Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
File: 7d1hus9lTmZdkSp23o9jtQBMfkg.mft (raw, json)
Hash identifier: Q32rzugKNz+OKvrrgXC9EeDUmirmfa/6XG6lLs9ACkE=
Subject key identifier: D2:3C:8D:C8:89:00:EE:08:C7:06:9F:C8:FE:29:A5:11:FC:E9:71:6F
Authority key identifier: ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
Certificate issuer: /CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Certificate serial: 01A0CDB63207F67D5BC1C8561559B273D066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 10:01:04 +0000
Manifest this update: Wed 23 Sep 2026 10:01:04 +0000
Manifest next update: Thu 24 Sep 2026 10:01:04 +0000
Files and hashes: 1: 7d1hus9lTmZdkSp23o9jtQBMfkg.crl (hash: iClftmNJjf4CQl2lhFNcFrjRCul1oSy3rUfEaPmq+M8=)
2: lBKb95x_7BAv49LYfrO19Hosuas.roa (hash: u8R/9/gVEM8wPOouFpMqLvJteQ0bg4i6gAiI/GzejGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:32:07:f6:7d:5b:c1:c8:56:15:59:b2:73:d0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Validity
Not Before: Sep 23 10:01:04 2026 GMT
Not After : Sep 24 10:01:04 2026 GMT
Subject: CN=d23c8dc88900ee08c7069fc8fe29a511fce9716f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:c3:47:0d:19:49:54:7f:dc:cb:d9:c7:b7:
9c:ae:fc:2e:89:9b:d8:a5:fa:cb:13:08:64:33:f9:
f5:5d:d8:1f:f7:d8:c5:3e:cb:53:8f:69:b4:34:7b:
58:0a:fd:3b:7e:9a:c8:eb:26:56:2c:46:c9:3a:f2:
d3:83:a9:af:13:dd:bd:2d:f0:3e:c7:aa:af:09:a3:
6c:f9:50:e0:f1:2c:35:39:e3:28:78:1f:81:1c:6a:
46:fc:0d:23:61:22:2a:c6:cd:1a:28:2a:37:f9:e7:
29:be:6a:30:4b:c5:d9:a2:0f:cb:ed:12:5f:5c:ce:
f5:67:10:dc:9f:50:06:38:c0:d0:ae:52:79:dd:d5:
ac:e1:e4:6e:14:d6:a0:d8:a6:3d:eb:ac:f5:d4:7d:
e6:c5:c5:b1:c8:47:39:a7:76:eb:a5:45:1c:ff:fc:
ee:5b:10:48:f1:c7:89:8b:cd:a3:83:21:bf:bb:a0:
38:fa:67:ee:82:33:8e:98:f3:69:c1:96:56:80:cc:
50:74:f1:4b:58:1b:82:68:79:23:72:58:f2:bd:98:
a0:2f:ff:d4:84:d4:47:63:ee:07:c9:48:7e:52:97:
c7:d4:b0:b2:04:80:3b:e8:d0:17:b6:5a:6b:14:09:
e7:eb:22:e8:24:dc:6c:9f:6f:dc:5f:7d:00:36:ca:
35:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3C:8D:C8:89:00:EE:08:C7:06:9F:C8:FE:29:A5:11:FC:E9:71:6F
X509v3 Authority Key Identifier:
keyid:ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a4:f0:dc:44:2d:a1:76:b3:17:af:86:43:5d:81:b6:7d:46:
e3:93:5c:ee:41:4b:91:c1:21:5f:22:82:ef:a5:5a:4b:b5:73:
7d:ce:af:e5:1d:66:43:2a:72:e2:12:31:f5:91:a9:5a:36:29:
e7:44:b2:9e:32:5f:96:f2:7d:76:3e:ca:41:72:33:6a:39:20:
7d:a9:3f:ec:6e:b4:6e:7d:6a:b1:bb:00:40:0d:76:0b:98:45:
9d:8a:b6:71:70:75:b4:3f:ab:12:cf:ef:23:8a:8c:11:0e:b7:
a5:9b:9d:a5:f8:0a:c5:2b:20:ba:85:1d:cf:9b:ab:df:48:75:
11:6e:dc:57:7a:98:56:0d:c5:b3:28:86:0d:8b:1d:c1:f7:61:
c1:41:5a:a9:86:e6:a7:50:0c:60:9b:c7:aa:f4:82:69:bf:1d:
e3:8d:5c:3b:4d:b4:7c:3d:1c:2a:f0:f4:d8:db:c6:ef:0b:da:
23:84:84:24:58:14:f9:ee:ed:17:01:b1:a7:05:62:00:45:7b:
f6:a7:7f:7b:c8:68:86:22:71:9b:70:b9:ff:85:40:38:a9:f3:
69:a6:8e:4f:84:8e:f5:13:38:a6:e5:12:15:47:de:81:6c:37:
09:d3:66:27:0b:f3:1d:fc:66:d1:9e:95:bb:4e:82:60:14:d1:
09:b2:9a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:20:20 2026 by rpki-client