Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
File: t72OrhZp3rOj-kGGSR4FyzLOCSo.mft (raw, json)
Hash identifier: KKzATNBYnEtKHNwJTbrosaO4gE+tr4iOgjvE+oYnUzo=
Subject key identifier: 23:5A:D5:03:B3:B4:5C:47:3A:58:BE:8E:37:CB:E7:5B:BB:CF:62:FF
Authority key identifier: B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
Certificate issuer: /CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Certificate serial: 01A1374926D5F64EAB6C266E0AB7DE7A233A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
Manifest number: 155F
Signing time: Tue 13 Oct 2026 22:01:43 +0000
Manifest this update: Tue 13 Oct 2026 22:01:43 +0000
Manifest next update: Wed 14 Oct 2026 22:01:43 +0000
Files and hashes: 1: OhJpimseggO-Y4_hoEiI1nB-3a4.roa (hash: zDlcOi1opjdDim5XNlXyOBikBSD080S2FUrAKbWMWcM=)
2: t72OrhZp3rOj-kGGSR4FyzLOCSo.crl (hash: 3foWzuj9mkfCEkEAnhqVRnOWcD6RU1FsMU8oSheBV68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:49:26:d5:f6:4e:ab:6c:26:6e:0a:b7:de:7a:23:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Validity
Not Before: Oct 13 22:01:43 2026 GMT
Not After : Oct 14 22:01:43 2026 GMT
Subject: CN=235ad503b3b45c473a58be8e37cbe75bbbcf62ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:53:8f:a2:70:cc:38:2c:71:e9:f4:48:d1:3f:
15:4e:64:10:cb:be:60:67:70:2c:01:b2:4c:34:1b:
0e:5c:9a:c1:6c:d8:51:dc:94:da:64:3a:31:b0:0a:
5b:03:30:65:e4:f0:77:51:63:cd:52:9e:a7:8e:f1:
32:6e:bb:d8:e1:93:cc:26:de:4d:97:77:2a:99:f4:
43:bc:9e:b3:f1:47:8e:b3:8d:43:fa:be:14:d6:89:
69:9d:2e:fd:04:01:05:04:36:bf:89:c7:64:51:c3:
4a:7e:ce:4e:03:39:63:b0:07:43:2d:ce:8b:66:f2:
31:56:cf:aa:2d:1c:d4:37:f0:85:e0:4e:c9:22:6c:
6f:27:08:dc:83:7b:16:24:2f:92:73:47:f7:73:de:
6f:5f:75:b4:4d:21:55:84:9f:30:f7:49:d9:05:9d:
6d:0b:b3:9c:03:18:38:71:d8:40:69:e3:8b:e2:3e:
9e:cb:ad:d9:c3:d9:13:92:34:c4:c3:7b:70:87:72:
fd:b0:1e:46:dd:9a:0d:ed:30:fb:8f:9d:99:c3:1a:
6a:8a:a9:6c:ff:3c:5d:df:2f:be:13:d8:ef:11:68:
5d:39:14:d9:a7:ea:d4:e8:7e:b4:f7:bb:bf:96:ee:
73:fe:5e:58:de:66:50:05:c8:48:ee:f0:fb:8e:0a:
7f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5A:D5:03:B3:B4:5C:47:3A:58:BE:8E:37:CB:E7:5B:BB:CF:62:FF
X509v3 Authority Key Identifier:
keyid:B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0c:1b:a7:bb:d7:1c:bd:ca:22:7b:17:81:19:d0:51:ec:37:
71:52:19:34:29:93:76:40:96:78:af:a9:a9:d1:1e:3f:6a:30:
6c:92:01:eb:f7:d8:62:f9:76:e7:c5:37:ee:af:28:12:7f:04:
18:d6:27:01:5a:ee:6f:6f:2b:6f:e5:54:49:ab:73:a2:53:cb:
d8:23:c0:f9:7c:07:49:0e:73:09:3b:29:f2:d4:5e:54:fa:7c:
ad:78:c4:8a:a5:86:56:f8:65:d0:6e:ed:e1:8b:10:fb:53:8a:
84:69:32:e8:e6:04:0a:a6:ff:6c:80:c8:be:c8:20:07:79:20:
88:35:f9:43:86:a6:95:fc:3f:b5:77:3e:40:8c:83:97:d0:65:
d9:9e:1f:fa:be:5e:0b:15:a4:0a:b6:69:69:8b:8e:e8:f9:27:
fa:dd:08:cf:eb:c0:da:18:44:3b:ec:ae:6d:b0:1e:ca:3c:64:
40:79:5b:6b:6d:9f:98:4a:8a:10:0e:a3:36:07:2e:44:09:eb:
81:64:04:d4:f5:87:79:78:70:ea:ea:44:2b:3d:aa:05:f1:9d:
f8:6e:d6:f1:8e:06:5e:38:1e:a5:99:94:b0:68:11:a4:8d:1c:
73:de:aa:04:86:3b:4e:27:e4:0a:1b:0e:b4:cf:b5:9a:3b:62:
bf:22:f1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:04:50 2026 by rpki-client