Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier: mWok8xbGu+/TmxEl04oUsouZHBEiJB7Kz1QrhFgXhp8=
Subject key identifier: 9B:31:9D:50:38:75:68:8F:A2:2A:FA:4E:2B:C1:E7:78:14:2F:3E:9D
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 01A0E28714BB790749772555EF1F008BCA8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number: 1A7F
Signing time: Sun 27 Sep 2026 11:01:38 +0000
Manifest this update: Sun 27 Sep 2026 11:01:38 +0000
Manifest next update: Mon 28 Sep 2026 11:01:38 +0000
Files and hashes: 1: O0zdzMf69p1geR9BzbHj8H6216Q.roa (hash: gB3ykbY7Zy2yOIDfRVoU3HqEBAgziuKZvTGr//ZJWIo=)
2: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: 0wwuvkubgzND39q8IuUHLBbZUW0KTCWYctzkEEj2r2w=)
3: sYgcwFmXC21qQr4HaIkoLUDZGq4.roa (hash: o16QA0TxR5R2SVkQH4tgiDW7/Tyeif3rP5L2akN0sow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:87:14:bb:79:07:49:77:25:55:ef:1f:00:8b:ca:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Sep 27 11:01:38 2026 GMT
Not After : Sep 28 11:01:38 2026 GMT
Subject: CN=9b319d503875688fa22afa4e2bc1e778142f3e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c4:3f:b1:54:62:83:f8:40:0c:2a:11:86:f4:
0c:42:93:e9:0f:41:40:01:b7:cc:35:b5:96:12:f0:
97:5b:f4:f1:87:dd:81:b0:6e:c4:5b:81:4f:17:60:
18:8b:8f:c1:87:60:92:1b:38:63:ad:c5:cd:93:ec:
f6:11:3a:7e:43:80:93:23:09:51:41:2d:2e:8d:64:
99:8c:12:15:89:02:a6:4e:92:c5:c4:33:be:74:71:
14:ab:36:8e:f7:46:a6:77:40:19:6c:80:96:6c:b5:
4d:a8:11:67:70:74:32:87:42:7b:23:39:83:42:38:
be:85:0e:ea:59:1e:52:d1:59:16:f3:ea:a0:e2:c4:
e7:a9:b2:81:6d:4a:59:77:0d:33:8a:e5:59:d5:a0:
c6:c7:ef:67:83:bb:65:6a:dc:80:5d:42:26:18:f4:
36:da:5a:b2:33:0c:f5:ce:15:dc:6e:bc:78:1b:68:
00:a9:a8:d5:8e:03:e2:33:ae:88:09:6e:ec:42:af:
c5:fb:53:e2:c7:09:34:23:00:02:ad:1c:30:54:d2:
b0:f2:90:b7:e2:bc:b7:4a:26:2d:97:3b:f3:91:56:
18:56:a4:24:cf:d4:0e:b7:d7:ad:33:53:6b:94:fa:
8c:46:89:ec:06:9d:c9:3f:4d:be:03:15:56:04:1c:
25:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:31:9D:50:38:75:68:8F:A2:2A:FA:4E:2B:C1:E7:78:14:2F:3E:9D
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a9:b7:33:6f:25:86:9e:82:a2:35:cb:95:24:d5:07:4c:e6:
72:a3:57:ff:83:c3:ba:a6:51:65:48:69:5b:6b:98:ac:1c:43:
ff:82:29:5e:de:c5:de:02:ad:62:5f:28:5c:54:77:6d:ca:69:
34:88:05:8f:f9:8c:82:fe:2e:eb:e2:eb:96:b3:f9:a0:16:53:
6a:37:cc:44:13:1b:6e:61:d8:ed:cb:d1:48:35:73:6d:40:a5:
73:00:f0:83:01:65:e5:9f:7b:f1:48:63:55:f1:b6:5a:02:a3:
e8:f0:29:3b:96:b6:a9:4e:c6:d8:2e:b7:9b:55:a7:7a:b8:13:
0b:f4:10:99:fd:a9:22:e6:d9:71:63:27:2d:64:f9:73:93:6d:
12:90:db:e9:16:58:de:06:77:56:7e:a0:1d:56:12:88:bc:62:
21:c3:68:9a:08:7d:47:e4:37:02:b7:87:cd:a2:3e:8d:f8:64:
53:32:eb:96:0f:0d:f6:1a:80:16:88:ad:95:b7:4e:b3:c8:09:
cb:d4:df:93:dc:53:82:13:21:9d:3b:44:0e:d4:38:38:c1:51:
79:ae:76:87:66:81:5c:1d:d6:fc:cd:68:f2:f8:04:ad:e6:f7:
30:e2:9c:e5:04:7d:3c:19:02:8c:79:64:e2:68:fb:ca:2b:d8:
9d:23:04:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:49:47 2026 by rpki-client