Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
File: d8Bx2YnlMJrDyzwLCNOsslIRErY.mft (raw, json)
Hash identifier: lBmlSdcoDEh41ezVGf2F19rwsDb/YKsdJqcDjfCfuRQ=
Subject key identifier: 7F:B4:80:9A:10:1B:A8:0C:82:DA:7A:70:F1:46:3A:36:73:6E:8A:C8
Authority key identifier: 77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
Certificate issuer: /CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Certificate serial: 019DA3AEE6B90749FCA5FCA6A6C402032136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
Manifest number: 14EE
Signing time: Sun 19 Apr 2026 03:00:41 +0000
Manifest this update: Sun 19 Apr 2026 03:00:41 +0000
Manifest next update: Mon 20 Apr 2026 03:00:41 +0000
Files and hashes: 1: 80Z8m6Z7JZuDHgqlRYLsoylq5hc.roa (hash: inbOmLYfTUWv8xqKpQqk0iSMIhKJkA0PbwgWW07QMo4=)
2: d8Bx2YnlMJrDyzwLCNOsslIRErY.crl (hash: dd5XCr/wKCohKjPri99GKp24boAyKc0M2dN6YAieGnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:e6:b9:07:49:fc:a5:fc:a6:a6:c4:02:03:21:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Validity
Not Before: Apr 19 03:00:41 2026 GMT
Not After : Apr 20 03:00:41 2026 GMT
Subject: CN=7fb4809a101ba80c82da7a70f1463a36736e8ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:52:23:5b:a4:5c:b2:e1:cf:81:96:8d:1a:26:
56:db:6a:f7:5d:30:2c:e7:56:f5:88:e2:64:f3:ea:
d5:75:74:f1:03:59:8b:37:f1:4f:c6:3e:af:60:1e:
7f:da:02:20:03:87:de:e7:be:89:98:0e:03:8c:89:
93:13:83:28:67:c6:f4:48:74:e6:11:f4:1d:1a:4f:
9b:9e:4a:e8:f4:09:61:51:1f:d8:b6:54:f9:ad:bc:
3f:59:e4:f1:e6:5a:2d:31:40:31:0b:0a:44:87:51:
01:c6:7e:fd:e3:20:48:34:36:47:b2:e0:e5:9a:4d:
98:5c:de:37:5b:da:ae:a9:07:22:1f:6c:54:73:b8:
28:b6:6e:9a:1b:47:53:c9:58:5b:08:46:06:12:41:
a5:73:59:6e:65:e7:b0:52:b5:6b:cf:e6:28:23:cb:
4e:a7:69:9f:29:a4:73:5c:38:da:f6:16:37:3b:b1:
fe:b3:ed:cc:5b:56:d1:e1:c6:90:b0:b7:dd:4a:4f:
16:af:3e:2b:1c:6e:04:d0:9d:e4:14:89:eb:66:9b:
85:1d:53:6f:c2:03:e9:dd:d2:c8:bc:1a:f7:28:df:
e9:1f:25:8d:c5:2d:f4:6b:ca:ac:49:20:75:8c:4e:
46:6f:90:28:93:24:23:d7:f7:e9:b1:79:94:c7:75:
23:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B4:80:9A:10:1B:A8:0C:82:DA:7A:70:F1:46:3A:36:73:6E:8A:C8
X509v3 Authority Key Identifier:
keyid:77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4c:10:9e:d8:7e:7e:74:29:88:7c:0f:09:26:00:86:67:cb:
95:b1:b4:30:e5:07:ff:f1:f5:2f:ec:2e:37:78:cd:83:2d:46:
7b:36:fb:61:72:66:1c:c5:88:31:03:43:cc:5e:9b:dd:6e:07:
50:5a:41:aa:de:36:79:4e:2e:42:d3:fe:1c:a8:b0:45:72:2e:
5f:5e:f6:81:46:ad:89:49:64:d6:17:c9:03:97:90:07:1c:88:
f1:9b:61:0f:c4:c5:b0:fe:82:08:64:f1:f7:d9:e8:5e:23:3d:
15:d9:44:ec:a5:40:8a:92:db:0c:1a:7b:c4:7f:73:f2:58:ff:
62:b0:34:74:36:d6:f1:f2:a6:ea:a8:f7:f1:79:ff:12:82:0b:
b5:a9:eb:82:ba:e6:5d:f9:a3:15:53:77:8e:e8:bf:90:66:1f:
e1:13:f4:56:34:c2:b4:01:9e:05:1f:7f:23:85:cd:6d:0a:b0:
c5:6e:b5:07:3e:93:e0:fe:c3:99:c2:b6:5f:b0:c6:a8:e1:96:
35:a7:a4:bb:6d:b3:9d:66:9c:ba:cc:18:22:97:49:3f:8d:ad:
fd:7c:fd:1c:e0:3b:13:f4:6f:cf:07:f1:fc:09:85:0e:35:f6:
3c:ea:12:81:8a:fa:9c:10:05:80:58:2e:88:93:27:6e:75:06:
6f:ab:5b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:19:21 2026 by rpki-client