Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
File: r7NIK47C52BYefhTpI26wGFF4bs.mft (raw, json)
Hash identifier: fJY8ky3tVJVkxxARwyQ0xudDy93u1zNdSCDwR8MhaKs=
Subject key identifier: 10:DF:54:BC:C1:6F:B4:5E:6A:24:B8:72:9A:B3:6F:8E:E8:35:EB:2E
Authority key identifier: AF:B3:48:2B:8E:C2:E7:60:58:79:F8:53:A4:8D:BA:C0:61:45:E1:BB
Certificate issuer: /CN=afb3482b8ec2e7605879f853a48dbac06145e1bb
Certificate serial: 01A08D1FD4E8AE288B4BBCDCFD6D3F2AE82D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
Manifest number: E8
Signing time: Thu 10 Sep 2026 21:01:08 +0000
Manifest this update: Thu 10 Sep 2026 21:01:08 +0000
Manifest next update: Fri 11 Sep 2026 21:01:08 +0000
Files and hashes: 1: WBk7Na60wHxHk-VM6akyZtD9s1s.roa (hash: b2ttBqFw9+7/WWlQ+7GOBl/vDcoZ0Tf3cO+FRNRCiVU=)
2: r7NIK47C52BYefhTpI26wGFF4bs.crl (hash: EvZYXGlJ1tVoVbVHuC1DvVWxbL9oVitoKGLF6aievCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:d4:e8:ae:28:8b:4b:bc:dc:fd:6d:3f:2a:e8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb3482b8ec2e7605879f853a48dbac06145e1bb
Validity
Not Before: Sep 10 21:01:08 2026 GMT
Not After : Sep 11 21:01:08 2026 GMT
Subject: CN=10df54bcc16fb45e6a24b8729ab36f8ee835eb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d3:44:19:9c:5d:37:20:28:de:00:52:45:40:
4d:31:2b:fc:71:26:9f:b5:6a:10:fd:4b:eb:08:56:
00:eb:43:4d:77:2c:1b:fc:90:5b:56:ca:42:3e:85:
13:81:21:a2:63:35:48:b3:c6:aa:ed:08:e4:cd:d6:
3c:6c:22:80:f1:26:cc:94:96:a0:e1:a8:c8:a1:fc:
8b:97:12:9b:d9:30:3f:97:a4:78:98:79:d4:a7:15:
fb:19:62:9d:c7:75:1f:8a:05:3f:29:23:38:8e:93:
eb:ae:03:43:96:b4:5a:67:61:6d:32:0d:1c:a5:12:
10:5f:2a:5e:80:ae:e8:c7:26:3b:bf:14:b6:df:08:
0c:0e:5e:20:08:b6:8a:1d:a4:66:a3:6f:a5:dd:29:
11:e3:51:7b:6e:ba:fe:02:1c:20:3a:5a:4a:04:13:
d5:96:e1:65:9a:b0:28:08:39:25:74:ac:4d:30:ed:
c4:b3:50:ae:b6:e6:ed:6b:15:f5:e6:69:2f:8e:2b:
d0:5c:ba:84:18:37:0f:e5:34:88:c9:ef:87:49:f9:
ac:f5:3e:2b:ec:b8:64:fa:ef:80:42:25:ac:e4:6e:
8c:61:1b:8b:ab:a8:a2:65:31:52:6c:25:8c:01:66:
9c:15:25:f3:8e:9f:83:30:c2:5b:5c:06:71:1d:e9:
87:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DF:54:BC:C1:6F:B4:5E:6A:24:B8:72:9A:B3:6F:8E:E8:35:EB:2E
X509v3 Authority Key Identifier:
keyid:AF:B3:48:2B:8E:C2:E7:60:58:79:F8:53:A4:8D:BA:C0:61:45:E1:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:94:e0:66:1b:28:82:4e:6f:46:72:da:64:19:8c:9f:ed:37:
37:16:47:4a:e5:b8:c1:0d:39:bf:c5:2d:ce:1a:45:55:b7:b1:
57:cd:b6:99:98:a6:db:c5:37:e8:39:d3:85:5e:3f:71:63:e8:
26:18:c4:c7:07:76:0d:4c:2f:ee:3c:83:27:e9:ff:cc:03:02:
f4:4a:ea:3a:7a:9f:92:bd:54:b8:1b:71:6a:1a:f7:56:86:5a:
37:ff:7f:a7:62:e0:18:aa:73:29:e5:9b:40:9e:57:8a:18:6b:
b7:b7:67:d6:0d:70:65:61:c1:77:76:81:d3:df:fa:2f:97:f0:
af:64:a6:c0:21:23:31:ec:2f:e0:26:86:f7:83:dd:1f:48:d2:
91:93:ee:91:8e:73:25:63:8f:09:31:b9:75:25:fb:81:cb:01:
33:2f:98:7c:59:24:2d:c0:d6:9d:10:26:a0:38:b9:82:fe:74:
bf:50:50:9d:c3:1b:a3:78:62:8c:0a:c8:b5:15:8f:4f:67:c1:
28:c1:40:3d:a8:36:4d:00:5e:53:42:5a:66:d1:d0:89:4f:dc:
56:af:df:38:58:55:74:78:e8:45:ac:9a:d4:4c:a5:02:db:c7:
87:c7:6a:c4:cb:49:37:39:02:70:6b:1b:be:c3:5b:1b:73:7c:
fa:f1:92:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:31:20 2026 by rpki-client