Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
File: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json)
Hash identifier: iyrwTw/aDStMY56GwpyfK29jL1CokGEUsQ+vcPq/eTo=
Subject key identifier: 54:F4:BA:AC:78:69:E9:A4:63:5E:2A:B7:25:10:49:88:23:A4:CF:EE
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial: 01A0CB90A60FEBC05CB2C87EEED6F798BB09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
Manifest number: 0D34
Signing time: Wed 23 Sep 2026 00:00:49 +0000
Manifest this update: Wed 23 Sep 2026 00:00:49 +0000
Manifest next update: Thu 24 Sep 2026 00:00:49 +0000
Files and hashes: 1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: wUFWkIA/MeOs0NYB4yp5A6WHt463G4nrBqLEWRvFdBw=)
2: KVXgF5z3zvUbDWDR9vEfB08gTrE.roa (hash: UHAb4fioT9YjE1AokUnZfVbvlTm8HooTgsw5q7QUcZ0=)
3: p_71hNByXrDuNYKSNzWqmsK9r-A.roa (hash: KH7XFzdKacxa7PKL/12r22Uz9GNXLSLW65hXt/t41hQ=)
4: wO6fRWt8N7XMvIeyLTRMhJ0-t94.roa (hash: HaZn3L1Ow7LzOKxqi0hwoJYvNFRFIKrjZGo6K0g1OtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:a6:0f:eb:c0:5c:b2:c8:7e:ee:d6:f7:98:bb:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Validity
Not Before: Sep 23 00:00:49 2026 GMT
Not After : Sep 24 00:00:49 2026 GMT
Subject: CN=54f4baac7869e9a4635e2ab72510498823a4cfee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:46:b7:7b:6c:ec:8b:bb:78:b4:57:c6:0c:7c:
db:b9:90:de:7c:9e:ef:2e:db:34:f2:08:83:0f:50:
1a:be:da:f8:b0:7d:d7:41:6f:14:53:97:b9:ab:89:
19:d4:1a:a5:3b:f6:1d:b9:5c:a1:73:86:8f:47:db:
90:13:9c:e1:93:bc:df:6c:e9:8a:9a:fc:8e:85:25:
9e:6c:b6:b9:0a:49:fa:66:55:c0:5a:66:d3:90:46:
ae:dd:4f:3f:fd:ca:94:f5:16:86:a3:7b:44:46:e7:
8a:72:0f:f4:c9:06:14:fd:f9:4a:7a:b5:4c:70:b2:
de:ad:1f:d0:13:b4:80:37:eb:a1:bc:75:32:c8:ff:
8e:c2:99:07:a8:40:44:82:a5:25:48:c0:5d:95:d8:
1d:dc:d4:05:45:9a:fa:99:f2:aa:4e:a9:b1:3e:b5:
cd:7b:a0:f0:64:97:75:43:b2:4a:9b:82:34:0b:6b:
a4:88:08:d8:54:8f:0c:d7:6d:ed:80:35:49:bc:41:
da:a5:3d:f4:c2:73:bd:bb:48:01:3e:dd:58:69:68:
44:ec:09:a8:b0:c6:aa:c5:5e:71:f0:a3:21:6e:3f:
b8:97:92:2a:97:7b:5e:85:19:5e:e9:49:da:2d:ac:
dc:40:7b:96:67:c3:22:96:bc:40:cd:c6:2c:7c:0f:
6d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F4:BA:AC:78:69:E9:A4:63:5E:2A:B7:25:10:49:88:23:A4:CF:EE
X509v3 Authority Key Identifier:
keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:cf:b6:df:ab:69:86:05:61:7c:92:91:8f:58:6d:b5:aa:1c:
a6:6d:2c:a9:39:d5:2b:43:f5:58:fe:6c:d8:04:87:53:71:0f:
3b:5e:e9:cc:56:97:48:c3:08:af:01:0d:77:fe:dc:4a:0d:b5:
89:f5:96:1e:96:47:15:b5:09:45:ab:0d:fd:ca:8a:be:65:99:
05:c0:cb:87:9b:0f:c3:7f:49:0d:b3:1d:20:be:72:d3:e5:00:
1d:53:7d:84:b3:07:d8:4e:35:f6:af:0a:a2:1b:60:60:87:c6:
6a:a2:05:d5:59:78:c5:5e:91:dc:13:36:33:49:45:74:8d:60:
f9:0a:0f:30:ee:f1:9b:8c:73:26:6f:85:b8:83:c1:34:1a:f0:
6b:2b:b0:ed:99:da:75:67:32:26:05:bc:a2:1a:4d:6a:44:f8:
44:29:51:0f:05:64:e5:1c:b3:d3:52:96:3e:f7:ca:70:b4:4c:
ec:32:59:14:da:33:d6:a2:ee:e2:0a:6f:e0:43:77:fa:26:44:
cc:0e:c4:b2:30:f7:d7:73:86:20:3a:7a:fd:b6:44:79:b6:0a:
95:5c:a2:69:f5:6e:47:b2:74:d7:c0:ae:da:17:d3:75:ec:62:
26:8b:f5:f3:b7:0e:a1:4a:f3:73:13:e3:54:7b:2b:2b:59:84:
6a:d8:09:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:23:39 2026 by rpki-client