Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
File: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft (raw, json)
Hash identifier: AHQDmZzjEEYms2+RaBrPb7c7Ghz2HOseiNCmV3si8Hs=
Subject key identifier: 05:88:AC:29:19:3C:EA:99:AF:E7:FC:5B:7C:B1:41:28:9F:0D:EC:AB
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Certificate issuer: /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial: 01A0E43E3D0D46AEA3A1D2ECF4D1D915388B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
Manifest number: 1A79
Signing time: Sun 27 Sep 2026 19:01:19 +0000
Manifest this update: Sun 27 Sep 2026 19:01:19 +0000
Manifest next update: Mon 28 Sep 2026 19:01:19 +0000
Files and hashes: 1: 0xwfSsFkb05U4ozVSEb8hCqR4ZM.roa (hash: wDnxCrMW737wBP0bFwNqAOo1oxv3iXJSRvzrJ/qp1Dc=)
2: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl (hash: E3oEqMEJdMdpSVo8lhR1RTWV2MhJJ3LhyGOR7ALTumk=)
3: zq7GSsBTb4iCu4BsJeZ1X5mLg0g.roa (hash: wAonBOQHcI2HVnsLhr53pN++Gv5Cyj0r6V/3M0lZCdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3e:3d:0d:46:ae:a3:a1:d2:ec:f4:d1:d9:15:38:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Validity
Not Before: Sep 27 19:01:19 2026 GMT
Not After : Sep 28 19:01:19 2026 GMT
Subject: CN=0588ac29193cea99afe7fc5b7cb141289f0decab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f3:f5:ac:77:23:78:87:74:cf:38:ad:a3:13:
9b:7d:c1:67:f2:f3:75:45:cd:de:19:d9:2b:92:73:
96:03:ea:5a:21:36:9f:48:d7:cd:bd:62:1d:e2:3e:
7c:29:0c:c9:83:08:24:7b:51:00:ab:b9:13:28:0d:
c2:d2:85:38:4e:a2:ab:66:72:56:47:dc:1b:3f:32:
cd:6b:92:6e:f0:b5:a2:1e:68:0c:0d:3d:2b:08:8c:
97:60:3f:51:06:4f:ab:ca:5c:88:d6:be:7c:11:ef:
57:90:a4:db:1e:3c:5b:85:d0:3b:49:3b:cf:90:3d:
e4:4d:7c:39:6e:1a:2c:f7:07:35:a2:dc:19:ee:ac:
bb:8b:e1:1f:7c:9d:e9:f0:4b:2c:3a:f7:75:19:b6:
ce:2a:82:08:5f:b1:69:c8:9e:1b:64:d7:3a:41:f4:
60:30:98:c0:b3:0a:69:e4:d9:25:18:4d:ec:71:51:
02:b5:03:aa:51:74:f9:a5:57:6d:d7:12:de:8f:38:
d2:9e:36:dc:05:8a:6c:46:b1:9a:41:ff:cd:39:99:
18:04:db:3d:48:a8:bc:eb:8a:9a:d9:7c:c9:dc:22:
2c:ca:62:b2:e0:5f:78:92:6a:90:f6:f5:7d:07:17:
c3:94:09:7e:47:37:08:9c:35:ea:77:2d:e1:a9:9c:
0c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:88:AC:29:19:3C:EA:99:AF:E7:FC:5B:7C:B1:41:28:9F:0D:EC:AB
X509v3 Authority Key Identifier:
keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:56:7c:50:76:ef:9c:e7:06:21:cf:59:bd:f4:1c:a2:9d:ce:
94:d0:97:9d:84:ca:38:de:76:2a:8d:a2:ad:d4:f7:b9:20:e1:
38:f3:64:a5:00:20:42:5c:8d:b1:81:f3:3f:5d:0d:55:b3:a2:
0c:4b:cc:5f:0e:12:ea:be:98:89:b8:57:10:e1:0b:85:af:41:
c9:33:5a:16:69:0e:52:df:a7:57:b4:aa:ee:53:8d:e7:dc:a7:
68:7b:15:21:33:c7:36:93:29:6f:c6:7f:e3:33:d3:57:c0:db:
3c:b8:f7:15:56:6a:56:70:fc:89:8f:7c:b0:e4:c5:2b:e9:9d:
ad:47:1a:b0:ea:c5:9d:5c:96:2f:74:15:eb:31:e5:79:99:66:
80:c0:6a:15:17:33:57:d1:2f:53:02:66:97:0b:00:ad:63:d6:
d5:75:8f:13:39:1b:be:92:8e:9a:b4:42:07:bc:4b:3d:61:24:
7f:39:f5:c6:d8:58:5b:9b:70:24:b8:31:5d:15:3a:3f:77:fd:
9d:51:05:cb:7f:7d:d8:ab:76:da:88:3b:17:d9:e9:b3:ef:77:
d4:24:de:3a:55:d7:41:27:64:f6:da:5a:d9:ff:cc:13:f5:bc:
12:2c:31:7c:7c:d3:1c:09:ce:ae:6b:05:f8:04:82:9f:7e:0a:
af:d6:40:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:45:14 2026 by rpki-client