Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
File: t7n8UEpNIXiuT3PId8X5B7tHa_g.mft (raw, json)
Hash identifier: 71qs0XfApB55dhAgya/KEcMjopzd2RDNqfr2ehhv+gE=
Subject key identifier: C5:63:6B:40:EC:14:0A:74:6F:18:7A:4C:BF:11:33:C8:91:DC:72:FC
Authority key identifier: B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
Certificate issuer: /CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Certificate serial: 01A1DB01C1B31223D417B493A92BD001C71B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
Manifest number: 0854
Signing time: Sat 14 Nov 2026 17:01:27 +0000
Manifest this update: Sat 14 Nov 2026 17:01:27 +0000
Manifest next update: Sun 15 Nov 2026 17:01:27 +0000
Files and hashes: 1: RhYPlB5kqIX-dmV0ZFbkO4F9FQA.roa (hash: B4giMGx1nCtQi2hJ6Q8i5DGTsStHwrUH2rtSDwaQt6Q=)
2: t7n8UEpNIXiuT3PId8X5B7tHa_g.crl (hash: jZqPUxWDHDVmKKLe69eQeqgmPS25OsyHjb7GVHDB/Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:01:c1:b3:12:23:d4:17:b4:93:a9:2b:d0:01:c7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Validity
Not Before: Nov 14 17:01:27 2026 GMT
Not After : Nov 15 17:01:27 2026 GMT
Subject: CN=c5636b40ec140a746f187a4cbf1133c891dc72fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5f:5a:c2:e5:24:7d:4f:ea:f3:a1:9c:db:7c:
6e:2e:42:3d:08:ad:66:21:9b:fd:93:64:09:cd:15:
78:03:8e:ec:0e:5b:0b:cd:87:74:39:ca:7f:5a:9e:
7d:c4:2f:ca:77:75:64:8e:9c:fd:df:b6:90:74:f3:
12:a0:4f:8f:89:12:58:20:50:1f:2e:77:82:72:95:
6c:e8:40:63:5c:19:f0:f0:bb:0b:66:e3:28:43:ed:
15:22:40:ae:20:43:9b:fc:3b:8c:52:61:37:04:1e:
b1:ad:9a:f0:fc:14:32:d9:90:25:5a:a0:46:cc:05:
43:7c:e6:5b:b1:e2:9a:59:08:90:0e:9c:28:59:9b:
79:f4:a4:d2:dc:b4:81:ff:c6:bf:ac:89:ec:3e:1e:
bd:e8:fa:44:e4:2b:66:dc:2d:e0:51:bc:1d:4b:ac:
cd:97:9b:48:c3:65:de:1d:e0:87:60:a4:83:e0:ef:
6b:34:ef:73:d2:9d:2b:78:76:7b:8e:cd:61:23:f4:
05:a0:3c:24:e8:8f:9a:85:31:d1:fb:84:8c:d6:0e:
ae:28:fd:d4:6c:02:40:cd:66:70:46:40:85:27:2a:
b2:96:51:44:cc:48:32:fb:55:26:64:de:60:12:97:
a5:40:ac:29:ce:94:44:45:3e:bc:a0:fa:46:a5:27:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:63:6B:40:EC:14:0A:74:6F:18:7A:4C:BF:11:33:C8:91:DC:72:FC
X509v3 Authority Key Identifier:
keyid:B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:68:da:9c:6f:14:e8:ef:d2:53:50:b8:15:40:77:66:e1:33:
4a:5f:6c:0f:26:a0:1d:bf:fe:63:55:20:11:dc:93:17:30:72:
e6:63:46:5f:53:32:1f:48:c5:ff:e6:23:ed:5a:e7:53:87:8d:
2e:47:5e:d6:4f:a2:f1:54:2f:f6:1b:1e:58:3d:c5:6e:42:26:
ad:07:ed:4b:7f:8f:02:5c:1f:8c:93:30:33:ec:f4:f8:4b:e2:
6c:ac:38:f6:ee:95:ea:f5:f6:01:88:d3:89:8b:21:95:48:00:
c8:a0:a7:44:fc:be:27:3f:b1:0d:7a:fe:99:69:87:c0:7b:58:
6b:ff:92:5c:24:b1:08:8b:4b:f2:e5:92:97:4e:19:1c:dc:13:
49:37:1e:e7:04:11:58:dc:41:ae:74:3b:a6:55:c5:30:92:a2:
af:f2:2f:8f:bc:57:6d:fc:6f:3f:1c:09:5c:3f:93:94:e8:5e:
96:25:61:2e:c9:ab:4a:2a:8b:ac:f3:94:66:3a:f9:11:19:bd:
56:d2:6b:64:c8:71:b8:f9:20:d2:52:69:04:ea:09:27:31:60:
e7:cb:d2:59:6b:c1:91:a5:28:56:37:2a:1e:f2:ab:79:be:82:
fc:23:7d:9e:30:c3:d6:a5:aa:94:17:93:5d:53:d6:76:cd:1c:
df:fe:ed:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:36:28 2026 by rpki-client