Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
File: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft (raw, json)
Hash identifier: YWNMZCSXoSeJV3ft28/6ViSRL8A2xEY+Qe+UG0ZUL+Q=
Subject key identifier: A8:52:1D:29:92:81:C6:29:5C:BD:9A:A8:74:12:BF:72:8B:3A:19:33
Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
Certificate issuer: /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Certificate serial: 01A17EF3D819616B5005F9A495AAE0B5F95F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
Manifest number: 1AC8
Signing time: Tue 27 Oct 2026 20:01:12 +0000
Manifest this update: Tue 27 Oct 2026 20:01:12 +0000
Manifest next update: Wed 28 Oct 2026 20:01:12 +0000
Files and hashes: 1: F13QQirUcyQJSbRfCl6w_cI9WWQ.roa (hash: Qmtb36fS7mGPq7TyueOpeM3xtlJooopxzuWWdKo+FIo=)
2: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl (hash: SoxmwIE9Id9Spt0lwwo+9JdgURGcIOjFBeZHMY90zN0=)
3: yXL2c-lh8z3Pu6QXVoEmuyvEfX4.roa (hash: yk0yZqIR3aCNm4M9eEBAKHg+9JBzxKPA8wbCVYP14nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f3:d8:19:61:6b:50:05:f9:a4:95:aa:e0:b5:f9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Validity
Not Before: Oct 27 20:01:12 2026 GMT
Not After : Oct 28 20:01:12 2026 GMT
Subject: CN=a8521d299281c6295cbd9aa87412bf728b3a1933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ec:73:51:70:2a:4e:99:c9:b9:ce:7c:08:c7:
17:bf:4b:ed:c6:38:e1:24:35:4c:d1:58:b1:1b:cb:
5e:7c:3a:a5:9d:f2:a0:18:07:e6:e2:6f:3d:cb:24:
86:e7:de:4e:2e:dc:76:4c:2f:03:cb:00:4b:e1:dc:
85:cc:60:4c:5b:02:85:a0:72:fa:ca:ed:92:92:2d:
f8:1d:bf:3c:eb:a7:d7:f1:cb:62:ca:77:1e:a3:9a:
da:c5:3b:67:55:53:18:a3:12:cc:8c:c5:58:2c:a6:
19:c1:fb:c5:b5:7d:f7:ee:d3:76:3d:64:ef:a1:18:
61:25:58:35:6f:76:2b:47:b8:58:a6:5a:df:4a:d5:
7b:e1:c8:f1:97:a8:39:8a:35:71:b5:af:b8:48:ff:
f3:6b:95:9a:ae:08:fd:15:8b:2b:c3:4e:45:2a:4e:
14:8e:59:ed:0d:4a:4a:dc:61:1a:4c:b8:fd:cd:df:
48:af:14:03:c4:8f:50:75:0c:a7:e6:93:ce:9e:2d:
09:68:5a:20:09:f7:b2:71:13:09:f7:be:71:c5:00:
f5:0c:3c:1e:43:67:29:1c:85:8a:e1:4f:18:f7:73:
69:9a:c9:7b:11:7d:b7:48:38:d2:62:92:99:c8:ef:
a0:6e:25:52:47:1b:4e:5a:96:a8:fc:51:9a:09:3e:
e3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:52:1D:29:92:81:C6:29:5C:BD:9A:A8:74:12:BF:72:8B:3A:19:33
X509v3 Authority Key Identifier:
keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:10:09:6b:0f:a6:68:3c:38:8a:3f:8d:68:6a:8c:2e:aa:0c:
47:9d:cd:96:06:b2:d2:7f:13:36:00:36:4d:11:28:c3:81:49:
e2:54:06:7e:33:87:38:38:ba:52:83:bd:a0:52:74:41:33:da:
21:9d:26:53:bf:b1:f5:ba:e0:af:d3:a6:bf:d9:ee:9d:43:1d:
e3:33:ca:89:33:39:00:02:6f:c7:c1:82:14:19:84:39:9a:d0:
fa:42:d9:24:5e:f5:74:76:61:e9:b7:80:66:3b:86:43:f6:36:
db:34:c4:e6:f4:36:92:13:be:bc:33:f2:17:4b:c7:6a:07:86:
e2:1f:e1:5f:b6:15:c1:a5:53:df:3d:be:2d:27:1a:76:a7:c5:
6e:29:6a:91:86:11:18:e5:81:4f:24:0f:8b:53:71:7e:5f:9e:
9b:ea:33:de:aa:ca:27:bc:00:ce:2f:eb:80:10:1e:06:54:89:
d6:10:b6:d8:8d:6d:f7:f3:69:f0:d2:2d:e6:2e:86:ac:cd:d7:
e8:d2:9a:4d:97:7b:40:06:da:bb:3a:d5:7d:79:22:1e:c8:cc:
49:b2:c5:1b:7c:cb:ae:15:b6:04:e0:f4:a5:47:8a:5f:c4:81:
00:02:e7:c7:e3:7c:e4:ac:6b:8c:7b:35:3f:b5:32:f7:bc:cb:
9c:71:d3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:01:14 2026 by rpki-client