Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
File: fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json)
Hash identifier: O/FS+vvXgLMKyYXSPChA9qdsP9us0mBP4K4YOUqFEhc=
Subject key identifier: E7:92:D9:89:C9:F2:94:5E:9C:95:FF:BC:4A:E0:0B:95:D0:17:11:DF
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial: 01A183AC3FB8F79FED4A90137C9F5A1F2170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
Manifest number: 1777
Signing time: Wed 28 Oct 2026 18:01:06 +0000
Manifest this update: Wed 28 Oct 2026 18:01:06 +0000
Manifest next update: Thu 29 Oct 2026 18:01:06 +0000
Files and hashes: 1: XlKt7LbidxJ4lur7C2eV1-hGD8A.roa (hash: KVF4+Lc0XEqvm73L0C+Kou+jjLPu9hYS5tCHiDmCcB0=)
2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: m/81FiQaG7KxzhlGjn1JhbYfuXgqWW9WDyFUMVhNe5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ac:3f:b8:f7:9f:ed:4a:90:13:7c:9f:5a:1f:21:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Validity
Not Before: Oct 28 18:01:06 2026 GMT
Not After : Oct 29 18:01:06 2026 GMT
Subject: CN=e792d989c9f2945e9c95ffbc4ae00b95d01711df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:da:f3:55:79:67:6d:04:b6:fb:d1:d4:75:d3:
5e:4a:9b:87:e4:1f:39:d6:32:fa:b2:54:be:75:6e:
b7:42:78:b1:f7:52:f5:4a:2b:3d:e5:4c:4e:0e:4d:
ad:a3:cf:90:be:ce:bb:da:a0:db:59:c4:8b:53:38:
d6:60:d0:70:d8:5f:88:fc:0c:1c:09:b3:cf:59:4d:
e2:bb:be:2d:41:7c:20:29:09:ba:eb:da:72:3b:47:
b6:4a:3a:b8:77:df:b4:10:7f:f7:ea:47:28:f9:b5:
0d:97:21:3c:e5:c2:d4:af:35:55:67:68:ef:66:b5:
c7:c8:8c:ae:81:5e:b2:2a:b0:84:2c:43:b3:2d:3b:
15:b1:0f:7c:df:99:e7:0d:e3:61:84:d2:f1:df:e5:
a9:4e:d2:ce:69:05:6a:96:1a:1e:39:3e:5f:c0:a9:
92:32:cd:e4:6c:7a:ae:03:6d:c7:d2:3a:ce:3a:77:
7e:ab:a0:fc:3f:bb:4b:dc:5d:bc:17:e7:35:d1:91:
29:bb:89:6a:ae:ce:b8:99:fd:a9:ae:cc:25:9e:fb:
8e:0e:11:68:82:cd:fd:f3:65:47:1c:11:12:88:5d:
96:60:f0:4a:7f:ce:e7:f2:86:57:b7:17:9b:f6:3c:
8c:a0:ea:91:8c:a3:cc:0e:b5:92:0f:24:4c:be:65:
6f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:92:D9:89:C9:F2:94:5E:9C:95:FF:BC:4A:E0:0B:95:D0:17:11:DF
X509v3 Authority Key Identifier:
keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:45:05:5b:e1:b5:aa:fb:79:95:c2:4d:1f:6e:8e:73:30:dc:
1f:93:b1:03:10:3b:9d:cb:8b:b5:3e:b4:f7:e2:e1:50:a9:5b:
24:7a:70:df:a9:5c:f9:3c:77:9d:87:af:9b:84:a0:43:b9:30:
a3:3e:ab:2e:af:8f:42:5c:60:8f:42:af:81:05:94:90:c9:da:
ea:dd:46:04:62:77:fc:0a:dc:25:ec:e1:e9:4f:0a:f5:8f:fc:
9c:43:37:b2:7d:dd:7a:0a:4d:47:22:52:8f:dd:6e:c0:df:33:
c7:5e:8a:bf:cb:73:3d:01:7b:eb:e7:2c:2a:fe:35:85:21:ce:
bf:a1:bb:ee:45:bd:6a:f5:b3:4c:24:99:10:ea:c5:48:2c:5c:
c5:8d:83:d9:6d:83:7f:18:b1:98:24:8d:9d:76:0d:d1:de:87:
ac:85:be:b9:83:4a:40:14:05:80:a9:7b:16:c6:c4:58:68:60:
07:5f:0c:fb:dd:89:da:70:b5:e1:7f:72:f0:eb:90:49:e1:94:
de:85:bc:68:6d:0b:da:cb:44:bc:c4:40:35:5b:2c:c7:55:b8:
78:ea:f7:43:02:6f:5f:e4:64:56:fb:15:ac:fe:d9:b3:a6:59:
57:45:d9:03:1e:dd:f8:46:e0:2f:46:87:47:39:16:10:81:ac:
45:93:bb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 02:16:27 2026 by rpki-client