Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: 8IcYa7d4jmlSN50HjcjTMIFLyJkQ09PTeKpIYyxRui4=
Subject key identifier: 7A:B7:AB:DD:91:DE:02:61:48:21:C0:84:30:20:12:6F:03:31:01:5A
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 01A1803D2EC758FE0358665CEECBC0A613A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 1AC7
Signing time: Wed 28 Oct 2026 02:00:55 +0000
Manifest this update: Wed 28 Oct 2026 02:00:55 +0000
Manifest next update: Thu 29 Oct 2026 02:00:55 +0000
Files and hashes: 1: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: J8c+fe5zc/YJomA6YcJt9WV9pjQHYkNaaHgwu+avtwU=)
2: EUgLAWtAQkj2b81EVNaYNI21B8Q.roa (hash: YH1yRF3btNqvfXvDOf+ohxslhwH0GDsrS4U4ZZBSNxE=)
3: PEehES5SpZnr6s-nLTRBCvh0KiA.roa (hash: KLNyhN+bpOs8kGrk8EPysrLFKdZzU9fW9CEvBaXVGAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:2e:c7:58:fe:03:58:66:5c:ee:cb:c0:a6:13:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Oct 28 02:00:55 2026 GMT
Not After : Oct 29 02:00:55 2026 GMT
Subject: CN=7ab7abdd91de02614821c0843020126f0331015a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5a:fd:2e:98:9e:b5:a5:4e:3a:6a:b4:ae:91:
35:78:d2:6c:e3:c8:94:b6:f2:6d:ce:ca:8c:f7:12:
82:96:e8:aa:2e:18:8c:c6:5f:5e:6a:1b:6b:81:4b:
dc:ce:40:f0:0e:ae:76:04:c0:3c:33:ec:27:24:ff:
09:77:d1:5a:dc:57:39:0a:8d:de:3a:db:6e:bc:13:
f0:1f:aa:5f:60:69:52:45:50:87:1b:e0:80:a0:0e:
d7:94:15:9a:4a:6d:8b:20:f3:6e:76:7e:00:f6:87:
4b:75:35:3a:73:70:25:6a:73:e4:4e:06:4c:a7:21:
21:9b:04:12:b5:0e:e4:1d:34:79:6b:d8:7f:f1:50:
4a:9c:92:d9:e0:5f:d9:05:34:e0:a9:97:a2:18:f0:
62:4f:71:6a:a3:68:cc:70:f7:bb:68:ae:42:23:4b:
53:02:96:0a:45:1a:33:7e:4d:d4:9d:25:e3:ef:51:
0d:e7:c4:26:09:3f:6b:f3:87:d7:a7:a9:ee:1a:ea:
7a:20:e0:3f:5c:b1:74:7a:7d:79:d5:6b:e8:7a:e0:
6f:60:ec:f8:6f:7c:33:e3:a8:d4:93:0a:4e:56:d2:
4d:db:b7:f6:06:87:fe:30:ae:69:44:ce:9d:58:c1:
a8:65:c3:c6:07:b3:28:2f:c1:8a:ae:dc:bf:26:15:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B7:AB:DD:91:DE:02:61:48:21:C0:84:30:20:12:6F:03:31:01:5A
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:31:81:90:85:da:a3:24:3e:55:74:f9:57:a8:67:65:e8:f9:
f6:6d:a8:58:7c:7b:4a:f2:5b:76:ed:26:0b:64:19:2d:b5:f7:
b4:79:0f:35:6a:a3:b8:71:0c:df:c9:b7:e8:67:5a:54:76:70:
59:c9:6b:04:a2:02:8c:62:bd:32:d8:cb:3b:22:69:a3:03:bb:
fb:b7:0e:76:4c:5b:80:fe:c7:79:0e:09:0f:9b:29:f0:9b:93:
5a:bf:dd:46:63:34:a4:d5:49:4d:1a:1d:a4:58:28:34:3d:97:
e3:66:8b:c1:4f:5f:83:ce:ed:ef:9b:4f:f9:b4:3b:57:aa:a4:
02:dc:ef:78:3e:a1:cb:27:c3:ce:2c:ad:b5:cf:e0:be:ab:bf:
5b:13:c6:b6:0d:33:fd:de:2b:31:e3:94:bf:1b:e0:f9:77:73:
a2:44:f0:89:cf:5b:80:1e:d2:5c:69:85:df:21:19:e0:2a:d2:
10:bc:23:99:a3:2e:12:fe:83:69:7d:73:7a:db:3c:fd:d3:1f:
17:67:3e:2b:00:91:e8:a4:d9:9f:77:9c:24:3a:c6:d1:b8:50:
d8:a8:bd:41:6b:45:14:30:cb:fd:8c:e8:67:a4:6b:79:bd:d1:
52:85:34:ed:33:e8:4a:8e:af:ca:ab:85:12:35:31:f3:7a:71:
2e:1b:eb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:35:46 2026 by rpki-client