Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
File: d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft (raw, json)
Hash identifier: 77bMcl/4CyYWHh1FrBa/9CRQksSBM/V45fP+2gMKQtA=
Subject key identifier: 9C:56:DD:34:C7:8A:DF:DA:71:3B:33:FE:A2:57:10:E2:ED:4F:88:9A
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial: 01A0CDB5C3998B8C1E85CA391F20335E2EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
Manifest number: 1247
Signing time: Wed 23 Sep 2026 10:00:36 +0000
Manifest this update: Wed 23 Sep 2026 10:00:36 +0000
Manifest next update: Thu 24 Sep 2026 10:00:36 +0000
Files and hashes: 1: 0gkjksOno670ocIFMbRjSDKIvKQ.roa (hash: 7fdQyOsucl3w/CcG9UB31TgK1ZGG4pW/88lMHFnh6NI=)
2: 91KPHlggwTaeQm7B9Z-AqzP9EBQ.roa (hash: IkXK2vJL4pQnTxIekZE8OSCq0z8UL2BTuoyyjhTkN4c=)
3: QcWwPEpe-P-scFp6iy4Zd8jPfjk.roa (hash: n7+TsjKCJzLkUr9shTyI7r/icRNSvOD74GCCpk5ZSUI=)
4: SOoKX4cNuYJIPao636suM6QbecU.roa (hash: AmP+tcOlMZhqBPlPO/PnVy1DrGZoadzcvOYUXfRfWD8=)
5: Tz7z7nnpOo-_7_49pU8TRQgx4D4.roa (hash: fX3u4dH9kXlBUEKXajJ7/RMZrYzYaBeRsNw5GTo8Vhs=)
6: d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl (hash: 8scEvA1tV65jPoxhfIAOr5Sk0a7dtdD4GelY8Vm4YZo=)
7: qBcLlywaD6m7lZXiWermZkxeWVc.roa (hash: auQTPfDUcRzWJ8RTz3z6nOVCI/Q9IjlAOX2YpbeFNMA=)
8: ve-jf9EP-jZkCjaun2Gx06psfDo.roa (hash: 5muddW+OaJvatwuoYErV6aaVeMSYh2Ga8iL+J5a6G3k=)
9: xdAaexAUdUDttJM21F7tUlAz2vs.roa (hash: VedRkQ44jOEPcPIUd0dHiyi/hpTJ8KF1xUzmzLpT6Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:c3:99:8b:8c:1e:85:ca:39:1f:20:33:5e:2e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Validity
Not Before: Sep 23 10:00:36 2026 GMT
Not After : Sep 24 10:00:36 2026 GMT
Subject: CN=9c56dd34c78adfda713b33fea25710e2ed4f889a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:c9:b9:33:fc:a4:2d:d4:c8:3a:2b:ff:4f:
09:4d:54:b9:76:80:18:94:2f:08:78:f3:ed:7c:06:
0c:a7:c2:a8:9a:5b:ed:ed:6c:56:85:42:2c:06:90:
3a:ad:cd:7a:2b:17:60:ab:4f:c2:67:66:d5:74:01:
35:4b:bc:22:e1:b5:54:74:5b:8f:16:69:3c:9f:b6:
d4:b2:73:ea:28:3d:f4:27:7d:68:85:75:c7:1c:3a:
5d:00:3a:6d:88:18:eb:7a:65:b8:cc:7e:bf:7d:bc:
e7:14:97:22:a5:0f:e6:54:40:16:20:d5:95:e5:89:
2a:42:90:1a:2a:55:2b:bf:d9:1f:8d:24:e3:81:5c:
e6:62:fa:38:bf:d5:ff:c3:6f:19:ce:ff:64:ab:ff:
2a:da:67:01:d3:c5:ff:62:11:eb:04:93:ef:3b:53:
ba:e5:ba:54:80:60:07:c5:b4:dd:39:7f:8e:3a:16:
9a:7f:4f:88:7b:a4:af:82:b7:f9:a0:89:b5:03:c2:
4d:9f:24:6a:62:19:d3:91:aa:0f:70:79:8a:06:79:
2b:31:2a:8d:0f:47:bb:96:17:20:cd:51:0e:57:3a:
f1:56:02:71:85:60:e0:2a:ae:5f:df:76:23:e6:d5:
af:c7:0b:c2:0f:a9:36:ee:30:3c:2e:54:4e:a7:89:
10:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:56:DD:34:C7:8A:DF:DA:71:3B:33:FE:A2:57:10:E2:ED:4F:88:9A
X509v3 Authority Key Identifier:
keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:17:71:05:1b:69:8e:bd:b2:b6:25:0f:32:be:2f:1b:8e:5e:
36:18:ef:35:72:df:b2:7f:ed:87:03:6b:d5:06:47:50:7b:2f:
e5:fd:7e:15:3c:f5:22:35:db:d9:c5:09:0a:d5:bb:64:04:a4:
90:70:e4:29:5d:56:77:9d:9f:7b:dd:52:01:9b:6a:6e:12:6c:
68:31:01:6c:a8:22:63:45:43:62:73:65:89:37:57:be:94:d2:
c6:d0:38:6a:69:b1:88:59:f2:cd:dd:56:66:ce:98:21:e3:ed:
ca:59:a8:bb:1e:f9:8f:9b:71:f4:b9:fa:d4:8b:ab:78:07:c2:
a0:c5:88:64:9e:b6:2b:4a:c3:76:d5:68:8d:02:8e:1d:1e:c0:
a7:d5:56:e4:65:87:a8:6c:f6:90:c7:41:7c:f1:da:c0:18:11:
4f:cc:2b:7a:67:9c:d3:1f:11:7f:41:27:67:f8:f1:da:5b:68:
ed:45:7e:56:a8:ba:d5:c8:57:6c:a9:d8:64:cb:32:4c:6a:a1:
a3:1f:a0:f9:c1:e6:97:c2:d5:4c:45:b7:61:f2:35:72:d4:81:
a3:67:b5:bb:69:a3:52:d0:a9:e6:31:2c:24:46:68:fc:1f:d1:
3a:6f:b1:60:74:48:f2:b1:1a:d0:ae:ec:76:38:50:b9:cc:2b:
9f:60:a3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:43:29 2026 by rpki-client