Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
File: d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft (raw, json)
Hash identifier: sqBtN09R65Xp6+evXOWE1rYC7XCNZTE3LIDuJLxOiKM=
Subject key identifier: 40:DE:14:A7:0C:7F:84:7F:9E:1B:F5:00:F4:5C:C4:F2:FA:1E:D6:7F
Authority key identifier: 77:C1:55:21:FE:D9:0D:11:4E:76:35:31:0B:30:7F:55:3F:57:D2:6C
Certificate issuer: /CN=77c15521fed90d114e7635310b307f553f57d26c
Certificate serial: 019CAB6B5F3171CA4F182B95D90180CDE69D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
Manifest number: 102F
Signing time: Sun 01 Mar 2026 22:01:06 +0000
Manifest this update: Sun 01 Mar 2026 22:01:06 +0000
Manifest next update: Mon 02 Mar 2026 22:01:06 +0000
Files and hashes: 1: d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl (hash: b9j9FRNtcHRo4o3pKSlSY5NC2deOv7tHKJ/T7e0u44U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:5f:31:71:ca:4f:18:2b:95:d9:01:80:cd:e6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c15521fed90d114e7635310b307f553f57d26c
Validity
Not Before: Mar 1 22:01:06 2026 GMT
Not After : Mar 2 22:01:06 2026 GMT
Subject: CN=40de14a70c7f847f9e1bf500f45cc4f2fa1ed67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:55:f8:09:d3:da:33:12:d6:a5:48:29:70:
68:08:21:7d:4e:8a:45:12:b2:b8:dc:5f:2f:8b:4f:
6a:9b:78:47:af:81:d3:7a:01:88:a3:7a:bd:58:3c:
b5:1b:72:e3:b8:e6:6c:82:bf:6e:b3:c6:19:a6:c9:
ba:a8:34:be:f8:16:96:65:fb:cb:0f:12:d8:61:1c:
7a:23:ab:aa:8c:fa:59:93:94:c7:9a:0f:13:ac:f1:
90:77:38:e0:e1:f2:22:28:14:59:30:77:79:e3:7a:
bf:36:51:0a:ea:a3:d7:ba:0e:b0:cc:38:e9:80:98:
cc:e6:31:6c:7a:77:4d:08:2c:b4:0d:d2:73:e4:b1:
b7:e8:56:6a:1b:08:2d:be:21:29:84:39:bd:3b:6a:
c2:82:c8:db:3e:b0:1b:99:de:f1:61:11:5e:69:5a:
5a:4e:32:4c:b8:0c:0e:3f:f8:01:87:56:35:8b:da:
73:c7:84:e9:d0:a3:b1:85:66:61:97:ed:00:41:16:
02:74:88:ed:66:6d:c8:82:5c:90:1c:b7:17:db:96:
38:f0:97:e9:ec:d7:df:54:14:1e:2a:fc:2d:fb:68:
a0:84:94:91:4f:b6:04:25:f0:44:91:ee:5f:44:b1:
35:60:b5:c8:4a:43:10:3b:78:91:16:fe:d3:7a:cf:
6f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DE:14:A7:0C:7F:84:7F:9E:1B:F5:00:F4:5C:C4:F2:FA:1E:D6:7F
X509v3 Authority Key Identifier:
keyid:77:C1:55:21:FE:D9:0D:11:4E:76:35:31:0B:30:7F:55:3F:57:D2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:61:cf:67:c5:fb:bd:f1:ba:34:49:4a:2c:b7:00:b4:45:44:
45:c9:58:b5:9c:63:d4:12:cf:8f:b7:b0:10:00:dc:10:96:44:
fd:28:7b:aa:00:60:a9:22:da:fa:30:bc:83:24:ac:82:e5:0d:
d4:59:84:c1:ce:90:ef:7a:b2:54:d3:a7:24:77:a9:6e:8b:09:
d0:45:bb:e6:63:dc:3a:4c:b7:c7:92:e4:81:5f:40:de:ca:88:
29:d5:61:44:72:a9:bd:c8:95:06:bc:88:49:08:81:d0:57:a9:
8d:63:4b:5c:9b:8e:75:03:cc:ef:e1:99:d1:34:cf:28:e6:ce:
63:8d:08:ef:c2:1d:bc:af:3a:ac:78:9a:51:39:a9:f9:11:25:
72:68:b3:a8:7a:ee:c5:57:98:b6:f5:10:a3:1d:b8:f8:cf:4c:
83:26:fc:9a:bc:54:ba:c8:2a:98:1f:48:4d:4a:29:44:d8:7b:
a5:34:1e:ec:c1:b7:48:47:10:52:a0:e7:87:85:72:bf:d1:7b:
a2:43:99:74:b2:d1:fb:2f:d4:20:77:93:5a:3f:ac:f5:a5:b8:
ff:15:27:36:d9:d3:90:91:2c:37:50:fb:40:39:d7:43:ae:70:
62:f4:ee:90:cc:77:9a:bc:bc:8e:39:e3:78:29:89:8e:44:00:
de:6c:fc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:54:46 2026 by rpki-client