Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
File: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft (raw, json)
Hash identifier: WMnDX0avUA/oMXAnTmdB9J31JHvkI35SBwR2hcbNjZc=
Subject key identifier: B6:9C:A8:32:B0:05:31:5C:AF:97:79:CB:55:94:FE:F1:CD:61:78:AD
Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
Certificate issuer: /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Certificate serial: 01A17D05C43E735FBC607C899F58AC738457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 11:01:32 +0000
Manifest this update: Tue 27 Oct 2026 11:01:32 +0000
Manifest next update: Wed 28 Oct 2026 11:01:32 +0000
Files and hashes: 1: F13QQirUcyQJSbRfCl6w_cI9WWQ.roa (hash: Qmtb36fS7mGPq7TyueOpeM3xtlJooopxzuWWdKo+FIo=)
2: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl (hash: kxjHknhQIUCzdgaqFxO9GNjOwkply2pgSJVB4LFjEZ4=)
3: yXL2c-lh8z3Pu6QXVoEmuyvEfX4.roa (hash: yk0yZqIR3aCNm4M9eEBAKHg+9JBzxKPA8wbCVYP14nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:c4:3e:73:5f:bc:60:7c:89:9f:58:ac:73:84:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Validity
Not Before: Oct 27 11:01:32 2026 GMT
Not After : Oct 28 11:01:32 2026 GMT
Subject: CN=b69ca832b005315caf9779cb5594fef1cd6178ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:1d:bf:c0:ad:f2:a4:7a:c4:f7:fa:40:d5:
9f:5d:bd:6e:da:57:2f:6c:35:ad:af:99:d1:33:09:
94:72:8a:0d:e1:aa:0b:49:25:c2:17:34:dd:6d:33:
75:76:58:d1:c8:7a:34:94:68:60:92:a0:be:ea:e9:
27:6c:d4:8e:ee:49:74:42:be:8c:69:ec:a3:a7:48:
0f:9a:3c:65:de:97:a4:91:4e:cb:89:51:91:b0:07:
4b:f0:1d:ab:ae:54:f9:cf:55:a8:90:77:58:69:47:
df:de:47:46:55:fd:69:c1:41:d5:bb:66:bb:75:13:
68:63:e8:da:d8:61:77:94:87:88:d8:d1:9e:41:e0:
0f:18:e9:c9:8f:39:1c:6f:0c:64:f5:8e:a1:a3:ef:
72:7a:ee:46:37:f2:fb:fd:ce:b0:88:52:66:c1:4e:
17:f8:da:d2:1e:98:39:5a:9d:d5:69:6a:c6:00:f4:
1d:02:17:2e:ca:fc:5d:f2:cc:a0:4d:4f:1d:dd:d3:
63:a2:52:6d:d9:0c:11:b6:82:ec:86:99:8f:66:36:
84:b7:5d:5a:11:1e:20:fe:ae:78:6e:ad:0b:30:9c:
d3:31:1b:a2:dc:38:95:c8:dc:2f:31:a2:ac:6f:7a:
5d:94:d6:6b:03:dd:d0:18:f8:e8:13:ef:82:e9:72:
2b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9C:A8:32:B0:05:31:5C:AF:97:79:CB:55:94:FE:F1:CD:61:78:AD
X509v3 Authority Key Identifier:
keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1e:d6:d7:1e:43:62:40:d1:e0:d8:56:50:f7:99:06:d2:aa:
3a:29:36:ad:49:f3:b6:cb:bf:8b:39:95:12:61:e4:9e:92:1e:
e9:14:21:26:2d:61:d7:ba:29:0e:e1:d1:04:27:da:f2:e1:7c:
53:36:c9:30:eb:30:c3:ae:49:f8:69:42:69:33:ec:44:ce:c2:
02:16:ac:1b:81:0e:ad:f0:38:f5:d0:01:c4:f5:5b:69:94:46:
32:11:ff:b9:5b:b4:8a:da:1c:76:d1:4f:90:78:9f:64:ce:e8:
a0:4a:4d:d3:a9:eb:ee:42:04:c1:00:0a:c5:33:47:39:ca:99:
15:93:fa:11:0b:e0:fd:a2:2f:1e:92:d9:69:80:9f:29:ef:de:
ff:dc:1c:1f:9d:92:8a:5a:99:f0:1b:39:35:17:c6:50:76:02:
8e:6f:ff:8f:9a:aa:71:21:b7:68:0d:3f:3e:07:d6:da:38:15:
20:63:07:76:18:33:d0:c5:d9:b4:be:99:76:a3:74:7b:3c:cb:
42:71:a9:f5:16:35:01:09:31:17:51:6a:89:1f:d9:2e:b4:2b:
45:42:7e:69:5a:d4:a7:a1:c5:f9:c0:31:24:9e:7f:3f:2f:bc:
bb:56:38:b7:30:f8:96:8f:66:2d:b4:b4:de:2f:3e:de:c3:33:
10:4b:89:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:11:34 2026 by rpki-client