
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
File: p_0_iTNdz4KGZrKPrYrpk71EiHg.mft (raw, json)
Hash identifier: OCUdJZ08kxVJ34tKqCgCkd3fT8FCUQpaGEHWlm74ffQ=
Subject key identifier: 74:9C:98:8D:45:A7:6C:1D:C6:74:19:37:A8:10:A1:9D:94:6F:31:C0
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 01A0F11E63948CAEE6F2E34ABC93AC1568D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
Manifest number: 1209
Signing time: Wed 30 Sep 2026 07:01:35 +0000
Manifest this update: Wed 30 Sep 2026 07:01:35 +0000
Manifest next update: Thu 01 Oct 2026 07:01:35 +0000
Files and hashes: 1: N34-g76KUhTdWwWSLHfwbTaSsBk.roa (hash: +8Y68T7SxCWrExC5aY8HbPiArRVdSNLWKLaScCdYK+4=)
2: Qth5F4Jxy_7Urd_QUYNqQ6dh3BE.roa (hash: 7J/t016OYUhUIcd/w4kqId0UMUV/HMGOup9T1dY8o6k=)
3: VMk_-ZVMzNsk1GgbJTfI9LE0DME.roa (hash: UfrV1/CMx2zPrF2PH/5Pf7VA8YMgyux3npUJflT4mLo=)
4: WYINcTR5G8eWIm2nJo9-FZB9A-c.roa (hash: xbC6ZKVedTs8dgZW52hJX5QjfYmjqhQcuGp6AKEKmZI=)
5: XAZ6WKQwSbWuMdg-slN8CRUbp5I.roa (hash: B/BbMvrnmz3NQFSpm/6UYMAwSqXPT+vl+n1zXtv+BHo=)
6: a9JkWci0F3TTd0p2sBEzmiEjdq0.roa (hash: 5j0Wq9PZGQQ7JbTj7Kgmx1x+26TKEMnhbQ7aJjaYgsg=)
7: hCn3bIQg5VsX6NCOxM1ZQie7ZJ0.roa (hash: D+/5MAyrqx5oCLSLt+ymEIb8F3rOABO1+8Ywi8kb7lY=)
8: p_0_iTNdz4KGZrKPrYrpk71EiHg.crl (hash: E3Zvm53oBdyvpzJKUW9POMP5hRnmE8HTfYvBIdDW2KE=)
9: quvibglo6Ez0p7GLGOPHRy9oRo0.roa (hash: PHUCyCkb1CzH3KiJNE2akCPX54R84dlZX7do54X1Jww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:1e:63:94:8c:ae:e6:f2:e3:4a:bc:93:ac:15:68:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Sep 30 07:01:35 2026 GMT
Not After : Oct 1 07:01:35 2026 GMT
Subject: CN=749c988d45a76c1dc6741937a810a19d946f31c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:fd:a9:47:88:e7:fb:e3:d6:69:36:6a:a8:
65:93:b2:a2:7e:2b:bb:6f:d1:74:ff:ed:df:bc:07:
0c:d3:11:21:68:35:92:22:ae:3a:48:a7:15:2a:40:
22:66:d4:57:57:cb:6a:b2:4e:f2:e7:53:d0:96:2d:
42:6d:10:57:ff:e6:e6:07:1f:57:aa:49:f5:38:11:
a7:48:08:ae:8a:ff:35:80:07:46:a0:f2:8f:00:0b:
4d:4d:bc:28:09:92:60:78:21:53:2a:42:f4:06:94:
2e:0f:06:fb:b3:71:1e:0c:5f:e0:a4:73:81:3c:0c:
06:22:d8:fb:0f:d0:a5:15:3f:ac:3b:52:87:fc:5c:
8d:d6:94:fd:45:27:a9:61:90:34:d8:1f:5c:dd:2c:
bc:e5:91:27:55:ef:59:32:39:dd:31:27:56:3e:ac:
02:41:47:ce:f9:3f:8e:05:12:5d:dc:64:49:dc:aa:
57:67:3d:88:78:13:f0:dc:4b:93:03:9c:07:7c:39:
5f:5f:c0:cb:c3:c2:07:f5:8c:2c:45:55:d6:17:a5:
f1:5d:43:5a:1f:a6:da:13:27:3d:84:aa:48:64:15:
7a:87:31:8d:9a:c4:a2:53:34:81:19:18:3f:4f:f8:
12:60:32:fa:da:55:db:20:04:5c:37:85:2a:c1:8e:
66:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9C:98:8D:45:A7:6C:1D:C6:74:19:37:A8:10:A1:9D:94:6F:31:C0
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:53:60:1b:62:8c:12:5c:0e:df:66:27:d2:c9:85:54:97:7b:
44:09:1f:73:84:1e:94:b1:45:75:42:00:3f:34:5f:2b:43:85:
59:dc:48:34:0e:59:57:41:4d:da:20:de:c0:7c:42:df:b7:66:
cd:dd:a2:b6:85:89:be:eb:4e:b7:f5:d8:6d:4f:29:18:d6:dc:
68:84:dc:d8:c9:9b:eb:34:f1:28:3b:76:dc:42:90:12:9f:83:
c5:5e:7b:33:11:4f:66:c3:e1:64:7b:23:43:b9:99:ac:ff:8d:
f6:df:d3:8a:ee:3b:8a:86:42:b2:cf:df:62:15:50:87:50:96:
b0:ca:b2:8e:44:18:2c:14:27:84:a7:71:bb:3b:bb:97:1f:5c:
7f:d1:4e:a2:f6:54:2e:22:43:bc:24:0f:92:c7:d4:8f:16:78:
fb:3d:ab:f4:ac:2a:ee:39:7f:d5:1f:f9:34:da:ac:1f:93:46:
5c:07:c7:2e:b2:82:7e:53:65:ad:c4:7f:61:a2:66:44:a1:1d:
60:d1:cb:86:e7:28:c9:e3:45:59:f6:0b:e9:c2:26:71:01:95:
c7:41:bb:5b:1b:c5:2b:eb:ce:bf:f1:17:18:11:6c:5d:5a:d8:
96:44:b0:b2:09:fb:59:9c:70:32:14:73:de:11:0f:48:c4:da:
7f:dc:c5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:58:55 2026 by rpki-client