Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
File: d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft (raw, json)
Hash identifier: HLCqwQy+6qc0U8A8Esu3SJ5qb9u7t7DBCJYRpC9/nIY=
Subject key identifier: 0A:D3:4D:6F:E9:28:54:3B:98:31:6B:EA:3C:9B:80:E7:30:6B:93:6B
Authority key identifier: 77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
Certificate issuer: /CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Certificate serial: 01A1317D47F293C2645DE1A045D988F13FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
Manifest number: 1240
Signing time: Mon 12 Oct 2026 19:00:56 +0000
Manifest this update: Mon 12 Oct 2026 19:00:56 +0000
Manifest next update: Tue 13 Oct 2026 19:00:56 +0000
Files and hashes: 1: d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl (hash: DgGGO6vEEA+1OCAwVVmcC7i6nRA58fVpSolfqRS2BSo=)
2: utBF4pjjAxN8gnwEZw-ZaW9VBYk.roa (hash: Rb/8giga2DKHr0xu9FiYkuTdiT2IO1AvhtunEnimjeM=)
3: zp6AvUoMe9iCoAq9x5r0S8AYxec.roa (hash: X3bBF0Ic6iTw88nHub1cmld7xWKzFn1W8243XqYcOlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:7d:47:f2:93:c2:64:5d:e1:a0:45:d9:88:f1:3f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Validity
Not Before: Oct 12 19:00:56 2026 GMT
Not After : Oct 13 19:00:56 2026 GMT
Subject: CN=0ad34d6fe928543b98316bea3c9b80e7306b936b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:b5:8e:24:2b:7f:c4:3e:08:5a:8c:86:dd:
86:78:4d:68:10:45:c1:4f:43:d8:e3:48:51:b9:93:
f2:0f:87:fb:86:34:42:9b:8b:e6:5b:08:8e:0d:54:
5b:02:1e:1f:d0:5f:85:39:11:7e:a5:4c:bf:ae:64:
97:5b:d5:e6:f3:ac:1e:88:35:cb:fd:be:3d:67:dd:
0d:2d:31:e3:fc:a2:45:c9:4d:2b:6f:a2:8d:68:4c:
9e:1a:47:f9:b4:e2:9f:0d:dd:e0:a7:1b:6e:84:e6:
65:15:0c:5e:08:a0:f3:b2:97:6b:7b:78:74:a7:5f:
02:1d:5a:b4:86:61:be:fe:d6:66:3e:69:2f:f7:36:
03:80:82:38:e9:d2:e3:4d:10:59:d3:46:e9:28:40:
34:14:3e:f6:28:ee:89:5b:dd:24:cc:4c:c2:6d:e4:
73:4a:4f:b5:7b:e3:35:3a:d3:b6:a7:53:fd:bd:2f:
cb:fe:86:68:fc:54:93:24:ca:03:a2:03:30:dc:44:
8c:a4:c0:00:e2:9e:ae:05:5e:3b:9d:da:97:0c:7b:
ce:a8:95:a8:01:ec:4a:ea:17:d8:b9:9d:b3:8b:52:
d4:8a:1c:87:a6:a0:d6:27:65:ac:89:22:20:9c:c1:
0e:0b:10:9b:cc:46:f4:ef:05:fa:e1:62:b8:2c:11:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D3:4D:6F:E9:28:54:3B:98:31:6B:EA:3C:9B:80:E7:30:6B:93:6B
X509v3 Authority Key Identifier:
keyid:77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:bf:d2:26:65:2a:bb:66:76:fe:3e:ef:2f:9c:1e:be:ef:d2:
4e:f0:c9:70:b1:e1:37:0f:8d:b4:1e:52:1b:c4:14:1b:09:e0:
d5:90:e4:a7:44:bf:db:7b:e5:22:ab:98:53:06:0e:82:1f:46:
09:16:5a:0f:3d:f6:c8:2c:92:71:08:b8:4d:7a:45:f1:18:3c:
04:41:97:79:6c:15:d5:82:80:4a:ba:5f:0c:ce:5f:ab:0b:08:
d2:01:98:e0:55:a6:03:78:7f:b8:d4:6e:90:f3:61:40:95:6e:
5e:40:56:92:18:08:1b:14:9d:41:0d:7c:1f:e0:03:04:e0:c3:
b7:b7:28:cc:5f:46:99:79:78:79:ef:79:39:82:39:2b:d1:b1:
bb:48:f1:28:b6:53:40:66:e2:4a:48:e8:19:d0:c2:0a:14:d5:
96:8b:c1:fb:89:9f:98:b4:36:54:10:ec:c1:dc:af:5c:95:70:
c3:b7:27:d0:9e:0f:09:f1:6b:28:b3:92:87:f0:68:8d:fd:0e:
ad:95:0e:04:19:e1:ff:df:00:ac:3e:f7:7e:4d:9b:29:fc:5c:
a3:00:6b:5c:8a:b3:0f:33:fb:99:13:bf:29:a6:4b:51:66:2c:
5d:13:21:02:88:a1:2b:74:fd:cc:ce:fb:e7:e0:03:a8:c4:0c:
9e:f1:a3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:56:16 2026 by rpki-client