Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
File: D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft (raw, json)
Hash identifier: GX1vNEcTsaf5QMj0h7lZJl5PQx74XdGKGUSSst3jXrs=
Subject key identifier: F0:56:AB:D9:85:8C:43:C5:65:63:7C:48:18:6E:5C:DE:50:7F:8E:A7
Authority key identifier: 0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62
Certificate issuer: /CN=0fb7cdb05282b089b476759f69ed4a436b456362
Certificate serial: 019FDF882182259E7424432726FD34B44152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
Manifest number: 029A
Signing time: Sat 08 Aug 2026 04:01:08 +0000
Manifest this update: Sat 08 Aug 2026 04:01:08 +0000
Manifest next update: Sun 09 Aug 2026 04:01:08 +0000
Files and hashes: 1: D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl (hash: pAQdjYzjmfarZcpxULWTOskhpG2cASrc+qRC815ppgs=)
2: Jv84iN2B8ANANDflC9HEXw5LA8Y.roa (hash: qNF0F5ELDvVzv6IS3eSh9XZM4TiIIZIYRSv7YJ85pZA=)
3: llmMHNqMSoDUXRxE5hAlr6D6GAE.roa (hash: R5kL9/aM+FrgRUOf+AsKqKfQFvEpHbyhgcOmGd1LC1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 22:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:df:88:21:82:25:9e:74:24:43:27:26:fd:34:b4:41:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fb7cdb05282b089b476759f69ed4a436b456362
Validity
Not Before: Aug 8 04:01:08 2026 GMT
Not After : Aug 9 04:01:08 2026 GMT
Subject: CN=f056abd9858c43c565637c48186e5cde507f8ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:97:1b:16:10:f9:e6:a0:b4:d2:af:83:a9:
75:1c:a0:4b:62:38:40:cd:ad:43:49:61:28:e1:54:
0c:90:a1:e5:16:bb:e0:98:63:04:49:bf:79:9a:76:
f6:4b:cf:33:a8:5d:84:c5:d7:ff:b7:2e:cb:22:b8:
9b:ba:a0:ff:6c:b9:8b:77:2c:f0:a2:41:a0:78:e9:
2d:b5:a3:d9:36:9c:8b:94:a8:74:1e:6c:b7:76:01:
ba:22:20:7e:ff:f3:66:2b:28:fc:cf:98:6a:22:29:
56:31:c4:76:9c:a5:32:1c:bb:09:b3:72:7e:dd:53:
e4:f2:3e:86:a5:16:d3:af:38:76:5f:07:13:1a:15:
31:d9:e3:a3:b5:83:90:a0:6d:34:9f:e0:bf:d2:6b:
7f:9e:4d:1a:a6:3a:a5:9c:3b:d6:a1:51:36:65:87:
65:40:fb:3e:01:86:4a:66:55:e1:f3:ac:c6:d8:c5:
f3:56:55:f2:3c:07:ef:0f:b0:c2:5c:b3:dd:de:12:
17:f7:ad:d4:37:a2:a5:8f:ea:08:b5:f8:73:13:d1:
a6:d1:87:7e:00:8e:65:b8:cb:09:56:10:64:5c:c7:
61:17:5e:de:a6:3c:2d:68:bf:56:32:46:36:85:98:
61:d5:ad:03:aa:d5:49:2f:28:3b:79:b8:33:76:2a:
15:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:56:AB:D9:85:8C:43:C5:65:63:7C:48:18:6E:5C:DE:50:7F:8E:A7
X509v3 Authority Key Identifier:
keyid:0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fd:f6:07:3f:97:b7:b1:de:a2:96:c3:3c:15:7f:4c:cf:36:
f1:1d:0a:d2:06:68:50:b9:6b:1f:d0:fc:c5:7b:54:7f:db:7a:
18:65:d5:49:d8:3f:eb:b1:94:36:a9:13:c9:8b:0c:ce:c3:77:
36:fc:ce:08:4f:20:e4:73:0e:2a:28:03:04:60:4d:8d:c2:28:
fc:9f:6f:0d:1a:51:77:14:5d:35:7c:1b:b3:d0:6e:a6:47:10:
01:0f:c7:dd:2f:15:26:da:b2:bd:7c:49:ac:9b:b9:1b:cf:2b:
7b:0f:0d:93:44:b4:a3:ab:5d:62:c8:8a:42:58:68:cb:9a:07:
72:74:74:e9:19:bc:6e:dd:59:3f:1d:86:98:cb:ef:d5:2e:11:
56:33:bf:cb:3e:ec:57:62:e2:25:51:c1:b3:0b:87:c7:83:a2:
7b:ce:29:28:9d:97:cb:31:c7:c3:e0:42:52:2a:d2:4e:03:bc:
e6:a6:b7:99:ec:77:cd:7e:0d:ea:9f:9c:f3:52:fd:47:8f:7e:
f5:92:8c:69:75:76:03:f3:4a:ae:19:04:f7:69:81:0d:cf:6b:
5e:ab:28:a5:82:e4:64:75:22:1b:ed:e2:35:4b:9e:24:96:4a:
d7:f2:77:21:4b:bd:fb:5e:90:a2:1d:c9:c8:11:7f:a8:47:21:
25:8b:3a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 06:19:27 2026 by rpki-client