Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
File: s7b1TqmxWovU8zglOGyyd7A0Od0.mft (raw, json)
Hash identifier: jL16Ju9r/p0HSe11qG7TntNddI/M5Ve1oiYq2Dr25x4=
Subject key identifier: D0:2C:CA:85:B7:76:DC:AB:EF:33:88:F5:C6:EF:3E:F2:95:E0:FC:FE
Authority key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
Certificate issuer: /CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Certificate serial: 01A15B8C8E92956B0DD86AE47BD77BE2948A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
Manifest number: 1ABC
Signing time: Tue 20 Oct 2026 23:01:40 +0000
Manifest this update: Tue 20 Oct 2026 23:01:40 +0000
Manifest next update: Wed 21 Oct 2026 23:01:40 +0000
Files and hashes: 1: 1--FRY1CjawLnslfsBcAkrouqU6s.asa (hash: NFM53UpFWBl2wcWeqeLFtEIb13ge6QGgn48A2dxQblk=)
2: aftA-bCSN_cfnaumewln08mRqyk.roa (hash: ewCgfj5ZHQWWUV5zhZ6e7KdXcICBairndqt6imFYbD4=)
3: s7b1TqmxWovU8zglOGyyd7A0Od0.crl (hash: 2Gdxw+XKzgcKBgERARLZSFys4zddcabBw7bVogjm6UE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 23:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:8c:8e:92:95:6b:0d:d8:6a:e4:7b:d7:7b:e2:94:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Validity
Not Before: Oct 20 23:01:40 2026 GMT
Not After : Oct 21 23:01:40 2026 GMT
Subject: CN=d02cca85b776dcabef3388f5c6ef3ef295e0fcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:07:e5:84:6b:8e:ba:74:62:40:2c:26:7a:fa:
46:a0:a8:ae:85:21:8f:6b:16:7b:84:ef:62:0c:8f:
d1:b9:9d:f4:cd:25:81:14:0b:c4:3c:5d:d4:18:56:
91:b6:48:47:bf:8e:96:a1:c3:da:b3:51:5e:08:fa:
ef:21:ea:95:ad:ff:5b:14:58:84:32:aa:bb:68:12:
b8:4f:43:7a:73:82:f1:13:d9:04:4f:c4:7c:b1:44:
35:89:9c:60:4b:66:56:eb:93:28:bb:72:f6:6b:57:
fa:ce:29:f2:3b:47:67:dc:00:75:39:03:d7:a2:5d:
58:6a:20:c3:27:5d:4f:a0:b2:4b:b1:49:59:dc:f8:
fa:47:ee:b8:03:88:47:87:67:f5:85:ea:bb:a9:27:
6b:41:24:4c:0e:24:6c:19:72:50:69:10:92:96:8d:
a8:a0:ac:4f:f0:59:da:4b:d8:c0:82:7f:f5:87:f3:
03:8c:8a:a1:0d:cb:9b:73:88:29:0b:64:b6:12:22:
d0:b3:c2:5c:0a:9c:ee:e4:45:23:fb:46:84:80:a6:
c8:1f:9f:43:ec:3e:65:26:8a:e7:42:47:e3:dd:64:
ee:8f:df:df:c9:0b:42:5c:ae:20:43:db:1a:af:53:
4f:92:75:58:9c:ba:d2:e2:03:92:f5:59:d7:29:29:
3c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2C:CA:85:B7:76:DC:AB:EF:33:88:F5:C6:EF:3E:F2:95:E0:FC:FE
X509v3 Authority Key Identifier:
keyid:B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:43:36:cf:3b:c1:c8:8c:50:31:cf:72:e6:14:81:0a:3a:dc:
d2:e0:8a:4f:9d:a5:9a:0f:c3:e9:e2:a2:59:20:ed:e3:d4:64:
2a:da:fc:1d:e6:ce:d4:8c:e2:17:b9:4e:61:39:54:66:37:2f:
b6:38:af:d2:25:04:77:b8:0a:ae:da:ac:d3:e2:53:ea:3c:76:
81:dd:89:f7:b1:d4:1d:a6:c4:ac:27:69:1b:34:7a:76:0a:78:
e8:3b:e1:92:b5:93:d1:06:d7:d1:fb:e7:ed:29:4d:c0:24:1e:
a0:57:59:8a:88:c1:1b:8b:e6:40:89:aa:8e:fc:d1:66:26:c2:
aa:3d:78:24:bf:c1:aa:79:61:18:d0:e8:5d:e3:4e:a4:f7:a9:
d3:52:03:a3:f7:03:e4:10:da:c9:e5:35:8c:86:b1:2e:e2:60:
2a:9a:9b:1d:ba:8e:e1:9e:31:04:a1:79:cf:20:de:32:16:59:
b1:3f:3b:3e:58:50:44:45:46:bd:40:c4:93:58:68:04:65:97:
01:d4:30:ee:6f:ba:c1:85:08:62:1e:5d:67:c3:62:93:fa:c3:
f9:3f:91:de:6a:ee:7c:1d:4a:63:b5:b9:47:8f:5f:ef:f7:59:
4e:fb:ad:f1:c3:ed:ba:94:b7:12:22:12:48:98:6c:21:6e:3d:
ab:d6:ae:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 09:19:46 2026 by rpki-client