Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
File: p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft (raw, json)
Hash identifier: pa6BP61lJctx+zgkg33nMkuIKKxGQ4KDkKW71PkQgv0=
Subject key identifier: 7B:4A:C6:A9:5C:E7:22:39:BC:23:F6:0C:9E:EC:59:E3:3E:57:09:48
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 01A0CFDAF2209DC37B30D2FF7500ECC52576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
Manifest number: 1A98
Signing time: Wed 23 Sep 2026 20:00:27 +0000
Manifest this update: Wed 23 Sep 2026 20:00:27 +0000
Manifest next update: Thu 24 Sep 2026 20:00:27 +0000
Files and hashes: 1: 7RRyo5mrSZHKaCfweZimJC0UI0A.roa (hash: LQwFNkqaemk7BQFWfMSkrEO4PRaAlztizBh/5pehkzc=)
2: bXeDjlFQZxCvvfoeElvquanHuZA.roa (hash: RDVCaZsRUDJaMXpntgU8V0AZhyelN+TpLVWyUrhvuTY=)
3: cduC2GbU6mLXIEEHAt29JqjeJ_c.roa (hash: sBtHQn0mqBf5vLWH/WxAyxQgtkjINRc/CcTzUpuSllU=)
4: p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl (hash: KNryebn924xZikrjpQgVnRlMinh8O/Dj29MK89yBfR8=)
5: uGGHB9Av3_ThaGzwH8xxsyY9IAk.roa (hash: EQLCZ4pDh+GlnlGdR0v0R9xaKh+vfEuApMYZeBAUdys=)
6: wZh9B2G5inJahv0ftHSnCHX_-u8.roa (hash: w+DHmKNzVqvV97CuN2V9W7IR0BKIs/JdPTg9dgcDZXY=)
7: z1RV9HlRUrsc0eXa5k4hr7_8KwA.asa (hash: L60YiW4wcsK0ahFFVrtWamuz7Xbp/eEjQXmY54sWCXg=)
8: zOPM5DQVOuL2gxGFfQ2OogcDlag.roa (hash: TZhWdIY554lkmlZSQhc2076I8ib8niBs3eBXmmFEKfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:f2:20:9d:c3:7b:30:d2:ff:75:00:ec:c5:25:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: Sep 23 20:00:27 2026 GMT
Not After : Sep 24 20:00:27 2026 GMT
Subject: CN=7b4ac6a95ce72239bc23f60c9eec59e33e570948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1d:1e:d2:18:6c:4c:f9:a2:42:f4:7e:ce:0d:
ce:37:35:b6:3e:70:83:69:48:f2:b9:e1:ad:25:27:
f4:28:f4:60:33:d5:7f:d1:34:7d:70:6c:51:8a:33:
87:7f:55:a4:a3:7d:24:19:3b:83:05:f0:8f:98:30:
59:16:13:67:f8:34:14:53:1b:64:4f:ed:6c:3e:a3:
de:32:a2:90:c7:1b:b5:9c:57:00:95:45:58:91:38:
6a:90:54:db:be:16:82:7c:af:71:e1:81:b4:16:53:
94:a9:87:4c:19:07:c8:2b:4d:15:2f:89:df:93:d3:
99:3b:1e:4c:1f:f3:86:d9:73:f3:9e:8c:a2:ff:14:
82:88:ec:dd:25:a3:49:63:b1:55:91:35:c3:33:a6:
f3:bd:df:f6:8d:4d:43:f7:15:24:bd:84:ce:c5:f8:
2a:c5:3f:39:cd:3f:35:ea:d1:b1:50:1b:16:36:d1:
8d:5d:f1:a7:59:96:9a:1e:f9:f2:59:fc:1e:52:14:
fd:58:b1:f0:e8:c6:d6:a2:28:fc:a6:7e:50:8d:be:
5e:44:2a:ce:5c:b8:b1:c7:9c:85:a6:92:40:84:fc:
d6:94:fe:4b:c5:95:94:8e:75:ca:a3:97:ee:63:47:
d3:e5:6f:96:13:a6:88:d8:3f:fa:91:3d:7c:c9:da:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4A:C6:A9:5C:E7:22:39:BC:23:F6:0C:9E:EC:59:E3:3E:57:09:48
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a7:55:de:98:8c:c1:4e:cf:c5:0b:a6:1b:1e:50:2a:cb:96:
fc:8b:e6:2e:aa:5c:5c:e6:58:76:02:90:0d:21:e3:01:d1:77:
f6:bb:ec:18:3c:03:3c:e2:fa:78:3d:51:00:91:f8:9c:8c:d4:
72:0e:d0:82:3e:0a:af:e0:98:bb:64:de:27:8f:ec:96:cc:83:
67:33:52:26:93:e0:1a:e3:7a:7d:c5:5f:e7:0c:c2:e6:54:ce:
ab:a5:fe:58:08:50:78:3d:2d:e6:14:23:4e:48:0e:67:b6:17:
3e:1a:c8:4a:1c:3d:fe:50:a1:d2:e9:d5:2b:a9:05:fb:3e:45:
95:76:d1:8e:c5:5f:2f:d0:04:b6:4d:e0:76:8e:42:a3:ec:6a:
80:c1:a4:a1:1c:9e:5a:7d:3a:6b:f9:c3:27:75:84:34:cd:0e:
14:4f:50:f1:17:ef:2b:8e:a7:45:a7:94:11:f9:2b:3a:48:96:
d8:e6:0a:72:3d:95:b5:68:a3:26:d7:c2:27:1f:b9:37:38:fb:
4b:33:d1:9f:e7:32:92:8d:08:b3:1b:9c:8d:ae:34:69:80:83:
b0:19:51:28:a3:04:60:01:70:61:e4:53:5a:69:c9:53:34:d4:
1e:f2:6e:fc:e6:48:c1:53:e0:df:2e:db:43:2f:19:2d:f5:d8:
50:7d:15:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:02:56 2026 by rpki-client