Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier: Em5iHzhFuiSlxwSfoJJ350J6IqpQLyE0IOxNX/gXfcc=
Subject key identifier: 9E:0D:5B:AE:69:CE:F0:B9:FA:FA:05:82:7E:55:42:5B:28:F0:56:BF
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 019D288471FC5D555B23992E3AF5915C76E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number: 1891
Signing time: Thu 26 Mar 2026 05:01:01 +0000
Manifest this update: Thu 26 Mar 2026 05:01:01 +0000
Manifest next update: Fri 27 Mar 2026 05:01:01 +0000
Files and hashes: 1: O0zdzMf69p1geR9BzbHj8H6216Q.roa (hash: gB3ykbY7Zy2yOIDfRVoU3HqEBAgziuKZvTGr//ZJWIo=)
2: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: sj7BMijSV1KtdR3r36Qa+sLt/CDP29t8X3TB95uRTog=)
3: sYgcwFmXC21qQr4HaIkoLUDZGq4.roa (hash: o16QA0TxR5R2SVkQH4tgiDW7/Tyeif3rP5L2akN0sow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:71:fc:5d:55:5b:23:99:2e:3a:f5:91:5c:76:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Mar 26 05:01:01 2026 GMT
Not After : Mar 27 05:01:01 2026 GMT
Subject: CN=9e0d5bae69cef0b9fafa05827e55425b28f056bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:89:cb:c7:a8:e8:88:17:34:6e:69:57:9a:b6:
a0:d9:57:c5:0b:a7:22:0a:c2:a3:3f:e7:ef:0a:a8:
63:0c:d5:d2:cb:19:22:29:ac:83:7b:5e:5d:a2:1e:
5c:02:32:2c:65:d2:26:fa:22:06:19:5e:9c:f0:41:
e9:d2:3a:32:26:09:2b:bb:be:99:f8:04:30:fd:48:
5a:43:2c:78:0c:1f:b7:66:99:7a:e5:d0:b7:34:8d:
51:84:88:4e:13:9e:ec:37:e3:38:2f:39:2d:bf:46:
3b:d9:b5:6e:07:7c:83:20:fb:c0:06:f1:12:70:a1:
54:44:d2:04:6a:52:54:fa:ce:37:fd:8e:d3:f8:f1:
69:3b:28:fe:25:7a:9d:a7:f8:d1:21:c2:86:f0:30:
d9:8a:8b:5d:7b:34:4e:b8:82:64:ee:bf:80:3f:35:
8b:da:b2:52:5c:1b:9a:7d:4f:d1:ed:1f:8a:2e:90:
c0:57:e9:f4:41:c9:41:43:6a:40:f7:2f:0e:1b:bc:
9e:4b:26:e7:28:6e:6b:44:5d:74:40:73:d3:59:de:
1b:c8:40:71:a3:e7:7e:e0:f8:b2:5e:20:15:e7:12:
31:01:c9:19:dc:84:30:54:ef:7a:30:0f:48:76:0e:
e6:82:36:f4:1c:9e:a8:4e:af:28:cf:7b:d9:e3:aa:
fc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0D:5B:AE:69:CE:F0:B9:FA:FA:05:82:7E:55:42:5B:28:F0:56:BF
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0a:c7:dd:5c:ff:fa:08:4d:b2:ca:8c:c3:d9:9c:2b:3e:89:
d8:6f:27:e0:1d:7a:8c:37:4f:7a:72:15:07:6b:8d:3f:c3:4b:
ca:d0:0b:a7:f9:d7:1e:66:ad:3a:d5:36:a9:d7:97:c4:bc:05:
7e:f5:77:6b:7d:e6:ae:25:fd:32:2a:da:85:34:25:17:fb:3d:
e0:96:72:f9:b5:f2:4f:57:fd:f3:14:be:78:61:b8:e6:98:f4:
18:62:72:bb:56:4f:94:1f:8c:38:65:b6:93:7a:44:30:54:c8:
40:26:1c:ef:eb:90:2b:8d:69:68:b1:47:5b:57:8f:10:07:25:
f7:04:cf:fb:af:4b:94:14:c1:b9:b9:fa:06:9d:9f:16:52:0e:
32:a9:11:0c:8b:e3:b5:41:c5:8a:4c:b3:54:0d:8e:c4:ad:49:
c1:3c:1f:97:69:40:6d:99:17:41:b1:01:c3:72:c6:61:52:5a:
67:d4:0f:cd:df:6d:23:22:db:2a:40:47:a7:f0:49:67:f7:18:
b3:47:b7:b5:64:14:f7:60:77:e4:cf:83:ea:d8:bc:f8:1f:fe:
ec:b1:6e:df:f0:2a:d4:78:e1:b4:58:48:07:fa:03:b6:8d:7a:
71:4f:78:a6:cc:7f:a3:87:a2:9d:c4:76:a7:fe:28:ca:b6:20:
a9:12:12:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:54:40 2026 by rpki-client