Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
File: d8jZS9834PkAzWqMQizbFNl860Y.mft (raw, json)
Hash identifier: kDhLAZHqKeaYqEO7UXm3vxtrAmb1Hi/ADYo0kguW86I=
Subject key identifier: 16:DC:B7:E0:AD:49:1E:D2:71:A8:71:84:9F:83:55:97:E5:07:BE:03
Authority key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
Certificate issuer: /CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Certificate serial: 01A0C96AB92024B560C6D395BD2882565773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
Manifest number: 05EF
Signing time: Tue 22 Sep 2026 14:00:09 +0000
Manifest this update: Tue 22 Sep 2026 14:00:09 +0000
Manifest next update: Wed 23 Sep 2026 14:00:09 +0000
Files and hashes: 1: 3AKV0u3WSxtyrBn5vr3IyCaz8CY.roa (hash: eMq4UCU2DpJceG3vsiv0qnCLBJvV82fA2hJ3CQNxIsw=)
2: d8jZS9834PkAzWqMQizbFNl860Y.crl (hash: +K9HFVh/V+b8gyimO6AeFGK2IO5tajrPLuIhCx7BvP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6a:b9:20:24:b5:60:c6:d3:95:bd:28:82:56:57:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Validity
Not Before: Sep 22 14:00:09 2026 GMT
Not After : Sep 23 14:00:09 2026 GMT
Subject: CN=16dcb7e0ad491ed271a871849f835597e507be03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8a:15:13:9a:9a:67:a5:1e:51:be:b4:98:0f:
fa:65:08:4a:09:3c:c8:d1:d7:c2:18:ae:3b:c1:a0:
b5:2f:da:c3:65:99:91:10:0c:83:83:83:60:2b:1c:
43:f9:60:7c:e7:38:36:81:64:fc:fb:5f:12:1a:51:
32:a2:ba:a3:bb:a9:8e:ce:94:82:69:0f:8b:a4:95:
fc:26:86:2f:2f:77:6e:fb:ae:18:0c:0b:8a:71:a8:
1f:32:69:41:ad:5c:f2:88:97:d3:1f:15:de:22:f9:
3d:f1:b2:c5:89:de:aa:0b:84:69:99:5e:da:3a:78:
a0:3f:8a:4f:55:54:0e:a3:a4:64:2e:2a:4d:1b:2f:
eb:18:97:5f:5d:44:75:59:74:e9:9e:21:ad:13:bc:
6f:5d:13:ee:39:71:78:91:99:dc:29:df:07:0c:84:
6f:c2:a0:ed:e5:89:11:18:a8:2d:09:d5:6c:9b:de:
40:8e:9a:fb:7c:87:f6:ee:d3:a3:64:59:b6:a3:bb:
72:a6:e3:77:b3:64:d0:bc:da:fb:b1:cd:b3:2c:db:
e3:2f:b7:6c:08:57:2b:95:e7:14:8d:c4:c9:a2:f3:
9f:51:71:bc:9f:e5:82:2c:a3:da:02:d9:f1:d4:f0:
69:c3:df:58:c3:1e:1c:fa:f2:c2:1e:dc:6e:d4:01:
96:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DC:B7:E0:AD:49:1E:D2:71:A8:71:84:9F:83:55:97:E5:07:BE:03
X509v3 Authority Key Identifier:
keyid:77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ab:ed:ab:34:1b:52:be:9f:7a:83:86:d9:66:bf:76:8b:ff:
1b:7e:83:87:01:6c:c1:45:7b:64:e6:6c:55:26:c7:ce:98:7f:
1a:40:17:ea:1a:e1:1d:f7:3e:fe:82:58:2f:15:b1:5d:d9:71:
b6:aa:a6:8a:cc:b0:f0:8f:ad:0c:eb:38:f3:ba:b7:11:0b:d2:
80:7b:e2:c7:17:b4:09:a1:06:b1:36:65:31:52:27:de:f6:41:
b2:6d:72:00:d1:7d:ce:86:9b:3d:14:38:f7:9f:b8:f0:c8:a9:
d8:df:84:04:bc:22:79:14:2e:56:4a:39:ea:09:c9:9a:03:5f:
e9:c0:c5:6e:dd:78:1f:f3:76:c4:0d:6f:e0:0a:59:c1:59:a4:
fc:ff:8c:7a:db:02:84:a5:97:0f:99:93:cc:83:fe:45:6e:a8:
fd:fe:8f:a7:18:fc:55:9c:a1:20:5c:b0:6a:5f:74:c7:ca:8b:
47:01:a8:2e:39:d4:0b:ff:9d:df:c3:11:64:4a:cd:19:3d:41:
6b:9d:d1:6e:f4:5c:69:18:0b:2d:04:80:3e:42:ef:5f:06:88:
91:99:f8:f7:02:1f:9a:ba:64:65:eb:84:c4:b0:c2:66:53:ee:
c3:46:75:fc:e4:ea:ed:80:b9:be:c9:66:83:78:e0:50:c6:7e:
e6:70:d5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:25:10 2026 by rpki-client