
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
File: invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json)
Hash identifier: O1GCjcA4FAkZIO4siTuyKyakDgCH2xpLJSi4q2EY65s=
Subject key identifier: 05:C0:4E:E6:01:82:93:D9:BD:AA:C6:F9:D1:78:91:3F:F4:69:31:DB
Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
Certificate issuer: /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Certificate serial: 01A08AFA93F6526B9E56AD6988DF46A96B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
Manifest number: 07D9
Signing time: Thu 10 Sep 2026 11:01:12 +0000
Manifest this update: Thu 10 Sep 2026 11:01:12 +0000
Manifest next update: Fri 11 Sep 2026 11:01:12 +0000
Files and hashes: 1: 13bg8sr321aaC-jFOX86O1_lBzU.roa (hash: bU7Oi7TbB7FOIxER/ptIdZra1cEI8qAD1Nz/78F0Vtg=)
2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: eClQvc9ZokcuTy36zH2nXdvPm9dr5uGXmr/5Ny9w27g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:93:f6:52:6b:9e:56:ad:69:88:df:46:a9:6b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Validity
Not Before: Sep 10 11:01:12 2026 GMT
Not After : Sep 11 11:01:12 2026 GMT
Subject: CN=05c04ee6018293d9bdaac6f9d178913ff46931db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f1:72:04:ca:42:5b:3c:52:ff:d3:d8:05:d9:
61:da:16:ce:a0:86:07:b6:0f:52:d5:5c:f3:5b:f5:
92:d1:54:ba:00:90:b4:b4:65:3c:2c:9c:31:44:50:
1f:50:ae:7b:50:11:31:40:7a:d2:5d:b9:ac:80:6d:
bb:69:69:5c:7e:ff:8d:5c:5e:3e:e9:35:a8:20:cc:
5d:f9:56:03:7d:52:0a:f3:9d:4c:db:33:b0:df:12:
93:ac:cc:80:a7:18:f3:50:da:cf:26:7c:51:89:c9:
0f:15:79:3f:a1:b7:2a:15:be:94:57:1a:51:c0:be:
c0:fd:ec:cc:52:b2:98:08:84:0f:73:94:80:c8:e2:
39:27:b1:b9:c2:c8:f6:46:b9:94:ea:d0:be:41:6f:
97:83:fd:bd:83:17:5d:d2:31:bb:34:3a:82:c5:c6:
b4:4f:0f:26:7a:44:bf:b4:72:bb:0e:12:c2:30:09:
d6:9a:4d:8f:c6:6e:ee:36:ec:ac:42:2d:6b:40:41:
65:1a:26:31:2d:a7:b2:4b:33:98:71:bd:0e:62:47:
f2:24:48:51:46:15:d5:ba:fb:fb:f4:c3:bf:a4:c8:
39:04:82:ed:17:bf:07:61:6a:c2:31:9d:94:71:54:
23:72:54:ba:a0:00:26:9d:fd:74:2b:fd:a3:ae:0f:
d6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C0:4E:E6:01:82:93:D9:BD:AA:C6:F9:D1:78:91:3F:F4:69:31:DB
X509v3 Authority Key Identifier:
keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:7f:89:84:2f:95:1c:ac:09:1f:58:3e:63:b0:5a:ab:a8:04:
5f:02:5e:0d:ac:e5:31:52:9b:60:31:60:e0:a1:09:98:b9:1c:
37:5e:3f:a7:92:be:42:f4:f9:b7:69:bd:2b:28:3b:5f:71:4e:
ff:74:a3:f3:61:23:dd:6b:a8:50:a7:aa:36:6a:23:d5:91:60:
9e:e1:44:a5:47:ad:75:51:04:be:5e:6e:71:c9:14:e5:2e:6b:
f1:0a:64:73:a2:87:88:79:7d:97:ec:9b:8d:e2:7a:8b:47:50:
e4:1e:7b:b7:bb:62:83:6c:2e:ee:06:6e:97:0b:08:c6:d1:b7:
c2:bd:4b:70:ab:94:12:8d:2b:e7:d6:6e:e1:b6:f4:3a:89:2a:
ca:1e:05:24:da:bd:7c:95:c0:06:37:37:9e:26:fa:cb:83:32:
13:91:a3:80:10:07:5b:27:e0:44:ec:11:89:dc:98:98:a6:46:
a8:45:5f:48:4f:7c:7a:50:0b:89:a0:0b:23:1c:c5:96:0f:cd:
47:f0:13:ba:0b:b9:1d:47:b0:81:cd:17:4a:f4:7b:35:79:20:
b2:9f:22:ae:6d:4e:95:c9:55:1b:92:72:ed:d0:92:c4:5d:54:
70:6b:a6:28:a5:31:fc:e7:68:3b:f1:79:b5:66:7c:fe:cf:36:
df:f3:17:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:17:24 2026 by rpki-client