Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
File: t_bDO_udlL0PdKc45_FtDp2gw7k.mft (raw, json)
Hash identifier: e6eQDWvRTwGxgB+cDD5ox3TLaNqeHwCBBR3EP7XA0DA=
Subject key identifier: 00:F9:63:D9:4C:29:61:46:21:26:A5:AF:63:56:C6:3C:FD:CE:00:95
Authority key identifier: B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9
Certificate issuer: /CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
Certificate serial: 01A17DE1F186FB4D14115332FAC77642324B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
Manifest number: 1A97
Signing time: Tue 27 Oct 2026 15:02:01 +0000
Manifest this update: Tue 27 Oct 2026 15:02:01 +0000
Manifest next update: Wed 28 Oct 2026 15:02:01 +0000
Files and hashes: 1: ETWKLbiwaKd1T35Ze_036LWsHsQ.roa (hash: 7vkox+mkRx1q7Rh8m9YqnWM2rr0RFAvagvKpfCifdZM=)
2: t_bDO_udlL0PdKc45_FtDp2gw7k.crl (hash: p9sbyX7gPWPgiNc6yfTY9sTSEeLdsJUgbUdCiQ2Xq7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:f1:86:fb:4d:14:11:53:32:fa:c7:76:42:32:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
Validity
Not Before: Oct 27 15:02:01 2026 GMT
Not After : Oct 28 15:02:01 2026 GMT
Subject: CN=00f963d94c2961462126a5af6356c63cfdce0095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:69:48:c9:5e:d1:a2:ac:2c:2e:5f:54:0d:5a:
a1:76:cc:10:d9:09:77:c5:7a:55:d4:e7:91:d6:53:
5d:f4:63:32:eb:b2:3d:d3:f6:5f:a1:5f:89:31:57:
75:69:7d:f6:b4:fe:73:a6:5b:85:3d:3a:fc:47:bd:
04:54:56:20:28:a2:6b:31:14:fe:35:5d:02:2e:02:
cf:a7:07:a2:bb:40:63:70:63:d8:ae:30:09:65:be:
bf:09:01:c6:49:a3:22:19:e7:ea:e4:c6:46:66:3a:
a4:68:49:04:4e:68:eb:3b:e5:18:3d:66:c6:a8:90:
26:16:8e:e5:89:7c:31:40:83:29:30:a2:04:65:25:
68:79:b0:0e:7d:59:aa:55:a0:52:4d:9f:49:e7:4e:
84:f2:57:ce:c0:08:63:24:c5:48:ff:14:ef:3e:79:
5a:e5:69:60:72:2e:e9:59:44:01:2a:b8:2e:0e:26:
9c:fe:9f:c9:78:ee:aa:ae:b4:59:13:33:83:4a:2b:
18:3e:3e:54:bd:69:8d:db:b5:e7:2b:5e:23:5c:8b:
c8:8a:6d:8d:ab:87:03:f0:e0:ac:f0:0d:fa:c7:2c:
8c:0f:1e:43:9d:74:05:7d:44:c0:d2:61:46:32:26:
69:ec:29:d7:6e:85:48:48:47:fe:d3:55:5a:86:72:
27:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F9:63:D9:4C:29:61:46:21:26:A5:AF:63:56:C6:3C:FD:CE:00:95
X509v3 Authority Key Identifier:
keyid:B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cc:d4:f6:dd:e9:4c:36:51:08:0a:a4:5a:4d:e7:51:5f:db:
15:8b:60:81:fb:bb:2d:34:9c:eb:35:c2:7d:f5:d8:c2:1d:66:
b7:96:c7:e8:0f:b1:09:6f:a1:9d:b5:1d:fb:80:60:c6:a2:70:
b7:e1:98:aa:6c:37:5b:da:7a:d3:eb:73:6e:03:78:f2:f9:84:
59:a5:ce:85:07:04:73:41:06:82:cd:b2:cd:8a:af:82:d3:12:
53:8c:ed:a5:72:64:53:c2:dc:80:c5:46:58:ce:b3:c3:0e:6f:
51:75:f4:2e:9a:ec:e7:8f:19:96:e1:79:8e:99:f9:cf:dd:3f:
0c:4e:2c:ca:9d:9e:18:9a:d4:d4:4c:4a:7c:c5:e0:89:49:8b:
56:b5:ba:fa:6e:e1:d2:85:46:30:0f:ce:14:2a:62:82:86:61:
29:3d:69:43:bf:22:b2:80:43:0b:22:2d:a0:16:72:cf:90:32:
7c:46:ba:93:a2:52:76:fc:ef:3c:b0:22:9f:ae:0e:76:65:3d:
d8:55:4d:fe:54:ae:11:4b:b1:41:33:c4:14:0a:75:63:2f:97:
d9:97:4d:22:d7:a9:35:3d:73:3b:40:db:29:b7:8e:02:42:5d:
ea:f0:0e:c3:f1:4c:36:93:8f:d2:c1:63:1b:7f:b3:66:1e:cf:
e4:62:03:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:29:06 2026 by rpki-client