Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
File: s7b1TqmxWovU8zglOGyyd7A0Od0.mft (raw, json)
Hash identifier: S76GwNi9KYieYnbDqEizYemUCLr9OATDck9r8M/vT+s=
Subject key identifier: 86:30:6B:1A:4C:BB:95:95:4B:2D:1B:96:47:1F:3B:B0:33:62:C6:D3
Authority key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
Certificate issuer: /CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Certificate serial: 01A0D64BF9CF816C8F958E753C81045482A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
Manifest number: 1A77
Signing time: Fri 25 Sep 2026 02:01:38 +0000
Manifest this update: Fri 25 Sep 2026 02:01:38 +0000
Manifest next update: Sat 26 Sep 2026 02:01:38 +0000
Files and hashes: 1: 1--FRY1CjawLnslfsBcAkrouqU6s.asa (hash: NFM53UpFWBl2wcWeqeLFtEIb13ge6QGgn48A2dxQblk=)
2: aftA-bCSN_cfnaumewln08mRqyk.roa (hash: ewCgfj5ZHQWWUV5zhZ6e7KdXcICBairndqt6imFYbD4=)
3: s7b1TqmxWovU8zglOGyyd7A0Od0.crl (hash: TVR+9yvUlX/Xa+ge5RJRL3q31NGyGItzHCtUwzj7WFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4b:f9:cf:81:6c:8f:95:8e:75:3c:81:04:54:82:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Validity
Not Before: Sep 25 02:01:38 2026 GMT
Not After : Sep 26 02:01:38 2026 GMT
Subject: CN=86306b1a4cbb95954b2d1b96471f3bb03362c6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:14:4c:35:a9:09:1e:11:c1:db:a6:34:c7:
95:9c:77:e2:08:dd:0b:02:74:56:b4:d7:1f:79:e6:
21:bc:1d:f7:fe:01:90:53:7c:ad:61:18:10:f7:f8:
d3:b6:81:30:3c:fd:cd:51:80:e4:0e:9e:27:a6:b2:
06:0d:95:7c:a5:2b:a5:d7:0c:f7:0e:56:eb:2f:db:
75:17:82:93:8f:2f:07:00:43:bd:b6:65:c0:91:7f:
6b:36:14:5d:f9:46:47:a2:a8:8c:c9:11:d3:f8:b6:
f0:b8:e3:66:97:f0:8a:87:26:2e:fd:fb:61:76:fe:
00:33:10:17:4b:9c:7a:f2:ba:47:0c:e2:4f:54:8d:
fd:b2:37:92:41:b5:17:6d:b2:33:94:a6:d1:10:11:
cf:a2:b6:7c:01:aa:cd:0b:05:06:60:b3:7e:e6:74:
40:cc:ae:c6:be:ea:92:d5:16:ce:ce:79:80:49:9f:
f2:f6:40:f0:00:04:e2:d7:9c:05:bc:ed:60:53:fd:
d2:33:ac:9e:63:ea:83:21:d2:11:40:0c:96:b9:b2:
6f:ec:91:2e:c6:a7:98:8e:57:b8:5a:8d:d5:f9:2e:
15:cd:60:3e:c7:d0:a3:d0:e0:5d:5b:20:da:7c:68:
cb:50:65:02:da:b2:5a:12:ff:4c:2a:09:46:06:31:
1e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:30:6B:1A:4C:BB:95:95:4B:2D:1B:96:47:1F:3B:B0:33:62:C6:D3
X509v3 Authority Key Identifier:
keyid:B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a6:a4:a6:57:01:a5:b6:48:0a:f4:ba:75:d1:c3:52:84:55:
69:7e:0a:d8:27:7c:bc:3f:6d:ec:e7:7a:3a:e7:d8:d4:0b:ce:
