Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
File: d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft (raw, json)
Hash identifier: VpOvTBcbCx5OoLcys9riDQ/QsytastgGvH9aewLe0S0=
Subject key identifier: 4C:02:F7:B9:5D:56:36:C5:96:EA:C3:E6:AB:3F:21:E8:E9:AC:B4:E4
Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
Certificate issuer: /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Certificate serial: 01A0E2BD9098A0DF753F08AD0A9C79D5EC56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
Manifest number: 167B
Signing time: Sun 27 Sep 2026 12:01:09 +0000
Manifest this update: Sun 27 Sep 2026 12:01:09 +0000
Manifest next update: Mon 28 Sep 2026 12:01:09 +0000
Files and hashes: 1: _wLbQqpNFVUZXfwkKPHS2EvNsME.roa (hash: b13XNsSSVdJxlN2jmJcwJ/ExmpGXyR6dAM9BzylibwA=)
2: d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl (hash: nCMjiz+KJ6h21ZFx8ngbEWH3DUcfZ3t83mIHyxOAB1Q=)
3: k3fmZjh5Nd4d9i-yTk1YzO9a-ow.roa (hash: mS6dHnW2WbLdF67XEsAw2GyVUdDMoZ8sBWqhN+eeuMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:bd:90:98:a0:df:75:3f:08:ad:0a:9c:79:d5:ec:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Validity
Not Before: Sep 27 12:01:09 2026 GMT
Not After : Sep 28 12:01:09 2026 GMT
Subject: CN=4c02f7b95d5636c596eac3e6ab3f21e8e9acb4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ba:1a:77:9b:b8:ba:0e:1f:b1:62:61:0c:d2:
ee:01:0b:15:ab:2b:f7:e9:ac:d1:79:56:2c:a7:09:
df:02:09:ae:e0:01:c8:c4:93:1f:2b:b0:c5:cf:46:
be:ff:94:97:da:7a:21:bd:ee:07:b9:1c:e1:39:4f:
96:7a:a0:87:08:6e:84:5a:2a:d8:cf:ac:dc:ca:a4:
77:10:8b:36:68:8c:61:48:eb:cd:64:e6:32:ff:d8:
4f:d7:d5:7c:77:b5:08:77:a0:92:a3:16:8f:d6:5e:
75:7d:ed:50:6f:ad:eb:19:30:f7:a9:63:25:ee:63:
9a:04:51:bc:d6:9c:40:e3:62:54:b2:3d:17:03:38:
57:b7:a3:e2:c5:13:2c:ce:ab:06:06:d0:f3:70:e4:
7d:c8:b1:35:99:ae:53:20:22:4c:f8:47:4f:84:11:
3a:de:9f:16:d1:5c:3d:4f:59:56:b7:ec:ff:ec:be:
95:42:81:68:09:cb:d5:49:82:98:bb:20:e7:f1:20:
0b:77:5b:96:83:44:fe:c9:07:60:29:68:65:c3:6b:
e1:bf:27:f8:6e:cb:7f:2e:5c:fe:d1:9a:e4:ba:79:
59:a5:e4:bb:05:a0:1b:7c:ef:22:04:16:1a:56:5b:
57:34:81:65:12:03:e8:18:0d:06:44:30:07:32:92:
9a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:02:F7:B9:5D:56:36:C5:96:EA:C3:E6:AB:3F:21:E8:E9:AC:B4:E4
X509v3 Authority Key Identifier:
keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d8:39:1f:d2:fb:94:86:77:7c:54:5f:f6:2f:37:5e:b2:d3:
1a:fe:43:c2:70:9a:76:da:39:ed:90:b6:24:c2:39:44:02:7c:
c4:04:5c:ae:86:23:86:6d:ec:e5:91:bf:73:c8:6f:30:21:35:
af:09:95:c1:4a:31:72:c8:93:92:73:2f:d0:51:5a:85:61:7d:
3f:19:6a:f2:ec:d1:a5:cd:50:a9:0b:6c:9f:bc:3d:d0:97:9a:
90:cc:17:2c:04:c3:00:fa:95:7c:06:96:ac:dd:66:9f:31:b5:
be:75:a1:2b:9e:7d:e3:95:c6:9d:99:f0:8c:1b:a3:a7:92:ca:
52:8e:57:47:14:82:83:87:59:d8:92:ea:e4:a0:70:43:b9:f6:
71:20:8b:ed:ca:22:20:59:30:6f:7a:c2:10:23:3b:cc:5d:d2:
c1:46:bc:4c:1d:31:74:dc:ad:aa:bb:53:09:18:f7:5a:c9:4d:
86:d3:6c:08:88:df:13:db:b1:2e:15:ef:65:03:79:4c:db:b3:
e5:20:60:12:b4:a2:37:5b:64:b4:f1:1f:2b:d6:d3:96:bc:a4:
ce:76:13:46:9c:aa:b5:77:17:f8:7a:6d:c9:e0:a2:81:19:64:
1a:a5:ea:50:18:76:d7:b4:76:bd:29:86:1a:67:2a:21:98:22:
67:74:59:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:22:16 2026 by rpki-client