Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
File: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft (raw, json)
Hash identifier: kQD8TGNKp+Elx5sOGxRZ287RmBx8O0AdgmM3SlIDcf4=
Subject key identifier: C2:97:2C:FB:C4:BB:E5:92:CA:09:8C:0A:F7:5E:F6:8E:B5:AF:9B:3C
Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
Certificate issuer: /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Certificate serial: 01A0E098A857D2C41BEEE5A5216A4B71A26D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
Manifest number: 1A76
Signing time: Sun 27 Sep 2026 02:01:35 +0000
Manifest this update: Sun 27 Sep 2026 02:01:35 +0000
Manifest next update: Mon 28 Sep 2026 02:01:35 +0000
Files and hashes: 1: F13QQirUcyQJSbRfCl6w_cI9WWQ.roa (hash: Qmtb36fS7mGPq7TyueOpeM3xtlJooopxzuWWdKo+FIo=)
2: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl (hash: E7TLEubu6NFCZD2ycUEepivohPUa03CD+2Ljt0SFSkc=)
3: yXL2c-lh8z3Pu6QXVoEmuyvEfX4.roa (hash: yk0yZqIR3aCNm4M9eEBAKHg+9JBzxKPA8wbCVYP14nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:a8:57:d2:c4:1b:ee:e5:a5:21:6a:4b:71:a2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Validity
Not Before: Sep 27 02:01:35 2026 GMT
Not After : Sep 28 02:01:35 2026 GMT
Subject: CN=c2972cfbc4bbe592ca098c0af75ef68eb5af9b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:cd:fe:16:ff:88:97:59:24:b9:e9:6b:b3:
b0:6d:2c:84:dc:58:53:2c:ce:47:4f:7f:03:d0:c8:
0a:cc:7d:1a:dc:60:1b:77:18:63:a3:66:df:50:23:
5c:5e:3f:e9:90:bd:24:e7:73:16:a0:9e:fe:df:25:
d2:a1:76:0e:a1:84:63:a3:b0:ea:68:7f:e2:95:3a:
73:2d:cc:40:8e:92:39:80:83:3a:88:b3:4d:f3:2b:
41:06:17:f0:6c:28:72:94:19:04:0a:db:ff:70:5e:
91:ea:98:79:30:44:20:e5:0e:5c:28:10:2a:e0:09:
56:8b:fe:fd:84:09:59:f8:00:44:3b:c6:f7:fc:a7:
0b:47:fb:99:3d:18:d4:e8:e2:bd:4e:0f:4c:1a:27:
31:4b:d7:fe:5c:8d:3f:4f:4a:e3:fe:f8:61:c1:5a:
c1:71:fe:f4:66:28:98:b5:f1:98:90:0f:54:c7:9d:
bd:1e:9e:0c:c7:1e:02:0d:10:5b:6d:3c:ea:44:0a:
8b:24:a8:0b:cd:5c:6d:1a:03:d5:03:de:90:02:e8:
52:96:15:91:75:99:93:b7:ea:27:e4:31:c9:09:46:
03:d2:ff:fe:eb:c5:3d:25:13:bb:ce:9a:9e:1c:de:
d4:5e:82:f9:5f:34:06:9e:2d:e1:81:68:99:7a:f5:
0a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:97:2C:FB:C4:BB:E5:92:CA:09:8C:0A:F7:5E:F6:8E:B5:AF:9B:3C
X509v3 Authority Key Identifier:
keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:96:34:b5:5f:a3:88:ff:29:43:07:6b:84:59:96:4e:be:bc:
de:a7:5a:b8:0c:d0:df:ff:bf:14:98:ad:0b:87:ef:a2:4b:ac:
7b:ea:a3:20:90:e6:9d:23:4e:13:df:e8:e6:2b:0f:aa:8b:ec:
b5:97:e7:c0:cc:78:f7:0b:d1:a7:22:f2:ee:f3:c1:8f:12:44:
9a:fd:bf:6b:7b:af:2a:87:77:c9:e3:bb:ab:f6:8f:49:4a:52:
73:c1:63:3c:21:b4:80:a0:91:4a:43:1c:74:02:55:e6:13:6c:
9e:a7:30:df:56:41:1f:e2:b7:ec:1f:c3:28:89:f5:4f:63:7c:
94:67:6c:22:02:91:ee:9b:46:85:66:2a:05:00:eb:25:5e:f6:
8e:92:a2:0a:24:50:74:a9:55:2d:c7:d6:27:59:28:97:0e:51:
a3:06:a5:0b:92:07:91:5b:24:a0:3e:00:b7:4f:b3:02:3b:53:
2b:65:76:06:ec:f4:f5:3f:e5:28:cd:77:87:cd:6e:89:fa:02:
b6:e8:ad:0f:fa:90:23:8f:4a:ac:e1:15:a3:02:29:98:c9:68:
7c:03:89:7e:5c:db:14:99:f9:6b:9f:7a:7e:8c:40:e6:31:ac:
51:db:25:13:4d:3e:5a:3b:3d:89:2b:0c:27:c2:9d:fd:a2:08:
4e:be:e9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:13:08 2026 by rpki-client