
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
File: d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft (raw, json)
Hash identifier: uJeLmISvoyVol3I18vgUk3cO0XrKjLzIWuyqf4xSYNs=
Subject key identifier: 5C:F5:8B:53:32:06:35:BC:17:9C:D5:31:9A:14:A8:C7:6E:15:28:FC
Authority key identifier: 77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
Certificate issuer: /CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Certificate serial: 01A12DA08359B1AEB4A69FFD8D8ECF7E47DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
Manifest number: 123E
Signing time: Mon 12 Oct 2026 01:00:56 +0000
Manifest this update: Mon 12 Oct 2026 01:00:56 +0000
Manifest next update: Tue 13 Oct 2026 01:00:56 +0000
Files and hashes: 1: d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl (hash: a9MQq5USXnFKqZAbjFPFkimc0rxQB2jCIbNl7TlY1U8=)
2: utBF4pjjAxN8gnwEZw-ZaW9VBYk.roa (hash: Rb/8giga2DKHr0xu9FiYkuTdiT2IO1AvhtunEnimjeM=)
3: zp6AvUoMe9iCoAq9x5r0S8AYxec.roa (hash: X3bBF0Ic6iTw88nHub1cmld7xWKzFn1W8243XqYcOlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:a0:83:59:b1:ae:b4:a6:9f:fd:8d:8e:cf:7e:47:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Validity
Not Before: Oct 12 01:00:56 2026 GMT
Not After : Oct 13 01:00:56 2026 GMT
Subject: CN=5cf58b53320635bc179cd5319a14a8c76e1528fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e4:0e:2a:34:66:dd:f6:c3:7f:1f:74:b7:6e:
2e:a2:3e:f2:b2:7c:82:a8:3f:5e:bd:35:ad:e4:86:
24:9b:2b:32:a4:a6:12:ad:44:b4:01:b8:6a:c3:02:
13:69:0e:f4:54:5b:b2:95:4a:1e:16:33:1c:3b:63:
ea:12:4c:5b:03:a6:56:10:fc:5b:12:53:5d:bb:2d:
64:90:83:0e:59:cf:80:9d:5a:14:e6:fb:32:83:b8:
e5:68:f2:0c:8d:5a:c8:a9:5f:a7:9a:66:07:66:87:
ac:e5:02:ac:51:a4:1c:16:70:c0:55:60:3f:72:b3:
bc:31:1d:a1:2d:bd:16:84:03:46:94:c3:97:e7:a6:
d3:e5:3e:17:b6:54:6f:96:d2:0c:3f:73:46:c6:1c:
57:24:df:2d:f4:11:e4:5b:98:a6:b9:93:a8:b6:1a:
29:29:1f:81:da:35:f6:3e:2b:ec:5f:68:ab:0f:30:
33:47:ca:96:de:05:91:bb:81:e3:ed:a1:1a:be:ec:
3b:7a:e7:a8:d6:f3:75:e3:31:b1:95:4a:95:1f:25:
11:ec:2f:60:28:09:b5:f8:4e:4c:87:c8:3f:74:37:
0c:b1:73:f3:d2:b7:5f:e7:f4:fc:f7:a5:7f:54:53:
57:0e:cd:25:e2:8f:98:ab:12:a3:c4:81:61:b3:70:
be:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F5:8B:53:32:06:35:BC:17:9C:D5:31:9A:14:A8:C7:6E:15:28:FC
X509v3 Authority Key Identifier:
keyid:77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6e:3b:7b:2a:de:cd:c3:fd:a2:d7:fa:c4:61:58:7e:31:e4:
c3:65:7c:af:bc:e1:07:b8:e5:f4:8d:fa:7a:64:0c:4d:ce:ef:
55:6b:04:bb:ff:72:a0:26:35:14:7f:58:55:23:68:fb:26:b3:
84:4c:5a:9d:64:3b:68:10:66:bd:99:94:a4:a8:70:a1:35:06:
ac:6f:ed:30:7b:1f:9b:4c:96:97:14:5d:24:e6:8a:8f:af:09:
bb:c7:c1:fc:83:bf:c0:f7:46:41:24:30:fa:21:2b:13:b6:43:
c9:64:84:f3:ed:16:01:f8:21:c3:18:a8:76:17:9d:13:1b:4e:
05:8f:1c:17:7c:bf:ec:ff:24:c2:27:d2:92:af:25:75:f4:f3:
46:de:19:e4:60:2b:72:52:6a:f7:fb:42:f7:50:d6:3a:7e:98:
e0:61:65:9b:bf:24:98:25:37:43:77:3b:15:cd:9e:dd:01:63:
90:cb:45:21:31:19:44:9a:93:47:ad:2e:9b:a8:b6:ab:bf:48:
41:4f:b6:cb:f9:1a:c9:01:9a:ef:93:b2:56:a1:02:6f:4b:79:
33:b7:e1:fb:8f:b2:ff:56:cd:a5:3d:53:1d:9b:fe:69:7d:96:
03:f9:ef:48:17:19:92:4f:34:92:0b:ea:67:5c:0c:91:b2:19:
5c:98:94:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:33:04 2026 by rpki-client