Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier: 4u4MCz5pB6whttZlAj6O4arSakH5rKHnOaY87Na5Ed4=
Subject key identifier: 3B:31:43:3F:CA:00:37:B0:CB:0F:5C:EC:86:2C:DE:92:20:14:71:D5
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 01A0DFBCA022DD11529D67631EFA48BFA474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number: 1A77
Signing time: Sat 26 Sep 2026 22:01:15 +0000
Manifest this update: Sat 26 Sep 2026 22:01:15 +0000
Manifest next update: Sun 27 Sep 2026 22:01:15 +0000
Files and hashes: 1: 6CjF8Jlu6tuK8zsCRGmRKkMW1aY.roa (hash: cbJEUas+h/1ENIgGWWNamGqYchFhfCj4L7NJTrlZrxc=)
2: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: GtatCqz991j0OrFozbmF/lQW6cC0PRxPKcHnvuQWqgU=)
3: sW8W0-8WOsG0evmu2fYzqrWdI9U.roa (hash: aDuewNAM6XmzF96K8nKeS1R/6Pbon3faWwSXg53klfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:a0:22:dd:11:52:9d:67:63:1e:fa:48:bf:a4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Sep 26 22:01:15 2026 GMT
Not After : Sep 27 22:01:15 2026 GMT
Subject: CN=3b31433fca0037b0cb0f5cec862cde92201471d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:8b:1c:e4:be:3c:80:0c:ac:9b:e6:df:95:
6e:08:40:5f:fe:40:21:7d:bc:5c:8e:16:cf:c4:6c:
32:46:41:b1:0e:76:df:de:2a:af:91:ad:b0:bf:05:
79:8b:42:dc:c2:b2:c4:83:e2:c2:86:80:fe:e8:61:
b0:b9:9f:ee:eb:3e:86:1d:e6:05:c5:19:b2:cf:65:
09:07:81:61:ef:f4:b4:b6:90:fd:59:40:17:8f:8c:
ac:e7:38:36:f0:ee:d7:2a:04:e3:29:fa:02:9b:ac:
1f:1e:be:32:7c:31:17:86:97:54:29:e4:83:a4:b4:
a6:73:09:de:e1:81:89:54:26:c0:7c:e3:a1:88:5d:
7d:12:93:05:a3:d1:d7:2f:d7:3a:69:58:6e:a9:6b:
63:b6:64:f5:47:de:ba:f6:be:6a:96:67:4d:01:25:
a5:4f:2a:07:75:94:c0:b6:46:3d:58:f3:a0:e9:83:
7d:76:a6:33:75:d9:f9:7e:38:e5:a4:da:81:98:23:
36:d4:ca:7e:0e:62:5e:c3:5c:07:bb:13:d2:34:62:
7b:91:04:2e:57:a2:e1:dd:93:6a:cf:8e:e9:ec:b2:
33:3b:7a:81:3a:29:6e:80:f7:f0:28:dc:ac:e0:2e:
75:9c:39:00:95:cb:62:e1:10:d7:71:45:77:59:28:
70:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:31:43:3F:CA:00:37:B0:CB:0F:5C:EC:86:2C:DE:92:20:14:71:D5
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d8:95:e5:ec:ba:9a:df:9e:b7:ff:9d:d9:4b:f6:bc:67:3a:
d9:a4:8f:fc:e5:7f:76:fe:b7:20:6d:41:9d:32:00:74:11:c8:
f2:5b:a6:a5:8e:b6:7f:de:bc:46:29:6c:1f:3f:8e:0d:55:3e:
45:f4:ad:bd:d2:cf:9f:fc:77:d1:c5:4c:56:a3:9d:f5:f0:72:
fd:e4:2e:6e:a8:3f:ce:30:53:4d:e7:fa:89:89:f3:f8:2c:0f:
3c:7f:03:b0:4f:ea:56:0c:2e:d7:fd:0b:12:00:80:2a:79:a5:
04:a2:54:72:52:4a:03:26:cb:2f:49:34:93:61:ae:b4:30:bd:
e1:63:29:20:56:5b:32:dd:ab:24:be:07:45:dc:4d:ff:3d:ba:
46:d6:73:58:b3:9f:a6:0c:56:3d:e7:a7:34:33:1f:a0:be:c5:
2e:99:91:ab:46:68:66:23:aa:67:ec:14:69:10:27:a3:b2:b8:
99:02:37:06:53:17:20:f3:01:73:5f:40:8b:b5:01:93:cf:58:
47:2b:76:bf:ff:42:d5:5f:4f:f0:53:88:56:e1:5d:4e:58:c8:
09:9e:05:ad:cd:c8:56:7c:c2:9c:70:29:af:ea:31:de:7c:01:
cb:00:b2:f1:e2:c3:d5:25:46:12:e3:f1:c8:eb:c6:ed:4e:4b:
42:eb:6d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:52:46 2026 by rpki-client