Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
File: g7d8noEHbPS0zv7V7vIQf3UsNjA.mft (raw, json)
Hash identifier: W343X6aRqBkgwyOCPaYMVm0BIKKpQkYBB1IDZDSDZbc=
Subject key identifier: 18:68:81:2C:E3:A9:8E:E2:56:FF:41:84:66:3C:32:26:F1:DB:BE:67
Authority key identifier: 83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
Certificate issuer: /CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Certificate serial: 01A0DB04A52E0268ECE2B1C5B3F8A0E80154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 00:01:49 +0000
Manifest this update: Sat 26 Sep 2026 00:01:49 +0000
Manifest next update: Sun 27 Sep 2026 00:01:49 +0000
Files and hashes: 1: GHGkwEVylqYxr15hWfLzxHp9MA0.roa (hash: 6MgKNZ/wr6UP8/R75FjFSF75c2qdb4J/GZr8B0Cgj+s=)
2: g7d8noEHbPS0zv7V7vIQf3UsNjA.crl (hash: nTja/uD5Qzd6lB/SU3Hvo/frckIQV0fMnzGjx89WDTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:a5:2e:02:68:ec:e2:b1:c5:b3:f8:a0:e8:01:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Validity
Not Before: Sep 26 00:01:49 2026 GMT
Not After : Sep 27 00:01:49 2026 GMT
Subject: CN=1868812ce3a98ee256ff4184663c3226f1dbbe67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b7:ff:fe:04:69:4c:e0:dd:f6:c1:f5:ed:ab:
f3:44:8b:57:ad:83:b3:ed:62:85:0e:1e:97:50:f4:
e1:3e:c9:fb:62:56:fc:08:e6:ba:af:c6:3e:61:f2:
e1:21:84:e3:49:ae:cd:80:7e:19:12:7a:4c:ab:d1:
c8:59:c1:96:e8:b2:b6:a8:43:fa:5c:6f:af:fd:2d:
55:49:40:21:a2:d7:df:0e:e0:d1:ce:57:8c:65:1a:
0d:1a:c5:0e:c8:98:b6:1f:d1:1a:55:51:f8:24:a0:
3f:8a:1e:5f:4e:41:80:c1:9b:30:f5:10:a5:04:86:
e9:54:41:2c:a3:d4:45:00:ae:d7:dc:b3:d3:92:57:
ec:32:d4:ba:c0:84:be:47:01:b9:32:73:ee:2b:08:
7f:29:eb:d5:80:e1:22:3d:7c:09:ac:a8:af:41:c3:
50:ab:8d:25:94:19:8f:91:39:43:77:49:1c:3c:54:
09:3c:d7:08:6f:e2:15:a7:d7:2a:f4:6b:ea:94:67:
dc:e5:9e:21:3a:55:ec:42:a0:00:11:07:9d:0a:11:
1d:16:5e:ac:85:55:6b:74:e2:94:ef:6e:eb:91:c6:
0c:70:da:7b:6c:68:4f:01:1d:08:39:2f:a2:4f:d7:
7c:ac:83:6a:e8:46:35:6e:5a:04:e0:d9:5e:79:1f:
02:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:68:81:2C:E3:A9:8E:E2:56:FF:41:84:66:3C:32:26:F1:DB:BE:67
X509v3 Authority Key Identifier:
keyid:83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:06:82:d6:01:d3:20:8c:0c:e2:88:20:83:8f:25:c3:3b:fb:
4e:09:aa:18:fa:ed:87:16:5a:7b:f7:63:50:7d:21:67:7c:9b:
5a:b2:ca:32:19:66:17:78:57:97:2d:28:15:99:d5:69:5e:75:
32:ed:5f:3d:69:ce:20:c1:63:89:d9:44:5e:2f:6c:7c:a9:7b:
dc:e5:7c:e2:62:12:3b:28:94:29:90:99:86:80:28:af:d2:98:
6d:15:45:3c:8a:8e:48:db:fc:5c:29:af:8c:c2:66:82:4c:7a:
9c:73:ec:c1:ad:a5:b4:ad:b5:15:3c:de:d6:5d:99:d6:20:a1:
16:c7:d9:39:a9:f9:8e:2c:9c:67:0c:46:7d:cc:64:95:6d:a9:
50:7f:53:20:0b:1d:37:2e:b4:28:91:fa:18:41:94:f9:a9:6a:
e2:61:51:29:e5:d0:4e:18:c8:59:2d:10:82:3f:38:6f:31:84:
a6:d8:d0:d4:67:3e:3f:3f:35:82:35:3d:2d:3b:cd:db:c0:28:
97:13:e0:7a:4d:ae:41:b4:64:8b:89:da:2c:53:1d:83:58:be:
17:f0:44:dc:32:13:43:d4:3a:7c:ab:a9:c3:83:2d:db:07:51:
ff:12:be:9b:d4:56:f4:0a:c5:49:54:22:67:3e:53:54:10:22:
35:24:1b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:45:01 2026 by rpki-client