Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
File: d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft (raw, json)
Hash identifier: H013DNKbz6YkVsseMqvZr0Ivm5cO06E/yvuBrgywTPY=
Subject key identifier: 21:C4:3B:D2:79:3F:04:AA:E0:F7:71:BE:3C:FF:97:5B:89:98:39:53
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial: 01A0D38346ED46A5A1B51D5021B7F0DE94D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
Manifest number: 124A
Signing time: Thu 24 Sep 2026 13:03:10 +0000
Manifest this update: Thu 24 Sep 2026 13:03:10 +0000
Manifest next update: Fri 25 Sep 2026 13:03:10 +0000
Files and hashes: 1: 0gkjksOno670ocIFMbRjSDKIvKQ.roa (hash: 7fdQyOsucl3w/CcG9UB31TgK1ZGG4pW/88lMHFnh6NI=)
2: 91KPHlggwTaeQm7B9Z-AqzP9EBQ.roa (hash: IkXK2vJL4pQnTxIekZE8OSCq0z8UL2BTuoyyjhTkN4c=)
3: QcWwPEpe-P-scFp6iy4Zd8jPfjk.roa (hash: n7+TsjKCJzLkUr9shTyI7r/icRNSvOD74GCCpk5ZSUI=)
4: SOoKX4cNuYJIPao636suM6QbecU.roa (hash: AmP+tcOlMZhqBPlPO/PnVy1DrGZoadzcvOYUXfRfWD8=)
5: Tz7z7nnpOo-_7_49pU8TRQgx4D4.roa (hash: fX3u4dH9kXlBUEKXajJ7/RMZrYzYaBeRsNw5GTo8Vhs=)
6: d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl (hash: xZ+Dw7YdmymwFMODPuwp6yNusSSC6Gv9sbyg+vPxZUA=)
7: qBcLlywaD6m7lZXiWermZkxeWVc.roa (hash: auQTPfDUcRzWJ8RTz3z6nOVCI/Q9IjlAOX2YpbeFNMA=)
8: ve-jf9EP-jZkCjaun2Gx06psfDo.roa (hash: 5muddW+OaJvatwuoYErV6aaVeMSYh2Ga8iL+J5a6G3k=)
9: xdAaexAUdUDttJM21F7tUlAz2vs.roa (hash: VedRkQ44jOEPcPIUd0dHiyi/hpTJ8KF1xUzmzLpT6Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:46:ed:46:a5:a1:b5:1d:50:21:b7:f0:de:94:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Validity
Not Before: Sep 24 13:03:10 2026 GMT
Not After : Sep 25 13:03:10 2026 GMT
Subject: CN=21c43bd2793f04aae0f771be3cff975b89983953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:d4:fe:48:59:1c:29:04:c2:d8:a2:e7:c8:
d1:9b:d3:30:49:d1:5e:10:d1:0f:0d:b1:fa:b3:5b:
2d:62:a1:70:1c:ff:46:83:7b:17:b4:ad:4e:66:27:
9a:95:3d:dc:81:5c:8f:fa:03:82:e4:ef:74:d3:5a:
65:5e:59:17:37:d3:e7:ac:15:95:b0:28:8e:1c:ba:
70:84:45:66:2b:2e:1b:25:ac:6b:b9:74:0d:13:a8:
d6:79:63:26:1d:1a:0f:d9:d8:c3:cb:7d:21:fa:81:
18:6f:ce:42:78:e3:12:d2:f4:6e:45:64:2d:14:51:
4f:8e:c8:aa:ed:90:4e:f9:48:cc:cb:8a:5f:18:97:
e5:06:6e:f8:98:60:70:c2:fa:e3:11:7f:c5:e3:c7:
cc:21:cf:d9:96:e8:99:9d:45:3c:31:bd:ff:d9:0b:
4c:f3:47:58:6a:6e:47:1b:7f:a0:dc:e6:82:96:2a:
cc:05:06:c0:ba:42:11:a8:54:52:80:10:1a:13:c8:
91:06:a0:9f:c2:dc:54:c0:73:cb:d8:91:f8:39:63:
33:66:98:4f:97:47:cc:37:56:14:1f:99:de:fe:bf:
81:4d:2d:e0:00:a2:8a:1f:74:93:d2:63:a2:ae:be:
a4:6e:f8:a6:5a:7c:b3:27:36:74:59:a7:9d:be:f2:
c0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C4:3B:D2:79:3F:04:AA:E0:F7:71:BE:3C:FF:97:5B:89:98:39:53
X509v3 Authority Key Identifier:
keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a7:f7:6e:46:01:76:b3:ad:63:a5:2b:88:de:7d:fd:ad:75:
d5:62:32:a5:e7:42:0e:d2:e6:de:47:9d:71:ca:7b:10:13:05:
a7:34:a1:4f:13:1f:12:ca:0e:63:be:c9:fa:fe:77:a5:23:71:
72:5e:e2:fb:11:8c:d0:e4:5f:f2:90:17:94:42:15:26:8a:9c:
88:50:4e:49:74:49:0d:a2:de:9d:5d:75:8f:c1:02:9a:76:69:
5e:8b:f4:36:ea:44:36:75:5e:49:d2:de:ca:82:97:32:85:8c:
7a:f0:47:31:2d:1a:b7:77:f5:7b:5f:17:f9:1b:84:37:e8:31:
91:13:09:d6:d3:4c:7d:f0:c3:d1:d5:76:1f:86:c4:b8:fa:c3:
4d:ee:8b:ea:09:d4:f2:28:3d:49:6b:ec:66:5d:a3:93:fb:93:
72:2f:75:78:55:9d:ea:5e:f2:9d:99:2f:81:58:a9:1c:a5:f5:
ab:8e:37:47:a2:72:71:ab:e4:b5:36:1f:9f:27:6e:2d:9e:13:
92:bb:26:45:0a:fe:04:a4:ba:5f:a2:48:b7:f1:2a:e4:c2:8e:
92:3c:34:21:70:6e:7d:02:01:9b:bc:db:2e:7e:8f:89:46:81:
04:99:ce:19:13:d4:be:06:55:7c:10:a7:1c:78:d4:98:b2:f2:
89:a4:bd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:54:20 2026 by rpki-client