Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/URVz79L7_gei8nIJEp5btIU3isc.mft
File: URVz79L7_gei8nIJEp5btIU3isc.mft (raw, json)
Hash identifier: 0kIPOqpWpjRGNJaZ16C+uFWdB0cinrgIRiIcssAouOY=
Subject key identifier: 7F:28:12:71:32:D9:C0:72:A3:57:12:BE:81:E0:A9:CB:E8:8D:B5:6F
Authority key identifier: 51:15:73:EF:D2:FB:FE:07:A2:F2:72:09:12:9E:5B:B4:85:37:8A:C7
Certificate issuer: /CN=511573efd2fbfe07a2f27209129e5bb485378ac7
Certificate serial: 01A18186F0ACF32AA8593F7DEA7CF571FA79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/URVz79L7_gei8nIJEp5btIU3isc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/URVz79L7_gei8nIJEp5btIU3isc.mft
Manifest number: 0142
Signing time: Wed 28 Oct 2026 08:01:06 +0000
Manifest this update: Wed 28 Oct 2026 08:01:06 +0000
Manifest next update: Thu 29 Oct 2026 08:01:06 +0000
Files and hashes: 1: 0wa86QahRAsjNjEQlTQVZQFc0L8.roa (hash: 9szD6M+5Y956fiiRzqJTUW9BsCgg0tkYrSKp9P1Gyl8=)
2: URVz79L7_gei8nIJEp5btIU3isc.crl (hash: 6JGI9zg5jAq3VlQAzWk8ES29uZ30WhLF+flD8b59tTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/URVz79L7_gei8nIJEp5btIU3isc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/URVz79L7_gei8nIJEp5btIU3isc.mft
rsync://rpki.ripe.net/repository/DEFAULT/URVz79L7_gei8nIJEp5btIU3isc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:86:f0:ac:f3:2a:a8:59:3f:7d:ea:7c:f5:71:fa:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=511573efd2fbfe07a2f27209129e5bb485378ac7
Validity
Not Before: Oct 28 08:01:06 2026 GMT
Not After : Oct 29 08:01:06 2026 GMT
Subject: CN=7f28127132d9c072a35712be81e0a9cbe88db56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d8:d8:2a:aa:a4:3a:21:70:f1:1d:97:36:ef:
cd:9d:88:6f:8a:d8:9a:96:2c:80:aa:05:f6:df:b7:
3a:9b:be:28:99:3e:70:04:8a:ea:3f:f9:0f:5d:06:
b4:6f:5e:0d:e5:c5:45:a8:63:d5:b7:8d:ad:54:72:
d3:85:28:9d:5d:af:9b:9a:04:12:9f:da:66:ee:7c:
00:32:ec:21:73:26:50:a9:31:fe:75:6b:8d:cb:80:
b6:28:a7:8b:83:01:d4:91:fe:56:fa:2e:3d:c6:93:
b7:a9:1b:55:10:bb:79:6e:d2:1a:5e:c8:82:ac:cb:
b3:01:78:6d:75:2b:de:fb:df:71:18:71:0f:e2:e9:
23:0f:3e:3e:e8:36:50:90:4b:c2:42:13:9c:27:11:
1e:b9:be:52:0f:f9:9e:e0:1a:98:86:0e:d5:8c:63:
c7:93:a3:57:0b:89:66:b3:e9:c3:0b:0f:17:1e:f1:
1a:0c:08:e9:02:19:b7:f4:fd:06:27:32:fe:77:3b:
47:5b:d0:df:8d:55:37:d5:07:b4:3c:01:72:c8:56:
87:6e:73:bd:71:88:2d:51:df:56:52:17:77:43:f0:
b1:95:fa:06:f0:d9:4d:af:4a:53:b0:87:72:b9:7e:
69:b1:72:ff:4a:aa:ce:4f:f2:79:16:ed:2d:7c:39:
87:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:28:12:71:32:D9:C0:72:A3:57:12:BE:81:E0:A9:CB:E8:8D:B5:6F
X509v3 Authority Key Identifier:
keyid:51:15:73:EF:D2:FB:FE:07:A2:F2:72:09:12:9E:5B:B4:85:37:8A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/URVz79L7_gei8nIJEp5btIU3isc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/URVz79L7_gei8nIJEp5btIU3isc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/URVz79L7_gei8nIJEp5btIU3isc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2d:38:ad:8f:58:ce:9e:47:75:af:36:db:f3:1f:3e:c7:0d:
44:a2:40:71:22:ef:1f:99:3c:49:7a:c8:85:20:86:17:ae:c5:
f8:92:cb:84:24:53:4c:87:1a:bf:33:ca:fd:48:cf:5a:f4:c4:
de:8d:73:c9:8a:35:97:f4:28:5a:37:7f:35:e9:c6:25:57:c2:
e0:5b:a7:2c:48:cd:07:5c:78:2b:81:fb:1d:5d:1d:ce:bb:fb:
ec:ea:80:9d:00:4b:36:cc:6c:9b:5f:8c:0a:a1:05:90:a1:13:
15:7b:d9:1e:fd:05:97:70:32:83:ee:e4:ab:22:95:93:a8:6e:
d7:3b:47:7e:39:6d:b5:26:f2:8f:bd:50:1e:6c:d8:f4:84:47:
ee:cd:6b:9f:f4:07:af:7f:53:e0:91:90:49:15:4f:e9:00:9a:
92:62:63:7b:2f:07:58:0b:df:e9:fd:66:de:7b:9f:82:65:48:
66:cd:69:af:32:85:58:f0:4d:79:ef:45:6f:37:2c:9e:e7:a1:
37:5c:c9:32:2e:14:62:f4:1f:2b:39:ed:54:13:0b:3e:93:22:
88:d6:1c:39:bf:ca:21:26:72:ab:b1:fc:0d:fd:4a:d1:5c:09:
4c:f8:62:ef:15:cf:87:be:02:2c:1b:8c:85:c6:f3:80:51:5f:
46:b2:66:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:33:39 2026 by rpki-client