Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
File: pTi7DCtB76jDsCBk68UvupLCNiY.mft (raw, json)
Hash identifier: SCtrlvdEs++W3ZQpZYKtv7dFrDc0Bi3UG9AieQO4IZo=
Subject key identifier: F1:B1:36:68:AC:C7:F4:92:74:84:2A:94:09:7C:37:3D:29:57:C1:91
Authority key identifier: A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
Certificate issuer: /CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Certificate serial: 01A0D426C27C475422D2240C87F654E5943E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
Manifest number: 1658
Signing time: Thu 24 Sep 2026 16:01:44 +0000
Manifest this update: Thu 24 Sep 2026 16:01:44 +0000
Manifest next update: Fri 25 Sep 2026 16:01:44 +0000
Files and hashes: 1: CPVxDc_aZPt8p2hD-fQ5EY3ek5w.roa (hash: YSCCvnapCyu6BSWmfyyXkWgH96EnMt+2gyVUr+pHUOM=)
2: cxSAbl9AGDjuAytpRHVKIsDfitI.roa (hash: 6VeXR5AotX5hFxSi1IUjWsyHhQBxezCmfN4HLADcz8c=)
3: pTi7DCtB76jDsCBk68UvupLCNiY.crl (hash: m0JLJU9J5M8jd+jyaVre9G3+p6R7hBzj4OdhT6XxICI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:c2:7c:47:54:22:d2:24:0c:87:f6:54:e5:94:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Validity
Not Before: Sep 24 16:01:44 2026 GMT
Not After : Sep 25 16:01:44 2026 GMT
Subject: CN=f1b13668acc7f49274842a94097c373d2957c191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:c4:76:dc:23:1e:e6:ba:a3:dc:62:d8:23:
d7:c1:6a:45:a2:c5:cc:00:c4:f2:9a:24:99:a4:fc:
26:ec:0b:25:68:3d:72:d3:98:b0:4b:7b:fb:ce:8b:
c4:3f:d5:b4:1e:47:96:1c:2c:12:d3:b6:48:ba:9e:
89:f1:68:05:df:4b:27:87:10:87:71:35:82:0b:5a:
42:e3:29:de:bb:f0:37:8b:7d:39:26:2c:8e:e4:4e:
48:7b:52:4d:ac:2a:34:2a:53:19:27:a8:8a:38:69:
39:c7:96:cf:35:43:9a:1d:5f:a2:1c:2f:4d:d1:d1:
c0:a7:42:5e:f9:d5:46:d1:45:b6:09:8a:53:7b:1b:
d1:6a:6b:25:3d:a5:2b:b3:9f:27:33:8e:6d:22:84:
eb:36:57:24:fe:23:07:f7:bd:0b:57:3b:22:c5:c8:
cd:49:12:ec:c7:74:32:ac:df:22:06:8e:45:06:96:
67:02:dd:d2:a5:79:3c:c8:37:0e:d6:cf:16:6b:1b:
8c:05:30:63:61:f5:84:1b:3c:e6:7f:f4:0e:1b:49:
ff:b5:46:8c:44:a2:84:dc:4e:7c:e1:d0:9a:51:4d:
dc:0e:32:c8:a3:43:76:5e:7c:91:0d:e8:d4:eb:b8:
39:0a:a0:32:c8:2e:fd:31:9f:5a:d6:ab:f9:39:fa:
ae:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B1:36:68:AC:C7:F4:92:74:84:2A:94:09:7C:37:3D:29:57:C1:91
X509v3 Authority Key Identifier:
keyid:A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f9:b1:ff:ce:b2:bf:a8:06:37:99:93:c5:1c:0f:22:c7:24:
2f:e2:a7:a9:05:2c:4c:a5:5f:d3:91:b5:c1:f5:e4:30:e4:85:
ea:c0:3f:4d:a5:e8:90:78:f9:6b:98:92:88:29:e9:bb:bc:f9:
72:27:74:1f:27:a5:31:aa:e6:07:95:43:97:03:09:1b:fc:ff:
20:98:72:d9:81:1b:a4:53:85:3b:f4:5e:a2:83:23:5b:5b:d7:
f6:e0:a5:e3:0f:a1:05:8b:60:bd:7c:af:80:24:34:56:1e:ef:
01:75:f4:7c:a3:5b:60:3c:b0:d4:1c:ee:91:a8:d1:2c:0b:62:
de:2e:57:ab:df:b9:a8:69:dd:1a:a7:11:28:a9:43:a4:d0:b9:
a4:c5:9f:b1:16:08:80:b2:c0:45:fa:de:cf:af:5b:b7:e8:bc:
cb:5a:30:0a:a7:0c:4d:03:b8:5f:1f:67:95:c3:d6:48:2d:79:
f8:e8:d7:85:8a:e7:95:81:ed:8a:57:b7:0b:4d:b8:1b:c4:96:
c7:4e:71:66:0d:dc:cd:7c:09:3d:69:c5:ed:aa:5c:94:be:a3:
aa:4b:99:b3:22:88:92:af:bc:44:31:09:1e:72:2b:f3:97:f4:
2f:e6:a2:0a:07:59:6f:13:4f:8e:2f:18:77:0f:a3:91:cf:c3:
d3:79:59:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:46:59 2026 by rpki-client