Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
File: d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft (raw, json)
Hash identifier: 3rAfMPDzG3lw5yyjsxcyYvSjjKDgSSACnsYk4IqIO9A=
Subject key identifier: 8C:FA:F4:53:FE:63:6D:6E:1F:2C:81:40:57:CE:2E:DD:92:92:67:1E
Authority key identifier: 77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
Certificate issuer: /CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Certificate serial: 019CAAC61F49D30F40FF2EA259963404854F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
Manifest number: 0FE8
Signing time: Sun 01 Mar 2026 19:00:36 +0000
Manifest this update: Sun 01 Mar 2026 19:00:36 +0000
Manifest next update: Mon 02 Mar 2026 19:00:36 +0000
Files and hashes: 1: d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl (hash: agux3Z9deOiz2DXCE6+Q8w1m6PuDBDfRpzmLng0S2gY=)
2: utBF4pjjAxN8gnwEZw-ZaW9VBYk.roa (hash: Rb/8giga2DKHr0xu9FiYkuTdiT2IO1AvhtunEnimjeM=)
3: zp6AvUoMe9iCoAq9x5r0S8AYxec.roa (hash: X3bBF0Ic6iTw88nHub1cmld7xWKzFn1W8243XqYcOlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:1f:49:d3:0f:40:ff:2e:a2:59:96:34:04:85:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Validity
Not Before: Mar 1 19:00:36 2026 GMT
Not After : Mar 2 19:00:36 2026 GMT
Subject: CN=8cfaf453fe636d6e1f2c814057ce2edd9292671e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:71:55:f2:f0:8f:59:1f:c1:29:80:21:18:
2c:d8:fe:ba:8e:db:f1:80:98:2d:73:ac:74:1d:88:
c7:c1:51:d3:e6:e1:81:01:0e:03:54:35:de:81:35:
64:24:9a:90:4f:5b:34:9c:c9:0e:a0:b0:4a:13:1c:
e6:e8:9f:d7:b3:59:7f:43:c4:4c:57:65:bd:ee:8a:
28:60:03:99:64:fa:de:ba:99:81:94:24:28:ca:58:
39:38:7e:a5:bf:b8:68:6a:39:f8:43:40:27:50:ef:
7f:7b:59:78:64:8b:9d:f8:0c:1a:b5:83:bc:83:9e:
d2:65:73:93:88:a0:bb:e0:1e:d0:35:74:83:e8:c5:
90:5c:7c:28:30:ae:23:84:94:c9:84:39:0e:06:25:
ee:3e:5a:06:b0:0d:39:35:fa:75:3f:ac:3f:c5:ca:
21:ef:46:91:02:41:32:a2:94:85:4c:26:3f:b5:b8:
8f:fc:d2:10:71:01:91:0f:9d:19:02:e7:41:b8:be:
ac:a6:1b:06:28:2b:e6:60:96:21:ba:a3:ca:c6:78:
ca:aa:77:cf:a1:b1:73:88:90:ae:d2:05:4e:63:ec:
20:89:4d:2e:04:8e:7e:70:23:93:61:cc:78:05:82:
37:67:52:13:c6:23:ad:bd:1a:64:5b:14:11:d5:1b:
13:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FA:F4:53:FE:63:6D:6E:1F:2C:81:40:57:CE:2E:DD:92:92:67:1E
X509v3 Authority Key Identifier:
keyid:77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:95:0e:cb:7a:e1:1c:56:10:cc:86:d1:23:b5:6a:9e:d7:bb:
a8:5e:a7:4b:dd:66:cf:6a:4e:e8:18:29:e6:48:9c:23:ae:0c:
61:ec:38:f9:77:43:6d:df:cb:d2:2b:31:2a:cf:5c:2d:a0:48:
55:0d:07:24:4e:3e:c9:2c:c3:ca:ee:cd:11:b3:50:b2:ee:20:
88:5f:e5:2c:d2:24:52:e8:76:51:60:1b:78:6e:47:fb:01:9b:
74:ed:0c:a0:d1:45:af:bf:91:d3:f2:f9:39:b1:5e:b9:38:67:
85:fb:64:be:11:6e:ff:4f:e1:85:d0:94:48:2a:69:9f:36:6b:
65:28:9e:0e:76:ad:cd:2e:2c:d6:98:a3:d2:7a:83:ff:34:ca:
3f:a5:aa:6f:37:34:c9:45:09:9e:25:44:89:b8:ee:25:27:e5:
cc:64:47:af:f4:a9:5e:5b:8e:d2:d9:93:e6:0f:f2:32:e6:3c:
b1:f7:03:ea:3c:ef:03:79:43:b5:48:60:fd:f6:70:3b:01:e0:
e7:d5:7d:85:cc:e7:3a:2f:74:a9:8a:e3:ab:74:ba:07:86:e9:
60:4e:eb:da:92:b2:2e:6c:eb:96:bb:88:92:66:c6:1c:c8:9e:
25:59:fb:0d:5d:f9:18:2b:41:fc:39:61:3b:12:04:27:78:4e:
64:83:a9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:39 2026 by rpki-client