Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
File: d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft (raw, json)
Hash identifier: krgh3FYfBl1K8ItEaUTPH4Fxgy4uu6St9tm7hZo8qII=
Subject key identifier: 1E:A7:7B:66:EA:9F:AC:2F:28:8D:74:32:64:7F:1F:EF:8D:83:F7:EA
Authority key identifier: 77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61
Certificate issuer: /CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
Certificate serial: 019CA945739E474EED4ACF0E777B3409A660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
Manifest number: 11AF
Signing time: Sun 01 Mar 2026 12:00:26 +0000
Manifest this update: Sun 01 Mar 2026 12:00:26 +0000
Manifest next update: Mon 02 Mar 2026 12:00:26 +0000
Files and hashes: 1: 5ApIj12jO_8mOdYxVYiSploUCV8.roa (hash: pxYq1FoLIzcTlxwsFR29ohwcYfP/BC5eymca8E/d9AM=)
2: VmIcZRCirpwpk3EW3jn_rDgxBbc.roa (hash: GaVqilTYmg+leas5Zf/2DamTASeEyu9nsNNYOHaVeqo=)
3: d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl (hash: +SFQbE0Hzz3TY/Lh2imXcxDn0JiEEnVopcTEZqU5z2U=)
4: gOxCfBe1lb07Dd9lS3azAI_drcM.roa (hash: PjS4rrXO8Wuzfyz+7dGFwXl0RtklTG2PNwxKVtX++as=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:73:9e:47:4e:ed:4a:cf:0e:77:7b:34:09:a6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
Validity
Not Before: Mar 1 12:00:26 2026 GMT
Not After : Mar 2 12:00:26 2026 GMT
Subject: CN=1ea77b66ea9fac2f288d7432647f1fef8d83f7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5e:a8:54:64:42:6a:17:87:45:7e:52:54:44:
35:dd:f6:60:55:1c:3e:ce:3e:db:96:3c:6f:08:45:
fe:46:b7:4b:71:1d:e3:f4:91:a4:89:71:bb:5a:87:
ce:84:54:64:9f:e2:98:ef:57:4c:dc:c8:76:bb:47:
a3:fa:6d:c1:0c:6b:5d:47:9b:9f:89:fc:8b:4f:89:
16:ca:b7:94:df:d7:e5:f3:bc:26:7c:c5:87:0f:21:
b0:a3:ed:53:d2:48:f3:f4:94:de:82:f8:71:21:dc:
1c:29:0f:d2:a2:e4:52:a7:12:9e:1d:fb:9c:c6:b6:
f8:6e:2c:10:0b:96:72:36:5f:43:7c:ba:2f:4f:84:
40:d0:c6:73:cd:29:29:b3:61:96:35:70:b6:11:46:
b0:97:f8:45:83:ef:b6:26:c6:93:32:68:be:fd:7e:
e0:26:af:12:59:0b:fa:30:be:a9:ef:c4:0b:be:b9:
0d:eb:97:06:fb:b4:26:88:80:09:de:b4:e8:11:13:
c4:f6:26:3e:28:f2:e5:ba:e6:b1:29:8a:86:ec:5d:
60:70:32:38:15:b7:89:82:ad:7e:70:5f:51:d9:6f:
ca:b8:5d:10:7e:db:18:a6:ad:ac:34:46:8c:5b:d2:
5f:bd:39:d0:ca:7c:be:bc:c6:c3:78:07:77:f9:99:
1e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A7:7B:66:EA:9F:AC:2F:28:8D:74:32:64:7F:1F:EF:8D:83:F7:EA
X509v3 Authority Key Identifier:
keyid:77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:68:1e:a9:f9:4e:87:86:c3:85:be:01:fb:7f:6c:94:4f:18:
ca:0a:f9:2d:f7:e6:47:3a:4b:98:e2:63:61:9a:75:48:b7:2d:
73:d3:74:bd:14:d7:0b:a1:c0:57:02:79:d6:4b:d1:2d:8a:1c:
7a:88:07:63:f9:37:39:d4:37:32:23:e5:f8:1b:40:09:a1:46:
a2:8e:16:65:b3:87:43:2d:93:7d:e7:32:66:9d:a6:95:ee:8f:
86:88:44:16:16:1d:2f:d0:e9:08:25:2b:7b:c2:e6:cc:c7:ba:
5d:65:f8:a0:9b:08:4b:9e:5d:01:d0:60:27:19:dd:d0:56:bd:
e7:65:8c:17:48:6d:69:18:14:16:f2:fc:bd:e6:95:c3:5c:0e:
ff:92:76:a9:f0:37:14:34:f8:63:70:e4:78:14:f1:cc:21:37:
4d:3d:78:b7:f3:30:e1:24:af:9b:f3:4c:8e:e4:d9:07:62:e3:
3e:b2:ae:09:cf:d0:a0:95:7a:31:84:d2:d4:30:dc:ca:56:ce:
8e:54:82:06:ce:b2:5e:32:fd:e2:b6:15:21:9f:03:0f:b8:49:
59:fb:e3:c1:ee:fd:b7:f2:57:b1:de:10:8b:9f:c3:2d:f7:68:
ed:c1:f5:22:ce:c6:f7:5a:d5:de:11:fb:02:b1:19:8d:7a:a0:
e7:c3:5b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:21 2026 by rpki-client