Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
File: t6x4DrIELIxXABtl7xVub1kxI5s.mft (raw, json)
Hash identifier: wb21gpXXkQd3wfu0zJokoXTUfOWLiKZ5qtwYE800dok=
Subject key identifier: 8A:B8:3C:AD:8F:2A:3B:E0:A4:29:5A:DA:98:BF:B7:52:EF:B8:C1:0C
Authority key identifier: B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
Certificate issuer: /CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Certificate serial: 01A0DF864E2B1EF0CEDC5FFD89EA4E0F4A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
Manifest number: 1374
Signing time: Sat 26 Sep 2026 21:01:55 +0000
Manifest this update: Sat 26 Sep 2026 21:01:55 +0000
Manifest next update: Sun 27 Sep 2026 21:01:55 +0000
Files and hashes: 1: V_mkvcjVjS1-u9rT2y0dgg79_kc.roa (hash: rMLTGatwFgUj/JsrB7K3p4u1VzSPILlwRtAyB+ELLeA=)
2: oNnDZwusFuv5UtMyxcJz3DtbE00.roa (hash: gdqrDRQ7FgRPSgYvq2DfctPsFTOhIJlWOftupYpojX4=)
3: t6x4DrIELIxXABtl7xVub1kxI5s.crl (hash: Ad6y8gYqKSXYbc0hGtxLPriYDOUL5aQJUwS/ZWkxTgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:86:4e:2b:1e:f0:ce:dc:5f:fd:89:ea:4e:0f:4a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Validity
Not Before: Sep 26 21:01:55 2026 GMT
Not After : Sep 27 21:01:55 2026 GMT
Subject: CN=8ab83cad8f2a3be0a4295ada98bfb752efb8c10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:6c:d0:18:1f:53:dc:f3:0f:b6:42:6f:1f:
be:4f:47:70:ff:b6:14:5d:53:fd:00:fc:f8:f9:3c:
39:cb:0b:95:ca:6f:e1:f3:df:4c:b7:0a:19:be:89:
42:71:b7:29:55:7c:3b:45:62:e5:1b:4e:85:77:dd:
45:7e:5b:1f:cc:80:27:8d:93:f5:80:20:62:9e:78:
99:a4:b8:8f:ba:3f:74:67:37:79:47:ff:42:a9:f8:
0e:a6:6d:98:8c:cb:55:56:d6:37:c5:ce:ad:05:6a:
8e:bd:b6:18:a6:05:03:bb:7a:da:b9:f0:e7:f7:14:
f3:43:e4:57:b9:bc:f1:06:8b:02:8d:fc:27:91:38:
eb:ac:da:3a:6c:f9:39:62:71:8e:ec:f7:70:5d:c3:
ab:47:3d:ef:8e:25:b3:15:9c:af:d8:7f:1f:05:64:
35:d6:35:41:78:70:19:be:30:16:4a:67:31:6d:f6:
f4:de:00:65:7b:da:99:ee:a6:2d:93:33:06:a8:fa:
72:27:48:79:74:e4:58:7c:f8:73:a2:f8:57:7a:f8:
70:54:1f:c8:ef:81:09:f3:ea:ce:48:af:40:6b:e7:
49:b2:55:36:45:ae:b2:84:b5:c0:63:89:23:2d:c7:
ee:38:24:c7:71:ad:5f:01:89:b7:b2:fe:4a:c5:39:
3a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B8:3C:AD:8F:2A:3B:E0:A4:29:5A:DA:98:BF:B7:52:EF:B8:C1:0C
X509v3 Authority Key Identifier:
keyid:B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:bc:4b:4c:8a:e4:26:f8:e6:16:3f:d4:0c:8a:1b:fa:32:fe:
91:b2:15:16:c3:a1:22:7b:39:6a:ec:d4:bb:02:60:a3:4a:24:
eb:46:45:f0:63:39:73:37:66:0e:f6:fa:24:6b:b8:88:a1:77:
62:98:cc:74:6c:03:71:8b:0a:47:61:97:71:2f:27:a6:9b:6b:
7f:aa:04:92:eb:b4:58:ca:4d:78:73:56:4a:ee:94:ed:da:cd:
46:5e:20:35:e4:d4:db:ad:20:97:50:eb:9e:4c:2c:dd:0b:ba:
f1:5e:a3:3e:59:da:6e:07:54:6a:e4:6f:8f:71:17:97:9f:ed:
0b:d8:96:9f:79:4c:2c:17:34:52:e1:d5:2e:61:18:de:ac:49:
a5:3a:ee:7f:03:ed:bc:3e:b8:33:98:06:8b:0f:54:7c:12:98:
f4:94:d4:0e:47:b1:5c:a1:4e:0b:a2:34:e1:26:67:b0:39:77:
8e:ca:81:bb:66:0f:b5:f8:ad:a1:f5:2f:81:9d:4b:63:fd:48:
04:2f:67:78:48:27:4a:fa:c2:4e:f4:59:bf:a0:98:fd:69:d1:
b4:b3:3d:0e:e4:2c:7d:3f:d2:61:46:14:18:34:6f:36:16:1f:
d9:1b:c0:90:5b:bf:ca:49:bf:e7:90:b7:d4:67:fe:d4:e8:9f:
ef:15:6d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:03:23 2026 by rpki-client