Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
File: d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft (raw, json)
Hash identifier: wQVaB00TMVZMtZ0oMCY5MKZvaTZP2AFX3ZKSSQ2LOGU=
Subject key identifier: DC:FE:BA:75:8A:5A:47:F3:B1:ED:7A:34:7E:BE:B7:58:DD:1B:53:5E
Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
Certificate issuer: /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Certificate serial: 01A08BD662D3E3F4FB59DB41C089733C4610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
Manifest number: 164E
Signing time: Thu 10 Sep 2026 15:01:17 +0000
Manifest this update: Thu 10 Sep 2026 15:01:17 +0000
Manifest next update: Fri 11 Sep 2026 15:01:17 +0000
Files and hashes: 1: _wLbQqpNFVUZXfwkKPHS2EvNsME.roa (hash: b13XNsSSVdJxlN2jmJcwJ/ExmpGXyR6dAM9BzylibwA=)
2: d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl (hash: tFySpET8eRezu2HMB3zKXBhwlMrcacYwD8sUdril7Cs=)
3: k3fmZjh5Nd4d9i-yTk1YzO9a-ow.roa (hash: mS6dHnW2WbLdF67XEsAw2GyVUdDMoZ8sBWqhN+eeuMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:62:d3:e3:f4:fb:59:db:41:c0:89:73:3c:46:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Validity
Not Before: Sep 10 15:01:17 2026 GMT
Not After : Sep 11 15:01:17 2026 GMT
Subject: CN=dcfeba758a5a47f3b1ed7a347ebeb758dd1b535e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:06:d1:8f:b6:a4:5d:bf:a2:c5:13:84:26:00:
c7:12:d8:41:0d:f8:47:1f:bb:39:b0:49:e4:2d:43:
b0:5f:2f:03:92:9e:b1:91:bd:86:ae:82:7c:4e:08:
03:26:17:ad:01:6c:3f:fa:1d:c6:bb:fa:b8:77:43:
52:a2:59:91:02:5c:72:5b:28:22:41:1b:bd:e6:12:
6b:ad:12:6f:f8:b3:fc:c5:10:2d:fd:e3:3d:37:4f:
7f:b2:78:f9:5e:f7:1d:8d:1f:ce:12:5a:49:46:87:
f9:60:41:a5:6a:51:ac:85:6a:08:88:e5:6c:7f:13:
89:88:49:fe:33:f6:30:72:43:44:c3:4c:ce:ff:d2:
3f:b3:86:f4:e5:39:bb:e8:14:8a:76:b1:f0:18:e7:
d1:88:bd:72:05:f4:f4:ec:fd:92:e3:14:1f:1e:6f:
9d:4e:ee:7d:43:69:32:6a:54:c6:2a:6d:b3:02:25:
54:13:6b:88:19:80:d9:01:76:52:f8:26:fd:b4:07:
71:a2:0f:84:65:2c:df:fc:5d:98:22:6e:5f:fe:aa:
54:db:3c:99:53:14:55:7d:94:b3:ad:d4:69:c4:7c:
c5:58:1f:68:08:7d:fa:f9:b3:d5:3d:14:b5:7d:8b:
21:00:e9:c7:75:96:fb:3f:f2:33:d2:d0:6b:4f:80:
7b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FE:BA:75:8A:5A:47:F3:B1:ED:7A:34:7E:BE:B7:58:DD:1B:53:5E
X509v3 Authority Key Identifier:
keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:21:87:ec:a8:28:4b:e2:81:c1:67:ce:03:bf:f5:0d:54:ab:
d7:dc:7f:04:2a:d0:50:31:ed:36:50:53:26:ed:df:3e:20:b5:
69:89:94:48:92:1e:a1:7a:7d:d3:fc:25:f3:80:6a:8e:40:49:
16:6d:53:ab:a5:22:3c:a8:3c:d0:87:22:6d:53:fc:db:79:df:
de:3a:41:e9:a4:7e:5a:a3:3d:13:1b:14:29:92:86:3c:55:8d:
e3:e5:89:57:41:4b:29:d8:cf:4d:68:09:86:1f:d2:6f:e7:3a:
04:d6:54:3a:06:6b:bc:c0:0a:85:4f:e8:fe:5f:96:a8:76:f3:
20:d0:57:ab:a4:7f:77:fd:7c:88:7e:f3:50:4c:22:d8:3f:19:
64:d6:69:35:6a:66:b5:b0:e6:31:a8:36:7c:24:45:d9:86:6f:
7b:af:c7:5a:97:b2:98:8b:97:bd:9c:01:e1:b1:6c:a4:0f:65:
56:5e:66:bf:63:90:2d:e1:2c:33:cd:0c:35:e4:1d:9e:4e:9e:
33:71:2c:c2:ad:de:ad:2c:03:24:78:20:ba:5d:fe:b8:10:00:
45:7d:a2:92:18:cd:06:6f:27:9a:0b:fc:c6:5b:47:6b:b1:50:
d6:95:02:6f:0f:0e:a8:ef:9e:c6:2f:58:33:de:3b:7f:74:1d:
6b:f6:cd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:33:40 2026 by rpki-client