Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
File: d2-uQ_c9o1_houQpZirguRdR4_s.mft (raw, json)
Hash identifier: rqbKejbsLuZaQFYbhc+0fzYr0kgFb9Cfeaq2OddprOw=
Subject key identifier: 21:93:1B:D0:AA:F9:6F:4F:D2:9E:1D:10:CB:C9:B2:D4:DF:9D:B3:4F
Authority key identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
Certificate issuer: /CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Certificate serial: 01A174DD6ED041167C5C6BAEF356ABC4BCE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
Manifest number: 17E7
Signing time: Sun 25 Oct 2026 21:00:31 +0000
Manifest this update: Sun 25 Oct 2026 21:00:31 +0000
Manifest next update: Mon 26 Oct 2026 21:00:31 +0000
Files and hashes: 1: WIBc-XhxOnD5f9bCQ8Jz0ZuTnGc.roa (hash: BEfaJedvpJl8LX0jJodXnPNHqf67lfg9OTd8BTanSlQ=)
2: biWMyLPxPMl5FtQJTRrTfAxg-wg.roa (hash: pNDoD30C6cU3KpMd8R/7fMFpHc25Pe1LLUHjt0eH4ZA=)
3: d2-uQ_c9o1_houQpZirguRdR4_s.crl (hash: X7rlkc7cPQYgPfVpBtKGiuujKvW8TqZqJM/ZJVkJ5Ho=)
4: pInkCUNgtUwuBuyF0FBGq4Od_LA.roa (hash: 84LwnqiXuuACgBX/nkeDGPUuwEvED3Wv0F8ikRwy6Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:dd:6e:d0:41:16:7c:5c:6b:ae:f3:56:ab:c4:bc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Validity
Not Before: Oct 25 21:00:31 2026 GMT
Not After : Oct 26 21:00:31 2026 GMT
Subject: CN=21931bd0aaf96f4fd29e1d10cbc9b2d4df9db34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bb:21:cf:69:f7:bd:3a:75:d6:c4:de:be:6f:
7f:b5:94:b1:7a:7d:5d:39:b9:3e:a6:6b:d5:ca:5b:
7e:4a:ac:a0:b0:3a:d5:f6:9d:54:9b:45:89:3a:6e:
90:22:bf:81:0e:81:15:b1:a9:87:3d:72:d2:e3:e3:
53:aa:d6:1a:7d:b9:b3:29:d4:ba:82:46:42:59:ea:
ab:7d:83:cf:61:15:db:d4:7c:49:1d:b1:f9:38:c8:
03:f9:f0:c9:80:5c:55:27:91:e9:15:e6:23:90:56:
ff:1e:75:f6:33:f0:05:8c:06:3d:79:79:69:a1:e9:
09:3f:7a:85:51:a7:ce:7c:43:9c:d6:13:dc:c4:93:
4a:00:90:a9:b1:5a:91:ee:04:b3:fb:37:44:a0:33:
36:03:a6:3c:fa:75:83:e4:bd:11:40:c7:c4:06:da:
c6:a2:cc:70:aa:6e:4b:bb:c1:9d:2a:f4:29:3e:41:
b2:3a:65:5c:8e:39:b8:f0:3a:d7:32:9d:e6:3c:a0:
80:51:d8:48:f1:6d:e9:6e:c9:e2:f9:61:5a:12:9f:
b5:0c:52:8c:c7:6a:15:c5:3d:f8:4e:cb:12:b9:16:
20:c4:2e:d2:ce:92:8a:44:9b:19:b1:2d:5b:e8:53:
39:d8:00:7c:f6:07:b0:59:6c:ed:ff:ee:39:78:75:
29:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:93:1B:D0:AA:F9:6F:4F:D2:9E:1D:10:CB:C9:B2:D4:DF:9D:B3:4F
X509v3 Authority Key Identifier:
keyid:77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4e:4b:35:68:2a:32:ed:30:7a:96:da:b8:a4:a6:78:13:88:
95:85:a7:3f:09:31:57:68:1b:48:6d:e6:1f:0f:f7:d2:f7:5e:
ba:c7:cf:6d:3a:a2:5f:59:63:f7:03:7d:88:09:2c:52:13:bf:
61:07:7f:f5:af:71:b0:1b:c3:60:f3:38:fb:7d:fd:a0:42:bb:
bb:af:92:11:66:88:1e:3c:4e:44:0b:2d:5b:69:7c:20:c3:dc:
eb:f0:5e:b1:45:d7:75:b1:9d:7b:d3:a8:54:de:fa:d0:61:c1:
80:99:7d:87:70:50:c7:42:26:ba:f0:f4:44:be:ec:4c:2d:97:
84:7d:94:47:8f:57:34:80:6e:03:c9:9e:61:bc:54:20:e4:6b:
4a:52:9b:44:56:06:8c:5f:d5:ae:75:44:29:27:54:22:5f:ef:
c4:ef:6a:92:2d:b2:32:1a:a5:81:22:ae:d7:cd:98:02:d7:58:
53:60:63:35:26:fa:77:cf:f4:cd:1f:da:ba:0a:3e:9a:02:62:
1e:96:08:b1:e2:fd:6e:ee:8a:8d:a7:b5:80:8e:df:50:60:f9:
b9:78:c5:04:fa:04:e9:e4:03:2f:64:32:45:c2:20:f6:e7:36:
bc:c7:92:73:68:45:28:5f:26:3d:00:c9:3d:62:15:02:ef:ea:
f2:b7:29:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:34:15 2026 by rpki-client