Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
File: d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft (raw, json)
Hash identifier: rHlDAbfdaQE7R0pApOyixQcFhBXFblCYM0dFOSnf7dk=
Subject key identifier: E9:86:6B:4F:7E:EF:E1:66:41:11:0B:7C:86:BD:FE:75:25:3E:7A:B3
Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
Certificate issuer: /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Certificate serial: 01A18307906A211360295C26454C652D268E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
Manifest number: 16CE
Signing time: Wed 28 Oct 2026 15:01:13 +0000
Manifest this update: Wed 28 Oct 2026 15:01:13 +0000
Manifest next update: Thu 29 Oct 2026 15:01:13 +0000
Files and hashes: 1: _wLbQqpNFVUZXfwkKPHS2EvNsME.roa (hash: b13XNsSSVdJxlN2jmJcwJ/ExmpGXyR6dAM9BzylibwA=)
2: d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl (hash: huX09NjNNauyw4/uUbXDBfPXsudmEAdMvvstwYMO1fA=)
3: k3fmZjh5Nd4d9i-yTk1YzO9a-ow.roa (hash: mS6dHnW2WbLdF67XEsAw2GyVUdDMoZ8sBWqhN+eeuMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:90:6a:21:13:60:29:5c:26:45:4c:65:2d:26:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Validity
Not Before: Oct 28 15:01:13 2026 GMT
Not After : Oct 29 15:01:13 2026 GMT
Subject: CN=e9866b4f7eefe16641110b7c86bdfe75253e7ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fa:08:12:b2:0c:c2:d8:25:43:d9:1d:86:70:
9c:14:71:b5:f4:dc:b1:8e:90:13:41:58:2b:0e:6c:
22:52:6a:9a:7c:dd:a1:0e:37:3b:93:f9:ac:8d:7a:
2a:f4:cb:3b:b7:75:2e:45:ff:57:1f:b7:29:90:32:
bf:5a:bc:19:95:6b:2e:c7:3e:12:02:ee:84:9b:70:
e8:27:77:38:b3:5a:4e:7f:2f:28:48:79:82:83:d0:
ad:ea:6d:85:61:2a:99:81:54:b2:14:14:a0:e7:4d:
e8:ae:c3:da:65:e1:ff:84:f1:d4:ac:0d:1c:a3:10:
f6:cb:ac:a3:32:1e:6c:ea:bd:36:71:86:93:ff:41:
f0:c1:a2:31:d3:1f:8b:ca:40:a1:75:82:e8:74:6a:
d7:df:fa:eb:95:3b:16:4c:ff:1b:31:e0:4b:3e:38:
1e:10:66:13:31:3f:2c:8d:ef:d0:8e:d3:a3:7d:2c:
d7:ee:9e:a3:27:ca:36:41:1d:8c:62:33:88:c8:ee:
53:2b:c0:03:c0:19:d0:e4:2f:73:e2:3f:f6:fd:40:
74:e6:45:4d:73:9c:68:dd:ee:84:ac:c0:bf:83:7b:
13:29:1a:ec:d1:a7:a9:e4:df:22:34:ea:6a:b3:f0:
16:b5:3f:05:8f:8d:d7:de:88:f6:fa:e9:ab:98:fb:
1a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:86:6B:4F:7E:EF:E1:66:41:11:0B:7C:86:BD:FE:75:25:3E:7A:B3
X509v3 Authority Key Identifier:
keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:05:53:04:0b:d5:a3:1a:b3:b3:34:68:a9:a4:71:a3:10:ec:
ba:5c:c1:c5:9d:48:47:f1:12:92:5f:95:24:ed:f5:d2:06:f9:
ba:c5:62:74:74:f3:10:35:26:d2:84:a8:da:04:30:5f:a4:46:
58:68:bf:b4:d4:65:31:3f:c1:67:38:96:53:84:37:1d:45:8a:
d4:4f:08:d6:b7:ce:3d:53:9a:33:21:b1:69:28:65:fa:e0:93:
fe:bf:0a:aa:aa:78:cf:68:de:dc:8a:e7:cf:13:09:ea:0f:7e:
fc:68:7c:07:c3:ed:4e:e3:99:9c:6a:f3:57:37:cc:20:5f:39:
83:c9:72:ec:66:42:e9:05:38:bd:a5:81:5b:b8:01:d6:33:bd:
ad:d0:12:6a:93:3a:29:62:0b:86:11:0a:02:40:71:55:41:b5:
aa:61:26:89:84:25:e8:b2:13:a5:1b:5c:d2:02:54:d4:e2:03:
80:b7:46:63:1c:eb:a0:bd:1f:be:e9:f0:dd:9d:c9:97:8d:7c:
3e:8e:3f:5d:6b:49:70:89:4c:c3:d8:5a:f4:eb:4d:9c:38:67:
a9:a8:6c:e3:ef:91:3a:a7:7f:2d:68:1a:fb:b3:6d:97:53:07:
83:77:7f:1e:72:7d:26:db:e2:8f:1e:54:6c:82:b7:3a:32:ce:
de:25:96:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 21:38:00 2026 by rpki-client