
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
File: d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft (raw, json)
Hash identifier: p8kr91A0joS34gepSDc0zSSmRCkl3wpm+z87i49KRuo=
Subject key identifier: 8E:7C:9E:EE:DD:A3:3D:88:CE:F2:4D:50:89:46:A7:4F:CA:A8:28:FC
Authority key identifier: 77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
Certificate issuer: /CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Certificate serial: 019D984F87273B9A2EF96F0D80BB05D0A45C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
Manifest number: 1063
Signing time: Thu 16 Apr 2026 22:00:41 +0000
Manifest this update: Thu 16 Apr 2026 22:00:41 +0000
Manifest next update: Fri 17 Apr 2026 22:00:41 +0000
Files and hashes: 1: d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl (hash: 1vhHw5gHqqaisfMSG/wbkWdVb2zWSZAR5+cd1DjhPXo=)
2: utBF4pjjAxN8gnwEZw-ZaW9VBYk.roa (hash: Rb/8giga2DKHr0xu9FiYkuTdiT2IO1AvhtunEnimjeM=)
3: zp6AvUoMe9iCoAq9x5r0S8AYxec.roa (hash: X3bBF0Ic6iTw88nHub1cmld7xWKzFn1W8243XqYcOlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:87:27:3b:9a:2e:f9:6f:0d:80:bb:05:d0:a4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Validity
Not Before: Apr 16 22:00:41 2026 GMT
Not After : Apr 17 22:00:41 2026 GMT
Subject: CN=8e7c9eeedda33d88cef24d508946a74fcaa828fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:ab:d4:75:e0:ef:90:53:78:33:10:c1:ba:
9d:43:d9:95:65:eb:18:bd:ee:ae:d9:71:9c:0a:53:
b2:b0:b1:ca:53:be:1e:d5:f3:3e:ae:45:72:4b:dc:
32:c0:b7:31:1b:6a:a7:d7:b2:31:3e:3a:9b:f9:d1:
b6:d7:b8:df:0c:72:96:b0:30:ce:de:fa:97:4e:92:
c1:28:b5:69:da:65:d4:93:0b:58:43:01:82:ef:12:
dd:d1:d4:a2:d9:32:8e:85:c5:67:d8:f3:e5:c3:16:
fb:81:aa:93:fa:c5:2c:70:ed:03:ac:de:ed:bd:1a:
f4:71:cd:5c:63:32:0c:1a:84:a7:04:cc:d6:5e:88:
75:fc:0a:6c:82:ee:50:a6:57:eb:2f:f7:95:19:28:
41:d8:7b:01:25:d3:40:84:dc:7d:99:a8:06:3c:b2:
e5:2e:74:36:09:08:e1:e4:2d:b7:33:f9:75:83:96:
cf:3a:50:13:fd:ce:d3:61:4c:09:a9:55:56:08:18:
99:7a:d9:18:09:8d:b2:d8:d6:05:7f:58:f6:b3:e1:
ee:cc:f9:3b:29:ec:ce:31:21:13:37:41:1e:86:ac:
64:6d:cf:80:98:db:e2:9c:7a:e5:fa:c7:1a:81:39:
63:2b:42:87:40:b5:92:57:73:d4:dd:36:49:cd:98:
48:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7C:9E:EE:DD:A3:3D:88:CE:F2:4D:50:89:46:A7:4F:CA:A8:28:FC
X509v3 Authority Key Identifier:
keyid:77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c6:2f:58:2d:60:80:4c:71:ff:0b:36:26:33:78:39:48:dc:
08:c7:c2:b6:91:63:ab:03:31:41:de:4f:be:3f:bf:a0:e0:88:
31:f7:2e:58:54:b5:9b:82:ae:74:84:a6:22:d3:27:b8:2d:59:
10:8f:8f:74:16:e4:d1:02:05:65:4b:4a:34:38:cd:c5:62:91:
7a:fe:6a:53:c5:5b:14:19:6d:1c:11:bf:fe:02:0b:30:61:ad:
73:23:71:b8:97:bf:35:b1:28:12:79:3e:1c:bc:5a:5f:04:8d:
4b:2e:fe:3b:fd:ed:a3:e6:5c:e3:37:bf:eb:ec:0c:ba:df:6e:
72:04:4f:1f:36:ff:83:e0:9e:b4:9f:70:3e:0e:a5:63:f5:fe:
76:e6:8a:ec:7c:30:54:0b:a0:73:f2:f6:86:07:09:2e:85:31:
68:2d:b6:71:82:fd:a5:b1:d8:5a:1e:cc:85:5d:66:73:e1:89:
19:ab:8b:34:93:c4:f9:3d:3d:a4:33:87:2f:72:0a:e0:f5:cb:
9a:c0:5f:36:7d:10:d2:db:92:73:f6:41:31:ce:f0:1d:8c:34:
24:ad:19:2a:be:aa:55:fc:64:21:bc:cf:6f:da:e4:fb:05:e3:
e4:73:21:7f:37:a4:54:e7:a4:93:53:ce:1c:ea:b2:aa:4f:74:
dc:37:86:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:29 2026 by rpki-client