Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
File: d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json)
Hash identifier: jPmssBIgwDSSjY2jxDqt0M/PpgfYokygqE7VD0NgWiI=
Subject key identifier: B8:A8:A3:B6:B2:54:90:93:B2:D9:67:FD:23:9C:4B:F1:F1:42:A6:52
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial: 01A1039260B7C066C84EC314673C9741763F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
Manifest number: 1A84
Signing time: Sat 03 Oct 2026 21:01:26 +0000
Manifest this update: Sat 03 Oct 2026 21:01:26 +0000
Manifest next update: Sun 04 Oct 2026 21:01:26 +0000
Files and hashes: 1: 3yGgq6gpQ9NYaasBYMMPQaATXzo.roa (hash: i0WCJtC2Kt+N/0o8HIjmO/t5ox+yoXwX3GlgqEv4MdQ=)
2: ZRLYVrP2rb95Q-Ge4TVnxmxa0zg.roa (hash: Xsb75QA4ApCthewBTBgfSKpRYNo5qI3KmhsLF/JdAuM=)
3: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: 0440VRFN/UmiFlYIOWTNXuL3hRsCceZeMy/dcQSzk8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:92:60:b7:c0:66:c8:4e:c3:14:67:3c:97:41:76:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Validity
Not Before: Oct 3 21:01:26 2026 GMT
Not After : Oct 4 21:01:26 2026 GMT
Subject: CN=b8a8a3b6b2549093b2d967fd239c4bf1f142a652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2e:db:f7:a9:f3:96:81:b8:93:d0:35:ee:c1:
4f:f0:bc:31:cc:a8:6c:ac:b0:c7:da:05:8f:c3:34:
d0:0b:16:93:8e:70:2c:6d:3e:e0:34:93:45:3f:ef:
fc:86:a7:05:06:6d:65:66:0f:06:5d:0e:86:8b:92:
5f:9e:ab:fc:b0:31:7e:6d:1f:6a:de:4b:8b:33:65:
1b:f5:23:7e:d4:9a:cf:29:94:96:95:30:48:d0:f2:
90:c9:e0:e1:85:cc:65:ab:1c:31:11:ac:75:09:bb:
47:4c:27:d8:5d:1c:7f:f6:a0:40:2d:70:2a:15:a2:
36:55:16:8f:cd:fe:05:0b:02:76:0f:12:10:5f:f0:
1f:da:a9:ee:91:67:df:17:d7:9f:19:ac:8e:0c:75:
fe:ec:56:95:4a:98:34:bb:31:57:3a:98:a4:05:5c:
64:ef:a1:f3:47:05:62:6c:4b:0f:e1:21:b0:51:e7:
f0:de:b0:86:6c:67:52:39:19:10:56:eb:a6:df:14:
25:bd:23:9b:de:b4:41:31:2f:23:46:46:0b:69:80:
67:6b:42:a4:9d:f0:c5:fa:42:39:8d:c5:16:41:f4:
39:50:98:4f:9c:72:f4:a4:50:06:bb:35:d4:60:b2:
b5:a2:14:e4:ee:ea:ca:ce:28:7b:d6:3e:37:be:3d:
fc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A8:A3:B6:B2:54:90:93:B2:D9:67:FD:23:9C:4B:F1:F1:42:A6:52
X509v3 Authority Key Identifier:
keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e7:aa:b1:12:ba:d0:39:83:36:06:e4:fd:63:33:1f:19:86:
50:62:97:e4:6c:ec:39:ab:5e:d1:64:52:c3:2f:b6:d4:0a:d6:
d5:31:ee:63:1d:4e:00:8a:9a:1a:08:ba:a8:27:16:eb:34:41:
aa:95:57:65:64:fa:9f:03:95:bb:12:59:cf:8d:8c:6b:62:46:
43:50:9f:72:0c:78:a3:68:18:a4:27:12:80:c3:58:32:9d:af:
3f:a3:82:26:49:0b:79:14:3d:d2:4e:10:7a:d7:63:f1:00:0e:
23:59:3e:a9:bc:b3:43:66:d8:f4:10:70:30:b7:d4:6b:7c:dc:
be:65:0c:72:19:e2:02:09:53:e5:b6:85:65:69:b7:ff:6d:4d:
1f:8f:9a:e0:fc:b8:97:58:ae:01:bf:17:a9:13:4f:8e:cb:87:
29:f6:be:64:7e:6f:7c:0c:5a:98:73:9e:12:17:a4:19:90:21:
14:53:5c:75:76:f0:d4:f0:78:19:cb:5b:07:38:a7:88:7f:96:
82:2d:60:90:da:eb:71:33:2f:1f:9a:61:7e:08:d8:79:0d:77:
48:ea:d2:4d:3c:01:6a:1a:50:03:ed:b8:80:60:e4:5d:40:ae:
f2:d4:11:a1:c6:c7:a1:49:8f:b8:e7:93:27:09:84:4c:bf:65:
30:16:54:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:59:28 2026 by rpki-client