Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
File: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft (raw, json)
Hash identifier: u2NH8wh2d88Y5Uj9/1JjT49eFFdmGDTcX79zD0b/kls=
Subject key identifier: DC:1F:7B:3E:BF:55:49:A3:BB:8B:22:24:9C:6E:47:6D:D5:DA:64:E2
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Certificate issuer: /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial: 01A110A8A5ED82788AB95FF7B51982C53B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
Manifest number: 1A90
Signing time: Tue 06 Oct 2026 10:00:50 +0000
Manifest this update: Tue 06 Oct 2026 10:00:50 +0000
Manifest next update: Wed 07 Oct 2026 10:00:50 +0000
Files and hashes: 1: 0xwfSsFkb05U4ozVSEb8hCqR4ZM.roa (hash: wDnxCrMW737wBP0bFwNqAOo1oxv3iXJSRvzrJ/qp1Dc=)
2: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl (hash: GvJCTWeXY8C7q4Q7bsVtoJjMsn3QP5QvYtFayBLJneI=)
3: zq7GSsBTb4iCu4BsJeZ1X5mLg0g.roa (hash: wAonBOQHcI2HVnsLhr53pN++Gv5Cyj0r6V/3M0lZCdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:a8:a5:ed:82:78:8a:b9:5f:f7:b5:19:82:c5:3b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Validity
Not Before: Oct 6 10:00:50 2026 GMT
Not After : Oct 7 10:00:50 2026 GMT
Subject: CN=dc1f7b3ebf5549a3bb8b22249c6e476dd5da64e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:22:08:6e:05:8f:7f:79:85:25:57:40:af:
ef:5f:b4:e4:0a:7c:d1:cc:c7:a2:49:bd:6c:b9:38:
5a:bf:f8:74:34:77:fc:60:e8:be:53:49:2e:f5:2f:
1f:22:cf:bb:a4:a5:8c:00:27:39:2f:68:d0:ee:e9:
18:53:32:4f:fd:ce:5a:b4:3f:6a:73:12:b5:a0:2c:
2a:cd:e8:03:35:92:52:bc:3b:8e:a0:6c:ac:f2:be:
07:c6:67:48:d2:b0:30:7b:7a:85:8c:27:87:21:5f:
a3:3a:e8:4e:96:c2:d8:76:72:ea:74:7c:3f:d9:c6:
80:12:fe:1a:c1:c8:c6:da:99:30:30:59:f2:5b:bb:
94:99:5f:1c:dd:46:ee:02:4a:86:bf:a8:a3:1f:85:
ec:cf:09:f8:9d:16:e3:aa:e0:5c:60:9e:df:18:23:
72:03:6e:8e:25:42:a7:c3:95:6d:bf:b2:9f:7a:0e:
9a:8b:b8:59:32:de:6a:9d:39:c0:0a:29:46:9a:a7:
b1:36:67:22:c7:fc:84:43:73:9d:93:22:1a:4f:b6:
67:2e:9b:07:62:b6:c2:4e:ac:b4:3f:84:98:40:a3:
42:93:d5:fb:13:3f:75:2a:89:2b:69:a9:c0:4b:51:
7c:ce:d7:e2:2c:66:d7:70:4a:ef:5a:88:a8:22:32:
24:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1F:7B:3E:BF:55:49:A3:BB:8B:22:24:9C:6E:47:6D:D5:DA:64:E2
X509v3 Authority Key Identifier:
keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:09:6d:63:66:f1:d5:09:04:3e:69:23:9e:e7:42:89:0b:4a:
d9:43:c3:9d:6b:7a:3f:1a:1e:90:e2:87:68:ca:47:24:b2:fa:
2c:8b:88:97:cd:91:73:8b:38:6f:af:43:d1:cd:98:69:0e:75:
fc:0c:c1:7e:28:89:30:09:e8:ad:51:cb:2f:e4:88:83:86:9e:
7f:50:fc:11:7c:ba:42:35:52:9f:17:6e:1c:43:97:cb:c5:38:
65:f7:d8:4c:76:dd:54:d4:e9:74:70:17:65:cd:92:b5:17:c2:
33:32:0a:bb:e4:fa:0b:55:44:7d:f5:7e:f0:4f:1d:bd:53:4b:
c9:80:3c:23:c7:ec:44:98:f8:bb:67:be:6b:b6:5e:19:e5:fb:
7c:c3:9a:67:7d:ea:ea:39:cb:b6:1f:b3:27:64:e6:6d:20:9d:
d0:32:c4:45:71:2c:0b:6e:ba:5f:29:a3:1a:ed:a8:8e:25:96:
6d:c3:e9:20:a1:b2:8a:5b:e2:b8:d2:20:a2:6f:99:6e:f6:bd:
c6:ac:7e:d7:fa:c2:3d:39:98:2f:6a:01:a8:ff:ad:69:09:3e:
b9:d9:ff:37:92:f3:af:f2:41:99:ff:7d:d8:df:b2:ec:61:b9:
51:a8:f9:07:54:dc:7e:d2:88:33:3a:9a:43:a5:67:7d:b9:ab:
50:12:9a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:10:46 2026 by rpki-client