Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
File: sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json)
Hash identifier: d+psunypxuvJCv7lyP8wWaUBAtjs/9dVRjrNsFH86S0=
Subject key identifier: 75:77:BA:24:7D:3F:3C:DA:4E:38:A4:3B:7A:B6:01:C9:31:8B:35:48
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Certificate issuer: /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial: 01A0EF2F9466E685056389149C6BC6B524AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
Manifest number: 1A7D
Signing time: Tue 29 Sep 2026 22:01:07 +0000
Manifest this update: Tue 29 Sep 2026 22:01:07 +0000
Manifest next update: Wed 30 Sep 2026 22:01:07 +0000
Files and hashes: 1: PUXWH5ErhkpTlX3DGsk45zeBJZg.roa (hash: xZcIxtVt0rhHswrnqiIOZ/p/5tyYj0LaAjYUyfrercI=)
2: k3bU7GJQGWmqllt3J0zrBV5kOFQ.roa (hash: FFe49A2byJNnvRF0qFtVbcLDcNCSlda3Ud81mS5eRtw=)
3: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: P3h+jDSSolQB8ZoVtuWCIFYHoSC/mc+rfDV7NWFRsms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:2f:94:66:e6:85:05:63:89:14:9c:6b:c6:b5:24:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Validity
Not Before: Sep 29 22:01:07 2026 GMT
Not After : Sep 30 22:01:07 2026 GMT
Subject: CN=7577ba247d3f3cda4e38a43b7ab601c9318b3548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:16:02:59:a0:92:e3:3a:f0:1b:18:e2:aa:af:
cb:d0:41:ac:f2:81:0c:b5:d2:ec:52:d5:57:a3:1f:
4b:7f:2a:10:20:b4:88:0f:20:0f:9e:f4:3f:cd:df:
46:05:ec:1a:61:c9:4b:89:7d:97:e2:ca:d5:c7:11:
d6:0e:ca:99:a9:b1:72:d5:e4:38:17:ce:36:66:bf:
93:12:31:04:46:a9:be:36:01:b0:20:d5:e5:c7:7e:
7a:29:cc:14:a3:ab:67:bd:7b:c9:dc:6e:17:09:c7:
dd:b5:2f:a8:c2:7f:d0:03:7e:94:0a:ab:df:e1:7e:
3a:49:a0:cf:3a:00:ce:ff:ce:8f:e3:4c:5f:20:a7:
a8:82:40:dc:1e:ed:45:dd:8d:65:de:2c:54:01:3b:
af:10:fd:48:15:67:bd:b4:ed:16:81:4e:29:9f:48:
3c:0a:91:36:ee:3d:45:b7:ac:af:a5:9a:24:26:05:
5f:36:7d:b8:a6:3f:ab:ff:7b:6c:39:ff:10:bf:d6:
c7:91:1a:14:70:6a:9d:96:68:ba:42:a3:5e:ba:2f:
e5:ee:22:da:23:bd:05:97:96:ee:a9:33:61:40:0b:
30:98:72:e4:35:6d:ec:75:72:d5:56:13:2b:8a:5c:
0f:85:2d:4c:99:3c:77:16:8d:2b:59:27:32:80:64:
34:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:77:BA:24:7D:3F:3C:DA:4E:38:A4:3B:7A:B6:01:C9:31:8B:35:48
X509v3 Authority Key Identifier:
keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b6:60:d3:ff:5b:39:de:eb:97:7a:7f:64:5f:e0:0b:c8:0a:
e7:7c:f3:98:04:84:f2:a6:63:34:6f:fc:22:46:43:d8:73:39:
f4:fe:8d:8d:88:ff:61:49:73:f9:ab:27:e6:ab:f0:86:ce:c4:
90:e3:eb:e2:33:61:f3:a9:f8:3b:b3:7a:61:a0:06:16:5f:5d:
c7:18:c8:58:70:06:ad:14:fe:79:09:da:a9:a3:60:2c:54:cd:
eb:7b:d0:28:ba:15:36:4d:dd:be:c3:9b:9c:b2:6e:1f:3f:06:
61:2c:53:3c:d9:a2:65:d7:9d:6f:6d:9a:e9:29:31:1b:5f:b0:
54:6a:5b:68:1b:bc:68:1e:4f:80:e8:0d:70:df:83:21:6b:de:
dd:b7:1d:25:4b:6e:ea:f1:1b:16:9e:32:11:b5:ab:96:db:c4:
c8:8e:f2:76:4e:11:da:1b:fe:b4:bb:d4:2d:e1:67:b9:34:dc:
cf:df:e2:70:4f:32:38:e9:c3:74:47:6e:83:36:55:c4:39:f9:
6f:97:77:f5:76:17:c6:39:e0:39:c3:9a:06:93:27:82:5e:b5:
17:2e:61:6e:dc:cd:c8:8e:e4:e3:5b:38:8f:09:58:56:0b:73:
43:85:f4:26:6f:72:27:0a:55:a4:ae:e7:45:29:43:c8:f8:2e:
f3:80:14:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:29:58 2026 by rpki-client