Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
File: p_0_iTNdz4KGZrKPrYrpk71EiHg.mft (raw, json)
Hash identifier: GC1aQgbGPuRmQg015WyvKquUibHrvwdxx0F4gH9/xd8=
Subject key identifier: 9D:72:E9:D5:84:96:CF:D5:6C:6C:49:7F:62:68:36:7E:32:31:F8:3A
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 01A1A85EA799A0FCB1EEE4150F64940A72DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
Manifest number: 1268
Signing time: Wed 04 Nov 2026 21:02:17 +0000
Manifest this update: Wed 04 Nov 2026 21:02:17 +0000
Manifest next update: Thu 05 Nov 2026 21:02:17 +0000
Files and hashes: 1: N34-g76KUhTdWwWSLHfwbTaSsBk.roa (hash: +8Y68T7SxCWrExC5aY8HbPiArRVdSNLWKLaScCdYK+4=)
2: Qth5F4Jxy_7Urd_QUYNqQ6dh3BE.roa (hash: 7J/t016OYUhUIcd/w4kqId0UMUV/HMGOup9T1dY8o6k=)
3: VMk_-ZVMzNsk1GgbJTfI9LE0DME.roa (hash: UfrV1/CMx2zPrF2PH/5Pf7VA8YMgyux3npUJflT4mLo=)
4: WYINcTR5G8eWIm2nJo9-FZB9A-c.roa (hash: xbC6ZKVedTs8dgZW52hJX5QjfYmjqhQcuGp6AKEKmZI=)
5: XAZ6WKQwSbWuMdg-slN8CRUbp5I.roa (hash: B/BbMvrnmz3NQFSpm/6UYMAwSqXPT+vl+n1zXtv+BHo=)
6: a9JkWci0F3TTd0p2sBEzmiEjdq0.roa (hash: 5j0Wq9PZGQQ7JbTj7Kgmx1x+26TKEMnhbQ7aJjaYgsg=)
7: p_0_iTNdz4KGZrKPrYrpk71EiHg.crl (hash: /yWVUG0DAkpQdrGAKaYvodJVr/2q7lb6zRC8YAT0X2A=)
8: quvibglo6Ez0p7GLGOPHRy9oRo0.roa (hash: PHUCyCkb1CzH3KiJNE2akCPX54R84dlZX7do54X1Jww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 21:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:5e:a7:99:a0:fc:b1:ee:e4:15:0f:64:94:0a:72:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Nov 4 21:02:17 2026 GMT
Not After : Nov 5 21:02:17 2026 GMT
Subject: CN=9d72e9d58496cfd56c6c497f6268367e3231f83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:11:0a:70:6e:c5:da:0f:1f:ba:e3:4a:6b:
c4:1c:f9:74:53:cb:e0:f0:c5:e2:6f:70:d4:dd:4d:
44:4a:e4:77:44:97:23:1d:8c:d3:fa:7f:48:88:c1:
cf:87:72:09:f4:d3:0d:e3:3d:fd:f6:d0:88:4e:0e:
b1:3d:34:bb:77:1d:dc:1b:6b:96:82:ee:5a:25:2c:
a7:fd:d4:04:44:7c:d5:22:6f:35:f8:d3:22:a6:39:
fa:a8:33:9e:2e:d6:a0:13:a3:f1:40:d4:53:9b:9d:
ef:86:e5:18:63:93:6a:bb:25:41:9d:9f:ad:df:af:
1b:16:b6:08:7b:31:56:46:f6:fe:3e:81:a5:ae:5d:
20:6b:dc:bc:ee:62:0e:b0:2a:fa:bf:8d:d3:4a:df:
65:ae:0a:8f:24:0f:23:06:14:2c:55:41:1a:4b:fa:
b2:05:89:3e:ef:74:57:32:ef:f9:50:af:f9:68:40:
07:81:77:81:9c:ca:d8:98:d9:1d:7e:c0:98:71:c8:
9c:85:9b:53:01:2f:36:ca:02:81:72:01:c1:d6:ec:
0e:54:1e:8b:15:84:c9:ce:02:a1:dd:56:47:e1:b5:
ea:1e:96:7b:34:e6:cc:a3:34:28:35:ef:81:4f:94:
7f:a4:fd:5d:aa:a1:11:42:16:66:52:28:4a:77:0c:
3d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:72:E9:D5:84:96:CF:D5:6C:6C:49:7F:62:68:36:7E:32:31:F8:3A
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:68:43:fe:ec:8d:e1:c2:03:66:c5:d0:fb:6c:1a:f9:0d:f2:
37:81:17:85:b0:bf:4d:8f:40:17:0e:c4:a2:23:88:67:44:5c:
99:0a:d4:00:a4:b3:df:44:49:f4:7c:7b:40:2f:50:c9:53:06:
ae:15:26:00:bd:93:8b:a6:56:be:1d:18:ca:4a:91:0b:99:5f:
1b:89:55:2b:16:24:36:87:e6:b0:9d:2a:bd:65:1d:2a:a2:1d:
ec:a1:86:05:93:84:49:3c:7e:46:56:51:48:7b:0c:37:8c:0d:
4d:74:42:5d:5a:bd:8f:10:16:50:d8:e6:54:fd:e6:87:2b:73:
4b:ca:f8:73:94:5d:45:21:fa:98:cb:d3:81:3d:8f:c7:35:80:
1f:ff:e1:11:be:d5:f4:75:8b:62:c7:f7:1d:c2:22:ff:48:6a:
fe:33:ba:b7:ea:9e:b5:cf:97:65:f7:1d:3c:3a:d0:60:6d:7f:
ec:e2:87:0a:11:9a:a2:0d:10:4d:a7:58:7b:b5:e4:b7:b0:c9:
82:8b:3a:7a:dd:40:eb:fa:e4:98:1c:2d:49:4d:88:b3:d0:85:
17:56:53:9d:0f:f2:a2:a0:52:e6:d7:7a:fe:ba:5e:82:0a:9b:
f7:47:11:dd:e0:d5:cd:48:43:ad:46:7b:5a:18:54:d0:ea:00:
76:47:15:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 08:21:24 2026 by rpki-client