Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
File: r7NIK47C52BYefhTpI26wGFF4bs.mft (raw, json)
Hash identifier: YS+w3rySp4D8n6MTCfCI+P2Djh7wmY9NtJsj9RDvL2w=
Subject key identifier: DD:BA:4D:81:75:F7:3F:E8:F9:8B:96:84:FB:43:51:2A:00:A7:02:CC
Authority key identifier: AF:B3:48:2B:8E:C2:E7:60:58:79:F8:53:A4:8D:BA:C0:61:45:E1:BB
Certificate issuer: /CN=afb3482b8ec2e7605879f853a48dbac06145e1bb
Certificate serial: 01A102ED6EF84B717A8289FC18004A689405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
Manifest number: 0125
Signing time: Sat 03 Oct 2026 18:01:17 +0000
Manifest this update: Sat 03 Oct 2026 18:01:17 +0000
Manifest next update: Sun 04 Oct 2026 18:01:17 +0000
Files and hashes: 1: WBk7Na60wHxHk-VM6akyZtD9s1s.roa (hash: b2ttBqFw9+7/WWlQ+7GOBl/vDcoZ0Tf3cO+FRNRCiVU=)
2: r7NIK47C52BYefhTpI26wGFF4bs.crl (hash: Ll7Wz2YbHsEiAottuwIZc8nWtw7/cEPpU3GI2ypeRB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:ed:6e:f8:4b:71:7a:82:89:fc:18:00:4a:68:94:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb3482b8ec2e7605879f853a48dbac06145e1bb
Validity
Not Before: Oct 3 18:01:17 2026 GMT
Not After : Oct 4 18:01:17 2026 GMT
Subject: CN=ddba4d8175f73fe8f98b9684fb43512a00a702cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:92:c7:b1:44:db:7f:b9:2d:34:35:3c:d7:09:
f2:9c:ae:86:75:7c:58:58:84:3f:4b:6c:f6:4a:c1:
a0:8a:42:31:68:21:31:17:3b:af:9c:ba:ab:30:91:
d1:b8:14:39:47:a7:6c:a7:4c:95:db:5a:e0:ef:3e:
a7:38:9f:9b:55:1b:ff:da:64:b5:35:79:1b:06:f3:
39:ff:d8:5c:44:c5:f5:b2:c8:89:5b:90:d9:13:a1:
bd:e2:47:2f:ec:67:1d:f4:7d:04:28:6f:33:69:74:
a0:cf:68:7a:f4:48:92:96:64:a1:5d:ec:04:8b:bd:
04:4a:7d:a7:f3:51:11:45:99:74:d2:9e:5b:3d:51:
e4:fe:d4:b1:98:ba:fe:97:4f:4b:ee:ba:8f:fc:96:
2a:3c:ea:86:eb:c8:50:53:65:a3:b8:70:55:5f:55:
79:6d:67:e1:ee:f0:bb:0f:05:c4:be:6c:77:bb:e4:
f6:03:5f:90:30:b1:33:f2:71:ad:59:ee:15:67:1c:
d4:c9:8d:1a:46:d0:2c:d7:f6:06:a9:26:31:39:9b:
ff:75:24:53:4a:60:20:76:b9:24:cd:78:f1:93:6d:
d4:9f:64:93:b6:59:8d:95:89:15:08:5b:4a:98:69:
5c:a0:30:54:17:92:1f:b4:9e:6b:46:95:0f:6c:30:
96:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BA:4D:81:75:F7:3F:E8:F9:8B:96:84:FB:43:51:2A:00:A7:02:CC
X509v3 Authority Key Identifier:
keyid:AF:B3:48:2B:8E:C2:E7:60:58:79:F8:53:A4:8D:BA:C0:61:45:E1:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e4:61:52:47:40:11:9d:f3:68:76:63:3d:77:be:fa:96:5f:
bd:c0:3e:3f:2b:8d:f1:4b:a8:08:3d:08:89:e6:1f:b8:4f:15:
5d:a5:1c:9a:54:9e:21:2d:cf:b2:11:08:ac:f3:6c:e0:ee:41:
76:19:97:70:8f:66:c5:4f:b0:d4:6c:82:4e:3d:2a:c9:74:d6:
1c:80:f6:f9:99:ff:8a:fe:83:2b:78:18:09:a5:b9:9e:05:80:
82:a6:33:20:04:bf:1c:77:42:c3:5f:01:8f:80:a8:9c:1a:d6:
f5:15:ec:ce:ac:ac:9d:25:ac:7e:6d:b4:82:6f:8a:2a:66:7a:
47:4c:4c:61:c2:6b:a7:67:e1:5a:03:b4:aa:95:3f:4d:c9:1e:
67:50:70:5e:89:df:61:2a:25:05:cb:2d:fd:b9:9b:87:dc:17:
a9:e0:b5:77:40:1d:88:2d:aa:d7:e6:2e:ab:a9:2e:6a:e3:42:
df:49:21:37:91:1a:c7:c3:f7:b4:39:f5:8e:c7:c3:78:3d:22:
4f:d3:70:15:1f:cd:ad:5b:b6:f8:48:6d:49:c2:be:94:29:a4:
5f:02:f8:d7:72:ed:e3:65:90:ed:e2:f4:2f:8c:ca:cd:96:8e:
68:86:40:d7:89:59:5b:e5:f3:ea:65:b7:e7:da:a0:14:7b:ed:
24:8d:48:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:30:11 2026 by rpki-client