Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
File: r-xPShbMUb1RYhARU5zrV0rBXQI.mft (raw, json)
Hash identifier: giCenx/goqqWx4S3keUJrrJhQ55lpP7icjj8IwN3LSQ=
Subject key identifier: 79:16:BE:FF:94:30:F0:C5:68:4E:5A:37:C9:03:CB:B9:51:5A:8F:3C
Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Certificate serial: 01A0D42692D8C21B32962EFDF85CA66CEEA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
Manifest number: 1A74
Signing time: Thu 24 Sep 2026 16:01:32 +0000
Manifest this update: Thu 24 Sep 2026 16:01:32 +0000
Manifest next update: Fri 25 Sep 2026 16:01:32 +0000
Files and hashes: 1: 1-kk5YtawRkJQwdDT4MsBuFBc3Yo.roa (hash: Aamvd7Z6s9hiJAa6DbrukXmWAwrVI2PPj/AOKYI7G4U=)
2: PoqWbVHh-FUr2dkHNr-gmxi2c-8.roa (hash: YLgUsuGSocGrObs4G25+Ghw9LtEJ63hht/5KGdZnHW0=)
3: pjM3LX3IWBwhVZCLWvigLJvSQJQ.roa (hash: 3UYX3NqDLCGEU8dgjIHi5102NNO+66HkfR/cZxzpA3A=)
4: r-xPShbMUb1RYhARU5zrV0rBXQI.crl (hash: oug/9iaLfIObckN9m4vD+eJxDwf6FBWZWYPhHP8zU0E=)
5: t5ZpdQdakz93WmXWJ_al0M0qYog.roa (hash: ZYC1omK7NgO2nQPCpRlt52kAchXz0Fe3jlMw43xrEYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:92:d8:c2:1b:32:96:2e:fd:f8:5c:a6:6c:ee:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Validity
Not Before: Sep 24 16:01:32 2026 GMT
Not After : Sep 25 16:01:32 2026 GMT
Subject: CN=7916beff9430f0c5684e5a37c903cbb9515a8f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:58:18:49:1a:f7:f2:8e:42:63:c6:41:0c:
54:e9:51:25:1c:df:5e:69:89:1b:bd:19:4e:fe:37:
7c:2e:38:ed:86:6a:49:49:7d:80:3d:16:0f:9c:82:
87:2a:fb:da:43:ff:10:82:2a:c3:f3:35:07:62:a1:
fa:4d:94:2d:8e:0c:ce:36:44:7a:51:a5:5c:40:d6:
bb:70:1b:e7:ee:be:02:25:99:43:76:1c:ea:30:7e:
31:45:00:2b:d8:48:0b:08:df:42:80:c8:62:57:bb:
49:b1:d2:8c:15:21:de:39:55:05:a1:c2:cb:30:8a:
4a:a9:e5:94:97:6b:f3:da:c5:4c:32:45:d9:ef:3e:
aa:65:85:88:7f:89:95:0f:6e:7b:97:ea:d9:42:11:
07:68:0b:45:1a:3e:1d:c4:b2:4b:0e:6e:b1:a3:89:
f5:25:39:8f:ca:f6:0f:81:38:cd:e8:13:5c:d2:ba:
3c:cc:fc:ab:27:ca:55:7e:a3:ba:27:6c:09:a9:85:
0d:58:ff:53:17:de:f2:52:69:11:e3:d7:f8:51:fd:
0d:50:ba:c3:9a:d2:8b:54:fc:93:3f:71:cf:9c:6c:
a2:49:3f:6e:e2:55:a6:d8:4e:1c:69:82:11:cb:fa:
bf:bb:18:ce:85:48:f0:1b:c3:38:56:b2:c0:88:23:
20:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:16:BE:FF:94:30:F0:C5:68:4E:5A:37:C9:03:CB:B9:51:5A:8F:3C
X509v3 Authority Key Identifier:
keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d8:f2:9f:ed:de:12:b8:98:dc:3b:c8:04:6b:c4:2e:39:eb:
a2:41:3e:77:9d:d0:db:9a:91:13:7f:f8:80:5f:0f:d5:a7:b6:
bc:14:bb:43:86:d0:18:73:7b:9e:7d:92:30:06:fa:53:93:30:
0c:bb:18:1f:a0:41:11:88:26:3d:25:36:e3:72:2f:92:e8:6c:
7f:1f:e1:48:a1:8f:8c:3e:74:43:12:fd:0a:3b:e4:bd:92:29:
fe:56:b2:f2:89:d8:a6:e4:1f:ee:48:f4:7d:2a:24:d6:37:fd:
3f:58:69:af:d3:ff:21:62:13:97:dc:f8:0e:c5:ea:47:11:5a:
87:ee:e1:5a:1a:db:cb:53:18:e3:6f:52:a3:04:11:50:32:a2:
eb:44:a9:f2:f4:62:b9:d8:a5:af:65:34:9e:a8:81:d9:51:13:
f5:57:aa:4b:b0:cf:b6:f5:71:97:5d:82:df:25:e3:9d:fc:e9:
18:99:5c:a2:d6:a2:7a:28:b7:12:e3:d1:55:53:03:40:36:1c:
10:2c:33:31:11:e0:a8:7f:37:14:7c:6f:46:fd:00:34:7a:0b:
f4:0e:3c:e5:ad:cb:09:07:b1:6a:fe:ce:d1:a7:6c:ee:e0:c8:
f2:07:26:dc:cb:42:d9:08:b6:10:c0:fd:e6:70:94:28:c1:af:
16:2e:c7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:10:05 2026 by rpki-client