Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
File: 0b77TZQENocaJKhyLzydZNbIQBA.mft (raw, json)
Hash identifier: o3tczSAg3mVA/jobKf+0QxMGaSoOk+hJXojoUdeJaqs=
Subject key identifier: 57:A1:0F:67:23:46:CE:4E:23:87:13:61:DB:20:6D:63:42:8D:78:A7
Authority key identifier: D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
Certificate issuer: /CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Certificate serial: 019EBF91D09645F306566FCC64426467DA38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
Manifest number: 0341
Signing time: Sat 13 Jun 2026 06:01:04 +0000
Manifest this update: Sat 13 Jun 2026 06:01:04 +0000
Manifest next update: Sun 14 Jun 2026 06:01:04 +0000
Files and hashes: 1: 0b77TZQENocaJKhyLzydZNbIQBA.crl (hash: XK79JeXYjJ8x6Re3tldHXu6srkgcZkLGb2sDB+IrZXM=)
2: 2thteMXPE7HNuXgDy427RmN012w.asa (hash: AUokTZUmvO7vMDnJLm13XcC0mGvc1EfP2ch4mdqLW1c=)
3: aYA6TDe0FRGUQKWpi6CFPmb8si4.roa (hash: TWdXdIAzV6yUR6IvDamhx0hywiAE1G+KEAkggMUBFHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:d0:96:45:f3:06:56:6f:cc:64:42:64:67:da:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Validity
Not Before: Jun 13 06:01:04 2026 GMT
Not After : Jun 14 06:01:04 2026 GMT
Subject: CN=57a10f672346ce4e23871361db206d63428d78a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:87:b7:0e:f3:dd:57:2d:0d:38:25:db:c2:7c:
ab:70:2c:98:bd:f4:bc:09:b5:8c:0f:50:f2:3f:64:
54:70:e0:17:18:04:fe:6e:d7:07:6a:fa:c2:72:03:
ae:da:92:07:4f:01:14:35:dd:f9:6c:02:8b:10:5d:
fb:bb:15:7b:07:01:62:53:05:28:44:02:c6:47:9b:
8d:c6:90:93:e5:e5:90:e9:54:a7:f8:a4:74:8c:d0:
76:dc:fe:fc:85:20:3f:f6:bb:2d:0f:cd:c5:04:7b:
03:6e:fc:b1:0a:1f:5d:d8:fe:95:d9:50:7f:d2:f7:
d0:c6:0b:69:8f:41:71:c6:a7:bb:35:a8:62:4e:62:
80:1e:73:f2:92:34:e5:1e:d6:4b:0d:45:db:1f:ee:
68:75:32:0e:1a:8f:1f:ee:45:71:26:56:ca:5f:a8:
aa:81:90:c1:63:0f:15:01:54:05:a8:f5:fc:e4:56:
dc:0e:69:bc:f1:a1:f4:76:f4:5e:f4:e8:51:9d:69:
5e:ab:cd:34:40:c6:bd:03:ad:03:4e:47:e5:4f:d0:
fb:67:0c:2b:1f:37:9f:b4:64:66:4c:c4:d2:f8:2f:
30:2c:f5:80:bb:27:5c:3c:6b:9f:8d:d7:4f:76:2e:
e6:a4:1a:d3:10:77:2e:b6:ef:03:aa:65:ba:76:01:
70:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A1:0F:67:23:46:CE:4E:23:87:13:61:DB:20:6D:63:42:8D:78:A7
X509v3 Authority Key Identifier:
keyid:D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d5:74:60:08:2d:d9:d4:1a:14:07:86:95:cd:d2:6c:de:0f:
12:4a:46:00:51:ab:ee:7f:e0:64:4e:25:13:cf:4e:79:51:75:
11:a1:45:80:e2:48:3f:de:3f:4c:af:61:33:e3:57:ba:8c:ca:
68:0f:5e:dc:77:78:83:e8:83:f4:c3:99:b7:a3:eb:f1:3a:07:
98:48:0c:ae:f1:29:fb:f0:8b:2e:d2:19:43:00:7c:02:43:45:
25:a5:74:7e:2c:d9:66:f7:e1:ab:e1:64:a1:40:c6:6d:a6:e1:
97:34:26:3f:57:4a:f6:26:00:e7:33:9a:b5:43:0b:bb:6f:1d:
c8:89:65:b1:44:8c:83:cb:fe:75:bf:8e:3f:53:2e:d8:b3:5a:
11:a6:cc:bd:4c:54:91:68:5d:6a:64:80:d0:72:ab:b4:c1:b9:
c6:19:58:db:f8:bf:e1:e9:34:30:cf:84:e0:18:26:09:9e:02:
fb:38:15:5b:c9:56:45:4a:dd:62:c9:42:20:10:bc:a7:cf:33:
cf:cb:f0:06:97:40:a3:b2:92:99:52:6e:78:7c:61:fe:fe:13:
20:f5:01:fc:b8:f5:2a:88:cf:22:f2:de:53:cc:57:2b:b8:20:
73:56:91:ef:ba:34:4f:67:2c:c4:1c:61:00:8e:3e:02:04:7f:
e9:cf:68:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:30:34 2026 by rpki-client