Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
File: rZr63kGDroAEjWuEgY7sRvaA-iY.mft (raw, json)
Hash identifier: 87F3sRZPYJD+B2HLB7moakK1kNHKFiD6GFZmonkc1c0=
Subject key identifier: A7:7C:E4:7D:9D:4B:48:2F:A5:69:C2:72:90:B4:BC:51:E9:1C:A4:A3
Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
Certificate issuer: /CN=ad9afade4183ae80048d6b84818eec46f680fa26
Certificate serial: 01A0E061DE6DA8B46ECEF8891DA14A93E1C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
Manifest number: 18A7
Signing time: Sun 27 Sep 2026 01:01:45 +0000
Manifest this update: Sun 27 Sep 2026 01:01:45 +0000
Manifest next update: Mon 28 Sep 2026 01:01:45 +0000
Files and hashes: 1: YhV2RPOqPZXVdAMRyoGhsYcqg5o.roa (hash: +2OSyQukbn8Ac2KWdiYjJtwI1C2RFg/LbfJyv2kiAaQ=)
2: rZr63kGDroAEjWuEgY7sRvaA-iY.crl (hash: o3FZsDBHl+rHHkROCIbBi2qAZxPTCDmdS0B7XRJRLu8=)
3: zymQ8lQH58g9kZdGDaCuBYAYQI4.roa (hash: UsBi140YQptoK8CMotM0bOiYKyUZpHcPLjWyz1MACI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:de:6d:a8:b4:6e:ce:f8:89:1d:a1:4a:93:e1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26
Validity
Not Before: Sep 27 01:01:45 2026 GMT
Not After : Sep 28 01:01:45 2026 GMT
Subject: CN=a77ce47d9d4b482fa569c27290b4bc51e91ca4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5b:ba:bd:a3:d9:45:9f:99:88:ea:be:25:ad:
c4:4f:96:5f:1b:ad:a5:72:da:6e:fb:40:c0:e5:b9:
72:3d:dc:10:8e:a6:54:f8:e0:aa:36:1d:c5:00:77:
9c:14:24:b8:fd:aa:94:a4:39:b0:4f:fe:91:af:93:
55:32:22:87:a5:fe:69:a6:7a:41:25:22:a9:54:2d:
42:f6:e4:11:06:4b:b9:26:3b:4a:a2:db:6a:3b:c0:
c6:7f:40:fc:88:0a:df:25:24:b7:a3:60:d3:d3:a5:
d3:33:60:26:fc:88:9f:66:d8:36:e0:98:66:90:15:
82:67:0a:f1:24:fc:b3:a2:4d:d5:32:c0:44:46:d8:
29:28:ff:2f:fc:7e:fd:5e:9f:4a:80:ef:55:c8:8f:
67:8e:f4:75:2b:9d:05:9d:04:c0:c3:47:d9:7e:c4:
41:0a:3a:8c:30:cf:f3:51:2c:20:88:d9:09:a5:5a:
08:45:b9:77:a5:17:56:98:db:6a:24:5f:39:96:bd:
54:52:c4:c1:f5:27:82:ff:e0:80:4e:ca:fe:07:54:
28:05:63:f3:c9:6d:a7:91:2e:9f:52:ee:cf:ac:2e:
3e:71:e3:d3:3e:5d:5a:66:ca:a4:26:2f:7f:2a:48:
91:b2:e6:d7:82:2f:8d:6a:cb:68:d4:1b:bf:db:cc:
8a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7C:E4:7D:9D:4B:48:2F:A5:69:C2:72:90:B4:BC:51:E9:1C:A4:A3
X509v3 Authority Key Identifier:
keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2d:e8:c6:cc:f5:5b:d2:d0:9c:cc:96:b2:63:03:db:0d:50:
cf:98:9c:da:00:91:4d:00:83:2a:7c:3b:fb:80:f4:ee:0a:49:
e1:5c:3b:5d:33:04:c4:6d:1e:4f:8b:88:ca:57:99:22:19:9f:
0c:2a:d2:e9:fb:80:3c:01:8f:06:3a:f6:42:f6:53:0e:c8:0a:
d0:ae:af:e6:57:bd:10:08:57:12:92:e4:58:7f:fb:56:50:29:
7a:88:72:62:7e:72:3e:52:11:bf:a6:65:d9:43:de:c9:0f:3c:
4c:c8:1a:29:92:c1:10:fd:7d:3f:7f:c0:f6:b7:fa:b9:2f:57:
58:f7:8d:71:73:8d:bb:4c:23:e3:d2:36:dc:86:64:fe:4a:bf:
df:a5:67:53:4a:47:41:8f:63:fc:f3:47:17:92:58:99:4e:25:
c4:0c:2c:86:f2:94:62:92:3b:7d:dc:87:4c:f7:ba:9e:4b:eb:
96:24:fe:36:93:ee:d7:f5:98:53:13:f0:61:33:61:77:4d:06:
a6:3e:01:d0:ed:39:bc:9a:b5:06:3f:c1:b6:f0:f0:95:52:5e:
5c:8f:c5:88:ad:46:7d:8d:3f:41:92:d4:a6:e9:f5:0d:da:7a:
20:06:4b:9d:12:d3:f6:e8:cf:88:0e:bc:d7:2b:f3:78:d9:bb:
49:46:9e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:15:51 2026 by rpki-client