Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/c77dfd-2ce6-4f2f-a9b2-2e68903e7cb9/1/p8dSnZiE2jCIq487WPs-Y1F501o.mft
File: p8dSnZiE2jCIq487WPs-Y1F501o.mft (raw, json)
Hash identifier: MogIT5fDhgi7L/4LlgtX4P1J5zNewyushHWp0u4L9gc=
Subject key identifier: E0:4A:43:F5:41:A0:89:26:8D:7C:0F:CA:76:73:FB:1D:5F:1E:7F:CD
Authority key identifier: A7:C7:52:9D:98:84:DA:30:88:AB:8F:3B:58:FB:3E:63:51:79:D3:5A
Certificate issuer: /CN=a7c7529d9884da3088ab8f3b58fb3e635179d35a
Certificate serial: 01A0DFBC8694D511035E96FFCE6894D925E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8dSnZiE2jCIq487WPs-Y1F501o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c77dfd-2ce6-4f2f-a9b2-2e68903e7cb9/1/p8dSnZiE2jCIq487WPs-Y1F501o.mft
Manifest number: 0137
Signing time: Sat 26 Sep 2026 22:01:09 +0000
Manifest this update: Sat 26 Sep 2026 22:01:09 +0000
Manifest next update: Sun 27 Sep 2026 22:01:09 +0000
Files and hashes: 1: 6wwyHetaWlbuQqBi8km0Pln5kLU.roa (hash: NfTKPcEnOPcVeUQUwx5+VFtDZy/ENtzf3n4eNOFkcHM=)
2: RMWx0na57fb4dm5uTmWlaZfAY8o.roa (hash: oMhmDSIeMo2V2QXvcmz5Nm8/bP3iTh98RN6hsLbmoWU=)
3: p8dSnZiE2jCIq487WPs-Y1F501o.crl (hash: trle7qD7Zdi4My2mNOC5q1o9lqBvXt/2XC0RIb20aUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c77dfd-2ce6-4f2f-a9b2-2e68903e7cb9/1/p8dSnZiE2jCIq487WPs-Y1F501o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c77dfd-2ce6-4f2f-a9b2-2e68903e7cb9/1/p8dSnZiE2jCIq487WPs-Y1F501o.mft
rsync://rpki.ripe.net/repository/DEFAULT/p8dSnZiE2jCIq487WPs-Y1F501o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:86:94:d5:11:03:5e:96:ff:ce:68:94:d9:25:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7c7529d9884da3088ab8f3b58fb3e635179d35a
Validity
Not Before: Sep 26 22:01:09 2026 GMT
Not After : Sep 27 22:01:09 2026 GMT
Subject: CN=e04a43f541a089268d7c0fca7673fb1d5f1e7fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:10:01:03:8e:ec:0b:48:36:1e:b4:dd:ad:9a:
2e:04:84:04:b8:02:e8:5a:ec:3a:84:47:de:c0:1d:
8f:91:98:3f:34:8f:5b:73:56:b1:c6:41:b4:6d:ec:
86:ca:ae:72:4a:d9:aa:49:5a:2b:59:c6:54:34:5a:
ac:1c:51:eb:51:41:f4:32:90:7e:82:c3:76:05:71:
1f:ea:72:95:06:27:1f:26:3a:7b:55:32:5e:bd:6f:
d1:4a:1d:cc:bc:e7:bc:b8:28:b5:69:ff:ab:c2:ea:
69:d7:1d:45:42:34:2a:13:3c:e1:f2:cb:f4:24:af:
e1:cf:59:c0:4c:e0:68:30:4d:ff:62:11:50:ed:eb:
f5:09:7c:58:42:48:ca:82:39:15:1f:dd:08:b2:3d:
fb:dc:30:53:cf:e1:55:e3:eb:7f:92:0c:ed:0e:6e:
05:f0:08:46:f7:fa:b6:ea:42:f8:80:22:56:59:bd:
40:fc:1a:dc:b2:55:66:52:20:5f:3a:66:a2:cf:9f:
dd:84:3b:15:d2:ef:a1:60:c0:85:1d:78:0b:93:f8:
87:ff:3e:77:27:ef:4a:fb:c8:d6:a6:2f:35:c0:a7:
5f:2c:e6:26:78:ad:2f:b1:d3:df:f6:f1:5b:48:1c:
34:aa:45:86:26:9b:44:08:15:42:59:4d:6f:d8:94:
10:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4A:43:F5:41:A0:89:26:8D:7C:0F:CA:76:73:FB:1D:5F:1E:7F:CD
X509v3 Authority Key Identifier:
keyid:A7:C7:52:9D:98:84:DA:30:88:AB:8F:3B:58:FB:3E:63:51:79:D3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8dSnZiE2jCIq487WPs-Y1F501o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c77dfd-2ce6-4f2f-a9b2-2e68903e7cb9/1/p8dSnZiE2jCIq487WPs-Y1F501o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c77dfd-2ce6-4f2f-a9b2-2e68903e7cb9/1/p8dSnZiE2jCIq487WPs-Y1F501o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:08:b6:f3:8d:1f:fb:f5:0e:8c:f1:16:5b:ae:c6:a5:50:f7:
b2:02:2e:87:0e:73:73:67:c5:2f:f8:9b:a1:2a:56:90:1b:32:
61:5f:2d:d6:be:fe:b1:04:64:79:18:35:4e:fc:2a:ef:9d:12:
43:42:98:43:9d:2b:44:87:bb:ef:58:6a:68:4c:fb:ea:05:a4:
db:40:ed:f8:ff:65:78:ba:a1:30:10:5a:0f:87:a9:75:0f:1c:
dd:e0:fb:4d:2d:65:46:38:47:9c:54:45:56:2a:39:90:f7:df:
15:09:d8:c3:cf:72:4e:58:8c:2c:b2:08:79:36:70:5e:3e:1e:
7b:b1:e8:31:1d:10:8b:71:62:80:ce:41:7a:7f:be:3d:7d:42:
6c:84:dc:e3:4f:26:72:ab:2a:84:4c:48:46:ac:18:13:ef:89:
b5:e7:2b:0b:9c:97:28:a7:5f:9b:d4:e7:e5:1d:ac:fc:24:c9:
f7:42:fc:5d:a4:54:e2:24:ae:25:48:32:86:cc:81:03:51:a8:
cf:61:81:72:0b:6c:6e:ec:e1:92:48:59:6e:2e:0a:7e:71:b5:
4f:29:35:6f:b0:34:ff:b1:a5:48:4c:b4:a5:b0:99:52:2a:17:
4a:40:63:00:fa:21:ca:13:0d:6a:9a:01:8c:15:9e:4b:2e:f4:
ee:45:f2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:02:01 2026 by rpki-client