Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
File: tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft (raw, json)
Hash identifier: R6BhkPImMBc5q/1ZcWTejEZC4UP8odPUPkejvsaALD0=
Subject key identifier: 8B:22:4D:2C:15:99:18:7F:D5:A6:39:87:FF:29:8B:8E:BD:0C:9A:5D
Authority key identifier: B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
Certificate issuer: /CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Certificate serial: 01A1705CE1374E01BC3B892E98DA6B9F0E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
Manifest number: 07AB
Signing time: Sun 25 Oct 2026 00:01:37 +0000
Manifest this update: Sun 25 Oct 2026 00:01:37 +0000
Manifest next update: Mon 26 Oct 2026 00:01:37 +0000
Files and hashes: 1: EgBYTsP4WnLdOgI7v9fWewoBmRQ.roa (hash: SdXuNAo4cL+y4o9C6xVzKmsv8YTzVdsZLx73iiyVrKA=)
2: Ga7-1Qov9vY-UFa-abxTXMlth0Q.asa (hash: 7EOJyJMNQt+17435Z8by5UBYeIkbSkCBu+yaDqILeZM=)
3: tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl (hash: aRoko1lyEeiTUNAUMuELUdqifR3lcY0alnyFMSkEdN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:5c:e1:37:4e:01:bc:3b:89:2e:98:da:6b:9f:0e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Validity
Not Before: Oct 25 00:01:37 2026 GMT
Not After : Oct 26 00:01:37 2026 GMT
Subject: CN=8b224d2c1599187fd5a63987ff298b8ebd0c9a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ae:47:f7:8b:55:cd:ad:cd:24:6c:0e:dc:fe:
ae:56:e5:b3:ef:fe:8e:39:46:1c:f7:8c:c8:9d:1a:
8d:a3:52:fc:da:57:ba:93:9d:71:88:73:06:1a:b6:
53:57:1c:1a:6a:1b:13:4c:36:be:fb:d1:11:19:86:
ba:69:36:1e:2c:a4:cd:b1:bd:99:5c:1c:b8:0f:ce:
20:a0:f5:a9:07:2a:99:ca:a3:0b:bc:ec:e4:bb:86:
af:e3:67:a2:80:7b:11:0a:18:ca:98:6f:2a:e7:2c:
6a:a5:aa:37:d6:65:fc:51:35:c0:9a:0a:7b:a8:aa:
d8:d9:cc:db:f3:df:f7:12:5b:43:4f:13:87:e5:9a:
bc:00:84:f6:ee:ee:f3:97:d8:2a:ae:5d:9a:fa:09:
07:d3:60:3f:68:bc:3a:23:75:23:5a:3e:09:a6:5d:
12:a5:41:53:af:ee:e9:63:31:8b:a4:0a:7f:3b:77:
37:a9:fd:bd:5a:e5:b8:c4:5b:0f:8a:7e:a0:b0:4d:
e7:c5:71:08:3d:e8:7f:96:3b:80:93:84:5e:e1:3b:
f6:51:ad:18:a6:2e:ea:d4:68:7a:71:df:07:52:02:
ce:8b:45:2f:41:8c:41:f5:46:35:05:b1:99:53:b0:
d8:f7:55:18:f4:28:c9:e3:5c:fa:f5:8f:cf:ea:18:
ce:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:22:4D:2C:15:99:18:7F:D5:A6:39:87:FF:29:8B:8E:BD:0C:9A:5D
X509v3 Authority Key Identifier:
keyid:B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ab:c3:00:73:77:1e:2b:b7:56:2e:51:fb:be:4e:8a:b5:4d:
2e:3f:86:5e:4d:06:ed:c4:cf:ba:18:5d:2b:d4:74:66:04:70:
21:bc:84:5a:b0:13:f4:40:f0:f5:d9:df:fb:1f:2d:bc:aa:cf:
5f:80:99:e0:c1:9c:21:b5:23:91:3d:f1:c1:27:b5:4c:54:76:
e5:6b:a4:a1:4c:6f:ea:0a:bf:d6:1d:ae:fd:64:ff:c8:f6:b5:
df:57:cb:9a:ab:54:79:cc:78:82:5d:c7:d6:9b:33:63:7c:a4:
1e:7c:6c:23:a1:b2:e5:c2:b6:7a:3e:47:ba:09:24:89:07:6f:
29:63:90:d2:f7:1a:f8:7a:d7:0a:b5:48:7b:4a:55:f6:b3:e9:
6a:58:1e:87:b4:83:f1:14:0e:2e:b9:35:49:e3:70:07:f1:7d:
c0:23:c2:3e:d2:2e:ce:6c:cd:0b:3c:d2:bb:23:b2:37:6d:38:
05:12:b3:1b:df:93:96:c0:14:f0:7c:b5:af:69:2f:23:41:72:
62:3f:85:b9:57:eb:34:90:6a:5a:72:f7:9e:44:ab:f6:62:99:
78:d3:f7:be:79:e8:ff:8a:a4:2b:bf:ca:51:73:26:23:e3:1e:
44:d5:2b:66:4b:b2:e2:bf:90:42:f0:c0:c6:c3:3d:1b:6f:2e:
7a:cf:40:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 04:55:48 2026 by rpki-client