:75:49:42:59:22:47:43:64:b6:aa:
98:9e:7f:de:1b:d5:85:72:ab:c5:81:89:01:67:07:
63:7e:79:ec:47:7c:0e:3f:6e:d2:7c:8c:8b:76:e0:
ea:83:79:47:d2:c9:f7:b9:75:19:79:ea:a5:9f:0a:
46:90:35:6b:48:85:df:f2:f8:28:a8:75:28:f7:e4:
49:67:1c:ca:f7:73:23:77:27:24:a0:ba:a7:4c:fd:
4d:a6:b8:9a:b1:1e:20:ef:00:d0:5f:af:b0:6c:85:
c5:79:17:17:2c:f4:cd:da:57:50:cb:1d:c7:f2:e7:
f4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:19:9E:DB:37:DA:9F:91:BB:A7:9A:AA:CF:89:FC:2A:A1:9F:02:77
X509v3 Authority Key Identifier:
keyid:77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:bd:f7:0c:68:27:9b:9a:0a:0e:2a:28:e2:3e:86:58:3a:e0:
f9:e7:85:2f:4a:a3:6f:8b:0d:f8:18:f4:ff:52:ab:32:8d:80:
70:34:f8:94:8e:62:3e:b8:30:e9:ea:45:a9:fb:e0:86:5d:01:
a0:38:90:25:91:a5:fc:2d:a3:d6:b0:2a:3f:ce:99:05:8a:c8:
57:f9:d1:60:61:a2:16:52:10:aa:35:75:1e:f9:ad:a3:33:57:
29:2e:02:d8:a9:79:ba:45:90:58:91:d1:50:21:49:63:cb:03:
f2:1a:ee:e2:84:47:7d:c0:0c:12:ba:f4:fe:c8:3d:c0:bf:17:
cb:25:4f:8c:84:a5:6b:4c:f4:57:a9:4e:95:c1:61:87:47:c7:
7b:0e:de:11:fe:18:33:cb:90:d7:dc:5a:6e:b6:29:3b:74:82:
66:0c:1c:87:04:23:7a:50:ae:d4:1d:03:97:f2:1b:f6:cc:18:
08:55:3d:65:57:49:11:0f:a6:de:5b:c8:40:5c:08:75:6a:29:
de:86:68:2a:65:93:71:49:39:ff:a5:ff:ba:3c:71:a6:e1:c4:
e8:fd:2b:e3:65:02:6b:4f:50:aa:16:de:64:fa:ec:de:a9:00:
11:84:77:ea:a4:d9:8f:e7:61:0b:24:f2:5b:77:22:a1:95:cb:
55:e0:ec:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:41:11 2026 by rpki-client