Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
File: fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json)
Hash identifier: 9Xo9RHOyICwwBBRH6xND42AS1KjisqK863Jb8K6eHcQ=
Subject key identifier: 7B:17:7F:52:42:86:E7:4F:88:4E:80:66:76:3E:26:7C:A8:E6:4C:96
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial: 01A0E0987F496F94A891C4C7385F5219DA4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
Manifest number: 171F
Signing time: Sun 27 Sep 2026 02:01:25 +0000
Manifest this update: Sun 27 Sep 2026 02:01:25 +0000
Manifest next update: Mon 28 Sep 2026 02:01:25 +0000
Files and hashes: 1: M81Qxbtts07Ib9z19i7shUVMtA8.roa (hash: 5AYY2qI7GMcPmUPABkZnqwFbbIzTbjv6m+OqVwWCrM8=)
2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: Gwh7MY7nMaSUYYPt1HoBcLkacNFXAw4RYobQxSvvWFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:7f:49:6f:94:a8:91:c4:c7:38:5f:52:19:da:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Validity
Not Before: Sep 27 02:01:25 2026 GMT
Not After : Sep 28 02:01:25 2026 GMT
Subject: CN=7b177f524286e74f884e8066763e267ca8e64c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:62:78:91:06:c0:80:22:9b:91:be:ce:83:cf:
3d:7c:65:91:5e:4d:ad:6f:0c:9a:d4:ea:48:7d:70:
4e:c1:d7:00:c5:3d:e9:c3:c7:fb:64:5a:81:3e:02:
13:d8:ff:21:58:8e:30:26:e2:4d:b2:84:aa:13:28:
60:15:f3:8a:76:4e:d9:86:bb:10:d7:d4:7a:1a:3f:
56:85:04:b8:26:9c:4b:31:b3:d1:59:49:c0:6e:40:
ca:da:7f:b2:ab:56:39:f7:42:b0:d7:bf:06:e5:c0:
48:5b:e9:29:f9:58:73:e7:f7:2f:e0:99:88:4c:2a:
97:f8:5e:2d:32:b6:dd:c5:bc:0e:7b:0f:eb:f0:6f:
5a:3d:0d:79:9c:0a:95:3c:b6:4c:6c:fb:5c:13:86:
aa:5b:51:92:66:89:40:4a:99:01:45:b6:1a:da:3a:
96:97:9d:ea:4d:c0:17:66:54:dd:b3:f5:96:d8:49:
d6:77:96:b8:ee:8d:f5:33:a5:b8:b2:69:eb:fc:43:
57:dc:25:ee:86:d5:be:c1:ce:17:35:4f:e9:43:5b:
95:07:2b:37:80:66:4e:fd:86:3d:bb:5a:ce:56:75:
1c:38:98:ca:36:b2:4d:d8:2b:1f:92:0d:8f:d8:3d:
49:a8:54:3a:8a:2f:3e:57:6f:a9:1a:0b:c5:e6:3b:
c4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:17:7F:52:42:86:E7:4F:88:4E:80:66:76:3E:26:7C:A8:E6:4C:96
X509v3 Authority Key Identifier:
keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:44:9b:c9:79:42:a7:78:84:60:42:d2:60:2e:03:c1:04:a5:
bb:c2:45:f7:74:5b:da:85:51:64:5f:14:c1:3e:66:f8:2c:4e:
b8:3e:7d:1f:6b:44:2c:27:15:b1:7d:21:54:14:a7:ff:de:d5:
47:bd:3d:c9:7b:48:15:df:85:62:b6:ae:73:1e:69:83:a2:ac:
0d:e2:c0:86:c7:8c:b2:e5:5a:cb:d2:f2:c2:4b:eb:89:d4:26:
8d:59:21:1e:d9:48:84:2f:af:86:dc:09:7b:20:dd:a0:c9:79:
32:ed:ff:22:74:dc:5e:d1:36:c4:28:57:1e:1f:6c:dd:17:30:
93:06:b8:ec:32:7c:86:ea:58:2b:25:a8:03:a3:0a:e4:e4:30:
eb:0e:d2:90:67:b8:ea:de:8a:f2:7f:0a:4f:6f:c8:19:aa:19:
4b:3c:92:60:46:03:8f:b9:00:3f:97:4a:4a:6a:41:b7:39:2f:
29:7a:94:99:51:c0:0d:07:38:50:ca:34:08:4a:b6:a1:55:ff:
b5:96:e2:a4:52:ed:a3:d8:e7:05:87:fa:13:5c:09:aa:41:48:
0f:be:f0:4b:e9:6b:8f:d7:85:6a:b8:2a:f7:a1:ae:b9:f4:0a:
bd:4a:cb:d1:11:56:4d:e7:3d:36:86:8f:0c:0b:ba:35:d9:05:
0b:19:90:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:08:33 2026 by rpki-client