Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
File: g7d8noEHbPS0zv7V7vIQf3UsNjA.mft (raw, json)
Hash identifier: pkD7yLagAt5LXTwugCNeQ6sDmxyHI2p/2oGVXPECPg0=
Subject key identifier: 75:D5:C7:B3:9E:13:D7:4F:38:DF:4E:0D:B5:A0:41:3C:3B:3F:91:F1
Authority key identifier: 83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
Certificate issuer: /CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Certificate serial: 01A16FB7BC53983EFEC029586AD51F150942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
Manifest number: 1AC0
Signing time: Sat 24 Oct 2026 21:01:14 +0000
Manifest this update: Sat 24 Oct 2026 21:01:14 +0000
Manifest next update: Sun 25 Oct 2026 21:01:14 +0000
Files and hashes: 1: GHGkwEVylqYxr15hWfLzxHp9MA0.roa (hash: 6MgKNZ/wr6UP8/R75FjFSF75c2qdb4J/GZr8B0Cgj+s=)
2: g7d8noEHbPS0zv7V7vIQf3UsNjA.crl (hash: g5WgLa/MK4xB57uYZUMS/OxVRxuMAqOtBFsUvbISVqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 21:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:b7:bc:53:98:3e:fe:c0:29:58:6a:d5:1f:15:09:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Validity
Not Before: Oct 24 21:01:14 2026 GMT
Not After : Oct 25 21:01:14 2026 GMT
Subject: CN=75d5c7b39e13d74f38df4e0db5a0413c3b3f91f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0f:c6:1d:65:27:08:42:62:60:50:d3:94:0e:
11:3d:d1:66:69:dc:f7:b0:dd:de:67:4a:52:44:3f:
63:c7:d9:db:14:77:9d:7d:16:24:92:8b:bd:03:3a:
8f:10:aa:60:9b:9e:ce:6d:e9:fe:f1:ec:4e:d9:e9:
5f:05:20:f8:7d:28:bb:7d:b3:cc:28:d0:62:39:20:
bc:fa:e0:8d:59:64:85:1b:94:28:bc:ea:3a:de:82:
15:f3:02:c5:2e:de:99:00:61:6a:0d:a8:ae:75:77:
6c:98:dd:8a:7a:79:19:b0:64:a8:01:79:ac:19:54:
4f:3c:3f:8d:b2:17:88:74:3e:ca:8c:ca:24:fc:e6:
bf:e1:e0:dc:5c:89:f6:c9:38:07:c4:89:a0:7b:8b:
a9:09:ef:68:e1:52:c6:12:71:9d:b5:98:9a:3c:da:
57:62:cd:1c:8a:7f:66:50:e3:71:24:d6:3a:d9:2b:
24:b8:14:a9:12:5e:40:1f:b0:06:2a:bd:bb:51:72:
13:cb:bf:72:4c:fe:89:bc:69:46:30:8d:73:04:f4:
7f:0a:86:b9:68:dd:54:6f:c6:9b:81:f9:76:15:91:
90:07:57:5b:1f:44:27:40:98:c6:be:5d:c7:2d:a3:
8c:94:fd:b5:0c:20:a8:c2:f4:4c:30:95:8a:b2:49:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D5:C7:B3:9E:13:D7:4F:38:DF:4E:0D:B5:A0:41:3C:3B:3F:91:F1
X509v3 Authority Key Identifier:
keyid:83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5c:0b:32:7d:f0:21:3b:82:8b:c8:8d:e7:63:50:1a:3a:d6:
ed:cb:3e:d9:3b:2a:f3:7c:0f:0d:55:c4:d8:05:62:ff:63:1c:
47:a1:27:e2:3e:2a:ff:45:26:71:6a:d4:cf:fc:ab:b8:0e:b7:
21:3c:b2:29:36:89:d7:01:d9:ff:aa:de:76:c5:d0:89:d4:ce:
43:f0:35:e9:6a:01:ea:33:1a:af:bc:f9:ac:62:e5:83:52:02:
fc:96:67:64:a3:46:cf:d4:d6:5d:fe:50:a9:f5:4d:73:7e:31:
52:c6:db:f5:27:47:2d:9b:1b:54:82:36:61:6d:e7:7c:e6:93:
45:47:1d:46:43:41:ba:0d:f9:9f:55:f5:76:36:d6:1f:aa:6d:
8d:a0:d4:97:ec:d1:00:8e:e2:59:0d:c2:34:2e:3a:aa:20:91:
61:45:e7:89:20:d2:ba:ba:46:97:74:65:c8:45:bc:0b:21:05:
d1:9e:5a:c9:53:18:00:cc:24:e0:5c:a9:8d:00:77:87:8c:7b:
be:ba:c4:4b:8b:f3:5f:ea:25:10:a5:55:ad:28:bc:eb:30:37:
40:d2:4a:5d:7f:bc:eb:39:6e:9d:ef:72:6c:df:32:a1:ca:4f:
47:eb:8f:e8:33:ad:52:8d:f4:4f:64:5d:96:a8:d0:00:ef:be:
05:5e:e7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:07:13 2026 by rpki-client