Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
File: 977TP_AejgncT-3NAROcDneFSq4.mft (raw, json)
Hash identifier: eIR1K73d1sNwfCv9otUAEDyerw+l+WcgfCzWVkGNpjA=
Subject key identifier: 05:35:3A:8B:DE:4F:54:CE:B9:36:6D:1E:E7:7C:BA:00:5E:E0:A8:2E
Authority key identifier: F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
Certificate issuer: /CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Certificate serial: 01A0CDB644F8A2403349F8BE323D50B8E4DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
Manifest number: 1A72
Signing time: Wed 23 Sep 2026 10:01:09 +0000
Manifest this update: Wed 23 Sep 2026 10:01:09 +0000
Manifest next update: Thu 24 Sep 2026 10:01:09 +0000
Files and hashes: 1: 977TP_AejgncT-3NAROcDneFSq4.crl (hash: R3fUk1u2/CeB6cHptjZbEaLOFJNMnSyN8Dj0JbaIt+o=)
2: K9ARhNUPke1FUpRD3jCOS20cCT8.roa (hash: xemlBpuRtqlzVTp6vvfqrvYIR9l5jVMyrtmPWS3Y4YY=)
3: uGNfdvA7X3WyOFyt75e9tVBH91A.roa (hash: 5//JVVveSwHR2hj+bfwWqReYip5bDufgsCMYkbkcBgE=)
4: w_HVWxfgMKccvm-uPAq_mXE30RI.roa (hash: nRyRk7kTehxIu33cjbfvuUdw6sNcxsEjbFzAJfWoy80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:44:f8:a2:40:33:49:f8:be:32:3d:50:b8:e4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Validity
Not Before: Sep 23 10:01:09 2026 GMT
Not After : Sep 24 10:01:09 2026 GMT
Subject: CN=05353a8bde4f54ceb9366d1ee77cba005ee0a82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:87:e9:0e:ff:b5:85:06:69:39:cf:bb:86:
a0:e4:da:f0:ba:d9:98:62:8c:f5:45:28:ae:80:c8:
ae:d7:99:aa:3d:81:d7:99:72:54:a5:cb:db:ca:2c:
52:df:19:79:54:ec:41:b2:18:94:ac:09:65:35:2c:
f7:5c:f3:59:9b:a1:c3:46:6c:38:b0:4b:c2:c1:33:
93:c1:db:bd:5b:eb:83:23:2d:5b:7d:b9:67:4f:ab:
82:4f:34:df:3f:bf:ee:9f:42:25:35:0c:95:ab:d9:
e4:9e:9a:41:d4:34:f1:cc:5f:7c:9e:9c:e5:ec:95:
7d:6f:0b:49:90:db:3e:3c:8f:18:6a:4e:3e:12:83:
b1:76:6f:fe:90:70:55:f3:63:c6:e8:22:12:41:b1:
a3:b8:dd:d6:75:a2:c5:0f:ec:55:c2:a7:ad:da:d1:
e2:07:7f:f2:7c:8b:f1:85:ae:fb:6f:83:64:79:92:
b5:ec:f8:62:fa:2f:71:3e:41:cb:1c:2a:20:3b:36:
83:c4:25:82:2a:77:75:25:76:6c:96:d1:0b:05:8d:
68:e0:f6:50:3e:5f:54:a5:8f:67:1c:2e:15:02:86:
5e:ee:11:30:a4:8d:d2:c0:e1:1f:ba:5a:4c:ad:0d:
ad:41:1f:d3:1d:72:92:b9:b9:15:e0:be:b6:a0:b9:
a5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:35:3A:8B:DE:4F:54:CE:B9:36:6D:1E:E7:7C:BA:00:5E:E0:A8:2E
X509v3 Authority Key Identifier:
keyid:F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b4:a2:d5:41:c1:09:9e:81:77:16:6d:be:f2:82:ed:2a:e3:
4c:aa:c3:43:86:03:10:6c:4c:11:16:14:b5:09:ed:30:9a:01:
44:90:13:ad:bc:93:85:72:3c:4a:a6:2f:9a:f3:55:b6:2e:d0:
3e:ed:d8:fe:3f:77:5d:10:d5:d0:5c:0c:f3:89:88:a0:e6:ce:
13:9a:f9:15:c0:1c:5a:03:6c:b2:d8:bb:c0:11:a4:fc:ee:f4:
10:a9:0d:aa:17:18:15:82:1c:77:56:d6:77:66:2a:5d:06:4d:
62:9c:a0:b8:27:f3:e7:d5:47:5c:a2:96:94:2b:26:bd:7b:29:
c9:36:bb:df:8d:ca:c7:56:04:af:2b:46:34:1f:d3:84:a6:9b:
e0:da:8c:11:a7:f9:db:b2:ff:84:86:58:df:7a:85:5e:47:8a:
b7:c4:2d:5a:4b:50:95:fe:d8:02:af:65:16:90:ef:2d:cf:43:
06:83:4e:29:17:af:80:a7:95:13:e1:ae:d1:ab:8d:ed:93:c1:
ef:76:af:a8:d0:6e:22:42:03:f9:91:7e:fd:53:a3:40:dc:4b:
42:ce:ef:9d:3a:97:e6:61:fa:8e:23:e8:be:80:69:15:7e:33:
90:d2:4e:d1:cd:6d:17:04:54:98:3a:22:2c:69:b5:17:7f:26:
fa:bb:e5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:14:28 2026 by rpki-client