5d:af:b4:1b:a9:c4:9b:55:d5:ed:f3:7d:f8:a4:54:d4:b6:da:
0a:f4:e7:82:22:7a:7f:fa:8f:2f:eb:73:5f:ec:c2:29:e1:3b:
ab:1d:97:45:0a:02:cf:59:ec:95:82:e2:c6:2b:71:bf:79:70:
87:b5:99:20:4c:ad:ed:71:a5:2b:ec:b3:88:4e:46:79:5d:ef:
46:55:43:8b:57:5e:2e:bf:1c:8f:b9:14:20:61:c4:04:02:d7:
ed:7c:b8:e6:a2:df:47:18:b8:9c:b9:3a:2d:17:1c:a0:8b:83:
1a:aa:78:73:04:ea:ca:ed:79:26:a3:38:ac:4e:88:2c:bf:03:
d0:64:66:b6:68:ff:cc:9f:20:5c:cc:dc:6c:0b:ea:59:76:6f:
a3:85:7d:0f:eb:23:4d:1e:13:15:13:30:d4:31:c0:23:aa:41:
15:7d:b5:16:f4:0d:e0:78:67:b3:5e:c6:42:1e:90:a3:eb:09:
42:02:03:0e:13:c2:79:46:7a:2b:b4:f6:be:5d:54:4b:4a:80:
50:b0:a5:5e:e1:f0:1b:09:6a:01:53:02:09:6a:b8:70:24:d9:
11:c9:01:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWS/nPgWyPlY51PIEEVIKoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYjZmNTRlYTliMTVhOGJkNGYzMzgyNTM4NmNiMjc3YjAz
NDM5ZGQwHhcNMjYwOTI1MDIwMTM4WhcNMjYwOTI2MDIwMTM4WjAzMTEwLwYDVQQD
Eyg4NjMwNmIxYTRjYmI5NTk1NGIyZDFiOTY0NzFmM2JiMDMzNjJjNmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg8UTDWpCR4RwdumNMeVnHfiCN0L
AnRWtNcfeeYhvB33/gGQU3ytYRgQ9/jTtoEwPP3NUYDkDp4nprIGDZV8pSul1wz3
DlbrL9t1F4KTjy8HAEO9tmXAkX9rNhRd+UZHoqiMyRHT+LbwuONml/CKhyYu/fth
dv4AMxAXS5x68rpHDOJPVI39sjeSQbUXbbIzlKbREBHPorZ8AarNCwUGYLN+5nRA
zK7GvuqS1RbOznmASZ/y9kDwAATi15wFvO1gU/3SM6yeY+qDIdIRQAyWubJv7JEu
xqeYjle4Wo3V+S4VzWA+x9Cj0OBdWyDafGjLUGUC2rJaEv9MKglGBjEeMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYwaxpMu5WVSy0blkcfO7AzYsbTMB8GA1UdIwQY
MBaAFLO29U6psVqL1PM4JThssnewNDndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdiMVRxbXhXb3ZVOHpnbE9HeXlkN0EwT2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84ZGU0YTMtOGQ1YS00NmIxLWE3MzUt
MmY0NmU5MzE3Y2M2LzEvczdiMVRxbXhXb3ZVOHpnbE9HeXlkN0EwT2QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84ZGU0YTMtOGQ1YS00NmIxLWE3MzUtMmY0NmU5MzE3Y2M2
LzEvczdiMVRxbXhXb3ZVOHpnbE9HeXlkN0EwT2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6akplcB
pbZICvS6ddHDUoRVaX4K2Cd8vD9t7Od6OufY1AvOXa+0G6nEm1XV7fN9+KRU1Lba
CvTngiJ6f/qPL+tzX+zCKeE7qx2XRQoCz1nslYLixitxv3lwh7WZIEyt7XGlK+yz
iE5GeV3vRlVDi1deLr8cj7kUIGHEBALX7Xy45qLfRxi4nLk6LRccoIuDGqp4cwTq
yu15JqM4rE6ILL8D0GRmtmj/zJ8gXMzcbAvqWXZvo4V9D+sjTR4TFRMw1DHAI6pB
FX21FvQN4Hhns17GQh6Qo+sJQgIDDhPCeUZ6K7T2vl1US0qAULClXuHwGwlqAVMC
CWq4cCTZEckBbQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:12:43 2026 by rpki-client