Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
File: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft (raw, json)
Hash identifier: SFhmNRqs/NAV5G+MpFJp6s9UL3QOSUMrGmvY2zQVkbM=
Subject key identifier: 89:F7:1F:93:74:D3:97:F4:D7:FE:E3:58:DD:BC:17:C9:60:C5:70:E8
Authority key identifier: D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
Certificate issuer: /CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Certificate serial: 01A00093A68802D739D0839897676B807C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
Manifest number: 1337
Signing time: Fri 14 Aug 2026 14:01:11 +0000
Manifest this update: Fri 14 Aug 2026 14:01:11 +0000
Manifest next update: Sat 15 Aug 2026 14:01:11 +0000
Files and hashes: 1: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl (hash: 25ow9tqdahunsc1Gt/0rF3Ib+7tKhGSPkMsgApylfyY=)
2: nVcrQjhWQvZv3MpiEu7OA3dqEsU.roa (hash: q6SGNZPGxWCvS2kjA8Hhq7jz4Krm0km/a67HNcgbwrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:a6:88:02:d7:39:d0:83:98:97:67:6b:80:7c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Validity
Not Before: Aug 14 14:01:11 2026 GMT
Not After : Aug 15 14:01:11 2026 GMT
Subject: CN=89f71f9374d397f4d7fee358ddbc17c960c570e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0f:d2:6f:3a:ac:17:ca:22:be:04:43:f3:70:
29:8c:b1:ae:d6:ed:89:7d:32:b5:2a:2a:0a:60:f8:
39:f6:ff:2e:5b:57:9b:d8:c1:6f:1c:fd:7b:be:ed:
ef:77:83:46:b8:b5:f7:cc:f9:0a:78:09:b8:4b:9a:
59:a2:e0:ef:ab:a9:65:e9:34:84:40:5a:cb:52:0e:
ce:d8:7c:3c:ef:3a:be:9a:b1:7b:d6:03:a4:13:f4:
24:87:45:7e:28:c1:12:88:b9:2f:49:98:da:24:be:
97:40:a2:2b:ed:3b:09:59:87:f4:8a:0c:a5:0f:4d:
64:4a:6f:90:9c:63:42:ed:59:1f:ae:da:f7:f5:e4:
d5:e0:48:a5:a1:ae:b3:12:2f:99:3a:64:ad:83:ba:
9d:cf:62:ad:cf:6a:a5:23:09:fd:a4:1a:41:04:df:
d0:24:b1:67:a3:19:6c:21:29:ce:d1:df:4f:c6:0d:
db:4f:41:a5:2c:86:21:c4:f8:34:a0:da:3e:09:62:
e0:c1:ff:4d:1b:59:a8:81:1d:dc:a8:0e:b6:0b:7a:
6b:8f:54:cb:cc:49:7f:c5:fa:46:37:a2:ba:d9:c5:
f4:68:b9:a4:83:21:c4:fe:d3:26:78:74:af:2f:0b:
8d:19:79:85:fd:1c:cb:07:91:6a:36:c1:8c:9a:b0:
69:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F7:1F:93:74:D3:97:F4:D7:FE:E3:58:DD:BC:17:C9:60:C5:70:E8
X509v3 Authority Key Identifier:
keyid:D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:07:eb:ee:7a:34:46:32:0c:f7:51:19:c4:e7:13:df:01:96:
c3:74:98:95:20:d9:bf:b3:87:af:c6:69:3d:37:35:07:25:ba:
32:14:77:13:77:ec:f3:a1:11:d8:2f:54:8e:d0:13:ba:a6:09:
39:dc:69:d9:07:0f:55:a5:9b:da:ee:db:98:45:8f:2b:b2:00:
e4:ec:74:35:81:46:df:5c:83:9a:88:fa:1c:5c:0e:d6:96:a1:
96:ab:e7:c2:8f:dd:50:18:58:5e:7b:68:64:26:c0:cb:92:1b:
a9:51:ea:a6:13:a1:e2:67:14:87:fb:8f:58:4c:a5:c0:14:e8:
b6:e2:3a:d1:0b:43:72:39:a4:db:16:82:5e:f0:e3:37:0c:f2:
89:3f:e8:f5:c6:8d:dc:64:d3:ef:5d:e0:25:82:8b:6b:b0:93:
a0:a9:72:36:db:1f:d9:40:34:f1:24:fc:4b:b5:6a:61:52:85:
28:e8:91:17:d7:e3:d5:91:16:1f:49:01:39:af:f7:dd:b4:98:
d2:45:ef:c0:83:c9:4e:b7:b6:23:04:84:4c:2f:6a:38:fd:43:
f5:50:1e:1b:b7:99:9e:c1:ab:d5:c4:8f:ed:0c:06:33:eb:57:
40:cd:b8:45:ab:da:5a:f9:b0:ae:49:7d:11:3b:db:7c:d5:fe:
af:9b:df:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:41 2026 by rpki-client