Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
File: _z7T1NR7joJfv9B5SC96DCHcke8.mft (raw, json)
Hash identifier: b5MjJq5FBl2gDHxE+LShM5Pe0UFy7aIPdfJKKh7Gl+8=
Subject key identifier: 01:8A:3B:9B:E0:D8:6C:65:53:88:57:41:2D:B8:C1:18:7D:70:94:7C
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial: 01A0EDAF42D7C618CB0622D31B7EB941E5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
Manifest number: 1A7E
Signing time: Tue 29 Sep 2026 15:01:21 +0000
Manifest this update: Tue 29 Sep 2026 15:01:21 +0000
Manifest next update: Wed 30 Sep 2026 15:01:21 +0000
Files and hashes: 1: 69ezvJY8aZV8eEgrj-WQsC1gmeE.roa (hash: 2O4ZGW2UdJh7j7rNGC7PYb1zr3cjwg8+gzgKPe0rI+g=)
2: _z7T1NR7joJfv9B5SC96DCHcke8.crl (hash: xQKba47+LCi/WldsL3azuwg+fCdNHhkalN4XUx4zdzQ=)
3: hoPMx8cKt2l3U6Uh7qXffDc38GI.roa (hash: cSBxnQp/0+IglLraeUk1nEXqdG208OR0aDWNNNv7dX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:af:42:d7:c6:18:cb:06:22:d3:1b:7e:b9:41:e5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Validity
Not Before: Sep 29 15:01:21 2026 GMT
Not After : Sep 30 15:01:21 2026 GMT
Subject: CN=018a3b9be0d86c65538857412db8c1187d70947c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:2b:26:9c:8b:21:0f:43:ba:43:e8:75:eb:
c5:7d:f4:da:d1:ed:5d:76:1c:f5:58:b5:fd:8d:fa:
9b:df:b2:13:24:49:47:84:f3:eb:e7:49:7c:25:5b:
d3:79:27:a5:fe:c3:76:e0:14:fb:7e:cb:f1:59:c4:
34:a9:28:70:a9:d4:c7:b6:8f:36:26:9c:5f:55:6c:
b3:d9:72:61:4b:17:5c:68:43:db:96:5b:69:b2:e0:
88:cf:f5:6b:17:4d:e9:55:f6:8b:04:69:23:92:f7:
cb:5f:06:e2:52:c1:83:6c:42:79:a9:02:57:cc:7e:
6a:f3:b6:8a:d9:a5:2d:5a:87:6c:1d:d9:c4:44:86:
1b:05:81:91:3b:fb:72:1e:a9:3c:fc:46:f1:49:78:
cf:9e:be:f7:b1:07:f2:72:26:af:d4:a1:52:d8:9f:
18:61:50:96:ac:a7:d0:47:09:c5:20:b8:47:06:fc:
ad:57:5a:f5:b8:e3:df:d0:c9:7b:11:47:31:ef:9f:
d4:94:04:ab:b5:05:17:e8:5a:f3:29:43:9e:0f:61:
c6:33:e7:2b:64:e5:27:80:62:4a:ae:63:f9:d3:a9:
fe:bd:b7:ce:a5:0e:ec:59:40:e5:03:d2:90:10:bb:
f3:69:fd:0a:71:bb:68:55:6d:c9:e4:72:70:bd:f6:
35:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8A:3B:9B:E0:D8:6C:65:53:88:57:41:2D:B8:C1:18:7D:70:94:7C
X509v3 Authority Key Identifier:
keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ac:b3:78:03:37:46:4c:dc:7f:a3:d9:37:3c:36:04:09:88:
7b:95:5e:d9:81:bc:b9:e3:84:bc:f2:4b:0d:0f:a3:a2:42:cf:
4a:c6:3d:85:7f:74:86:ac:ec:5e:ba:ad:cf:fa:08:0e:a9:1d:
89:43:59:43:bd:68:7f:06:40:e5:63:2f:51:0d:2f:13:30:43:
eb:ea:44:ef:41:65:51:54:56:c8:2b:d4:e1:65:05:5f:fa:e7:
0b:43:44:7a:dc:5e:64:c0:ca:a8:e2:85:fb:a7:ce:74:53:8d:
e0:30:03:24:96:c1:9d:a2:9e:74:c2:52:db:b8:c0:a7:26:e4:
d2:e0:42:a7:d8:76:70:92:08:21:d5:aa:24:83:d0:1f:77:bc:
1e:a8:f2:0a:92:05:da:f7:49:f9:5d:ae:26:ae:9b:1a:15:18:
da:9a:0c:3c:14:dd:7a:ce:6a:4e:a2:8e:4a:2b:e0:5b:a4:fe:
3c:fe:c0:c1:cf:3c:4c:eb:02:d4:97:bd:89:83:d5:31:dc:4c:
7b:16:0d:37:37:58:ed:00:18:32:5c:bb:2a:6b:6d:1b:37:8c:
35:c1:56:b9:91:ca:6e:b1:ed:f0:9e:99:58:44:17:8d:a3:40:
f3:43:55:e8:fa:32:99:09:31:80:7b:0e:e0:47:56:b1:5c:61:
d9:a8:c0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:56:53 2026 by rpki-client