Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/I795FHzwqGzvWHrdDmao9y7HJrQ.mft
File: I795FHzwqGzvWHrdDmao9y7HJrQ.mft (raw, json)
Hash identifier: QJ4Yhws9Habi4B8H4dsaD7rZ/AE2Uzw7WLoDtiUFxh0=
Subject key identifier: A7:EE:FD:48:6D:82:AA:CA:5F:BC:31:0C:17:8A:23:7B:EF:60:51:1B
Authority key identifier: 23:BF:79:14:7C:F0:A8:6C:EF:58:7A:DD:0E:66:A8:F7:2E:C7:26:B4
Certificate issuer: /CN=23bf79147cf0a86cef587add0e66a8f72ec726b4
Certificate serial: 01A08A8D1BE8FB587506903E8AE5F4DBB80D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I795FHzwqGzvWHrdDmao9y7HJrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/I795FHzwqGzvWHrdDmao9y7HJrQ.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:38 +0000
Manifest this update: Thu 10 Sep 2026 09:01:38 +0000
Manifest next update: Fri 11 Sep 2026 09:01:38 +0000
Files and hashes: 1: I795FHzwqGzvWHrdDmao9y7HJrQ.crl (hash: ldzuV3vgYpKoz1tELVfCQjFnMvfP+D9GDeLWv7NR5Ic=)
2: Syx-W1nauzr5Dpxe6peULgXAAtY.roa (hash: TRbEL2oQIoKttvvoFuUorq6cRO4At0CjTJYaz/OskZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/I795FHzwqGzvWHrdDmao9y7HJrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/I795FHzwqGzvWHrdDmao9y7HJrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I795FHzwqGzvWHrdDmao9y7HJrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:1b:e8:fb:58:75:06:90:3e:8a:e5:f4:db:b8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23bf79147cf0a86cef587add0e66a8f72ec726b4
Validity
Not Before: Sep 10 09:01:38 2026 GMT
Not After : Sep 11 09:01:38 2026 GMT
Subject: CN=a7eefd486d82aaca5fbc310c178a237bef60511b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fd:a9:7c:df:fa:72:09:2d:08:da:18:96:06:
fc:e3:c9:fa:9e:4b:61:02:e4:ef:ea:ee:71:91:66:
ff:e2:80:7c:a1:9a:a5:03:78:1b:e3:d9:17:eb:81:
17:c2:83:b4:01:f1:ec:0d:35:49:f2:42:80:8d:2f:
be:b0:56:68:bb:29:0c:11:ab:ae:22:b4:50:da:8e:
b9:30:75:09:a2:3c:c5:fa:0e:42:25:33:b7:9a:0e:
a2:e0:72:f3:f5:55:68:73:73:84:65:80:9c:2a:eb:
d6:e3:29:45:db:2f:03:2f:b4:c2:62:ef:7a:83:d3:
54:27:79:e2:ec:cd:73:41:c4:db:8a:4d:15:e2:a4:
e1:0e:7c:6f:07:06:15:1f:c4:66:91:c3:37:2e:87:
e7:c6:db:28:16:bc:41:4a:cb:d9:62:53:4f:b8:d6:
df:15:fc:a6:55:a7:0b:8e:3e:b2:4a:84:e0:f8:9d:
d8:86:92:80:5d:d4:25:18:ee:a8:b3:ad:ad:57:8c:
87:7a:b4:dc:49:1a:aa:3d:3c:78:1e:93:9b:e3:79:
48:da:b9:7e:fd:f5:2e:72:ab:47:13:17:85:ca:ae:
b0:e8:20:ea:88:9c:04:e4:c3:8e:22:03:30:be:fa:
fc:1d:65:8f:d2:48:5f:94:25:2d:09:53:1a:1a:f7:
4c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EE:FD:48:6D:82:AA:CA:5F:BC:31:0C:17:8A:23:7B:EF:60:51:1B
X509v3 Authority Key Identifier:
keyid:23:BF:79:14:7C:F0:A8:6C:EF:58:7A:DD:0E:66:A8:F7:2E:C7:26:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I795FHzwqGzvWHrdDmao9y7HJrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/I795FHzwqGzvWHrdDmao9y7HJrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/I795FHzwqGzvWHrdDmao9y7HJrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3b:98:e4:6c:26:06:82:ac:6f:1e:63:ec:06:50:0f:11:a2:
12:4d:27:5f:75:70:1e:c8:b7:89:e0:f5:12:c0:2a:4b:9d:3c:
f6:62:6c:2d:48:7a:a4:3c:1e:c9:75:25:80:88:1f:ac:0a:b9:
16:5e:54:8a:66:1c:c2:ee:40:61:3a:14:a0:40:c0:ff:25:a4:
0c:f0:e2:0e:52:df:9b:43:77:0c:63:be:03:e5:b8:25:ae:89:
de:c1:0f:4a:c7:5f:22:34:be:e0:56:b5:ec:4e:a9:3f:47:b7:
34:69:e5:63:96:fb:75:c1:e1:15:3b:86:0e:07:af:49:94:37:
4b:f1:ac:0c:ac:e8:13:ce:cf:3b:32:96:67:bf:81:0c:e4:2e:
f2:66:e1:56:03:80:0e:70:3a:fe:31:4d:8d:ef:89:59:52:fb:
c2:5f:2b:2c:4f:28:5d:05:57:a1:ec:0c:cb:df:34:ba:61:dc:
9b:9f:7c:e0:4b:db:00:5f:9e:25:13:93:38:01:b2:38:83:3a:
3b:37:21:38:3e:a5:a9:9e:b3:f1:36:de:8f:2e:0e:f5:22:ed:
60:a4:74:cd:9e:0c:b5:54:a2:4b:94:a1:b3:34:22:71:68:11:
76:3f:f1:8b:dc:97:9e:eb:ed:e7:6f:d0:78:07:01:5a:43:d0:
61:1e:bb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:05:50 2026 by rpki-client