Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
File: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft (raw, json)
Hash identifier: yM2xm1GD8znRKS4lyzCVem3A1I9mVXvx2dJByonB7UU=
Subject key identifier: 7F:26:AE:10:9B:AE:36:D8:23:5D:EA:9C:7C:4B:4A:46:0C:B8:45:9C
Authority key identifier: B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F
Certificate issuer: /CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
Certificate serial: 01A089B104EBF127602564A09369215379AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 05:01:14 +0000
Manifest this update: Thu 10 Sep 2026 05:01:14 +0000
Manifest next update: Fri 11 Sep 2026 05:01:14 +0000
Files and hashes: 1: 4uSa1k9qPhTt7gCV8bgatCnF4QE.roa (hash: AebIBoqTns7X5qm7Et95omb7FUrUebB3Fnzu8mpT4eM=)
2: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl (hash: qA/BqKK6W6jA5xSySW/7AZEy1qlrIFqhdlL1hGD14q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b1:04:eb:f1:27:60:25:64:a0:93:69:21:53:79:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
Validity
Not Before: Sep 10 05:01:14 2026 GMT
Not After : Sep 11 05:01:14 2026 GMT
Subject: CN=7f26ae109bae36d8235dea9c7c4b4a460cb8459c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:45:6f:4f:c5:12:75:61:32:e1:92:ec:16:8a:
e0:04:8c:30:de:3a:37:b0:e8:62:15:77:78:89:37:
e2:e7:49:0e:ac:5d:75:00:00:37:bd:82:39:3d:09:
34:60:d2:49:fe:b5:59:fa:1f:c5:0d:5b:b2:e4:03:
21:e0:5c:8b:5e:93:3e:92:62:40:c8:8d:4b:dc:53:
f8:23:f6:78:92:3e:41:40:f8:da:47:b2:75:fd:ac:
7a:e3:63:c1:a5:6d:6e:79:08:c7:e2:3e:6c:41:20:
bf:61:97:cd:ae:74:e4:d0:b4:d6:79:3a:cd:32:cf:
1c:2f:97:a7:38:80:4b:69:0f:43:17:dd:03:09:51:
d9:0a:0a:de:6d:c5:92:e9:77:dc:b1:8e:70:9a:28:
9d:76:bd:8b:38:c1:6b:58:3d:88:0f:b6:36:3a:37:
72:48:a3:52:a4:f5:59:9c:76:cb:29:8e:96:ef:fe:
a4:09:b9:46:52:35:0b:d0:51:b8:4e:9b:88:1c:4d:
96:cd:0d:9c:f1:2e:6c:87:fd:2c:5d:30:3c:35:77:
1c:a2:12:89:ac:e6:ea:7c:dc:97:df:79:de:e7:00:
10:e1:a7:7f:de:71:2c:e2:73:df:ea:c0:b5:22:8c:
21:e0:e5:48:ca:aa:fa:a2:5f:4a:2d:30:2d:a0:b0:
e1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:26:AE:10:9B:AE:36:D8:23:5D:EA:9C:7C:4B:4A:46:0C:B8:45:9C
X509v3 Authority Key Identifier:
keyid:B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:28:90:7f:8a:7a:70:44:24:e7:ad:ad:27:ea:49:81:ba:50:
48:09:cd:77:13:f9:e8:16:62:a5:69:7f:73:dd:40:8e:27:db:
ad:38:ee:af:39:10:49:f8:e2:db:df:ed:14:0d:0b:55:bc:38:
37:0d:5a:e0:f2:83:7e:28:bf:1a:8a:19:4d:c9:06:b2:6f:ac:
e6:40:e9:0a:68:10:ab:7a:9e:19:b5:95:13:a8:1d:66:0b:41:
94:60:c1:cc:bd:f7:f9:cc:12:f9:85:ce:c2:53:59:a0:26:b1:
9f:70:e6:92:52:e6:39:19:ea:be:87:55:aa:6b:34:dd:b4:05:
ca:6f:68:b1:fe:3f:4b:3f:f5:1c:2b:cb:51:31:75:a2:7e:7e:
a8:0b:af:f9:f4:a0:4b:52:66:56:25:49:5a:cd:5b:db:1f:3b:
73:2b:d5:24:9f:15:de:63:57:87:17:79:72:81:dd:f1:71:7a:
75:45:f3:13:4d:df:8b:d3:63:b5:cf:d7:f3:47:46:4e:1a:95:
9c:90:a2:07:07:a6:73:3c:9d:94:b3:45:a2:5d:d2:a8:26:38:
d8:fb:71:61:00:01:7d:94:69:13:1d:1f:86:68:d1:5b:a9:05:
be:b1:02:57:35:ee:83:0e:de:f4:67:b3:cf:3a:d3:ea:cf:f6:
0f:47:16:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:19:54 2026 by rpki-client