Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
File: t7n8UEpNIXiuT3PId8X5B7tHa_g.mft (raw, json)
Hash identifier: m6P3yUtgBNHWheYzJ5rvVU33dW7vq4lvpApoSmEuK0U=
Subject key identifier: 57:A3:3C:0E:C2:2F:5A:5C:0A:01:B7:95:AD:D0:73:1A:88:CF:02:01
Authority key identifier: B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
Certificate issuer: /CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Certificate serial: 01A11417C9B34DA5337CE30056C12416240A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
Manifest number: 07ED
Signing time: Wed 07 Oct 2026 02:01:05 +0000
Manifest this update: Wed 07 Oct 2026 02:01:05 +0000
Manifest next update: Thu 08 Oct 2026 02:01:05 +0000
Files and hashes: 1: RhYPlB5kqIX-dmV0ZFbkO4F9FQA.roa (hash: B4giMGx1nCtQi2hJ6Q8i5DGTsStHwrUH2rtSDwaQt6Q=)
2: t7n8UEpNIXiuT3PId8X5B7tHa_g.crl (hash: Gsmpc0KH6WoRGEyROkO+KLu5P385IEJI+YpYX7F5A2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:17:c9:b3:4d:a5:33:7c:e3:00:56:c1:24:16:24:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Validity
Not Before: Oct 7 02:01:05 2026 GMT
Not After : Oct 8 02:01:05 2026 GMT
Subject: CN=57a33c0ec22f5a5c0a01b795add0731a88cf0201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:32:56:9a:09:51:6b:8a:60:2d:79:95:28:57:
b7:bb:60:6c:58:57:1f:90:e7:25:04:2c:0e:f3:37:
15:9a:33:ba:cc:13:09:ba:a5:3e:0e:5b:cf:03:ec:
3c:24:c3:31:36:20:e4:a0:50:6c:6d:58:e3:6e:2e:
9a:a3:5a:7b:95:1e:a0:30:95:34:8e:d7:d6:5a:a7:
e5:b4:91:52:a9:f6:84:bb:62:a3:56:dd:a5:b8:94:
ac:54:92:32:86:19:0a:96:49:54:50:3f:50:93:46:
5c:6f:e3:13:ea:a1:c6:dc:98:cb:8d:b0:8b:25:6f:
e4:5f:2e:27:76:83:ac:d3:74:3e:58:b5:a9:16:ee:
2f:f4:d7:ac:5b:1f:0f:b1:3d:a6:a5:c8:e1:fd:bd:
09:4e:09:ed:07:6f:70:90:22:da:29:89:bc:de:c5:
66:3a:bc:7e:65:d1:fa:43:25:14:43:78:e0:31:aa:
2d:ac:6c:8f:42:69:77:55:dc:f9:b9:39:7b:3a:04:
90:95:97:09:59:de:67:82:ea:cc:39:d1:8d:05:2c:
c5:df:c1:2f:9a:fa:82:85:1d:56:2a:a7:8f:6d:97:
fb:b9:73:72:ce:e0:23:f8:8d:7b:d7:60:2a:80:31:
f7:c3:21:1d:b1:3a:53:01:97:8e:d2:b6:18:f6:2e:
54:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A3:3C:0E:C2:2F:5A:5C:0A:01:B7:95:AD:D0:73:1A:88:CF:02:01
X509v3 Authority Key Identifier:
keyid:B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:0e:4a:9a:58:d2:e7:4a:80:24:86:e3:b0:4c:59:ab:bc:d8:
48:e9:cf:52:cc:65:10:02:15:b7:b9:3b:26:e9:b6:12:6e:25:
4e:a6:41:3e:6d:94:28:11:70:a3:f8:3c:0b:33:fe:47:a0:49:
0c:87:3a:95:1d:8a:2d:27:29:a4:6f:6f:3d:20:d3:41:c3:bc:
5f:c8:a5:76:12:64:5b:3b:3b:ab:7f:72:91:be:83:8b:c0:e0:
49:3b:82:d4:b5:95:76:60:82:57:d7:7d:a0:5c:8e:b7:44:73:
e6:b0:92:7a:ef:14:12:d3:53:3c:5b:f1:cc:00:e5:04:9f:d6:
5d:5b:04:89:d9:89:c4:04:e3:eb:87:10:38:5d:e4:c9:88:1f:
ce:06:23:10:95:06:d0:fb:7a:01:fb:27:24:a6:9d:8e:95:60:
d9:c7:7f:67:ca:25:b0:6f:84:64:e9:f8:f2:11:1d:f1:59:ee:
e9:b1:9e:db:8f:06:b8:65:49:25:a9:b0:e3:ea:a7:59:9b:fd:
2d:65:ef:35:14:90:41:cd:51:ce:4b:21:02:54:44:bc:d5:40:
1d:f3:8c:8f:8c:a0:75:89:8c:c5:9c:16:3f:a2:83:9e:9a:3f:
5b:6d:85:c6:c2:ff:5a:df:ba:32:72:e3:06:4c:90:91:43:af:
e9:02:22:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:56:17 2026 by rpki-client