Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
File: M0-fg9LXTAwP0A2nNVePc33X2gM.mft (raw, json)
Hash identifier: CS5Mny2saGSey85tMn2263p1l4+/hlb9Q00RXD4slUE=
Subject key identifier: E3:FF:FE:DC:8E:7D:08:45:B6:09:27:68:B7:A0:32:47:12:2A:6D:64
Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
Certificate issuer: /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Certificate serial: 01A1287A7A00D2ABB1CA0F1C6F3B2642117B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
Manifest number: 07C7
Signing time: Sun 11 Oct 2026 01:01:17 +0000
Manifest this update: Sun 11 Oct 2026 01:01:17 +0000
Manifest next update: Mon 12 Oct 2026 01:01:17 +0000
Files and hashes: 1: 7nAXiiWwMrKC__gT-hUF2XA-Iso.roa (hash: vcK2N0Exej7cew/p43KdNyk4JPLcOKiM3s2+QDUjk38=)
2: F6lbxX3aQsTs2CgIaSrcru61Nkg.roa (hash: xDbeN/l1tsv2dlE9muWhGH3qIwH6FbQpQRsMOywBxk0=)
3: M0-fg9LXTAwP0A2nNVePc33X2gM.crl (hash: fJppU1FmpoN4OPl4LpIFiJw2gUf6uQsmrvnQQRsYVEg=)
4: WqDS95-He-yk3t24qKJI-_SLkPk.roa (hash: CpUmTzZjgX7L+EURvDrJ6FpyIH+66F1QJtHPFgkqtLs=)
5: cgOqu4SdNiUsyvVgRsWy2IiSrRk.roa (hash: iyZz+ne5RBNmhJL+kkuEkW2psKX2xrbIym9fdJ+TVi0=)
6: faLPN_S_WjaTJHL5obkgUoA9YU0.roa (hash: 9SARb7qgti8Rdi1ymT3uP+n1nUwS+BiJv6V79V4Y0rI=)
7: tkxYbwLzW57rtbTL3HAb4gik620.roa (hash: gE/XZLF/hHQla0+c26dZTm+olAmW2YqbYW49t6axXdU=)
8: v0CmFjYdCus3aQO-8m8_ZmwT2WU.roa (hash: gPHxfBPLjS7r3KK8sjMCL/yxvco773JImBamks13aRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:7a:7a:00:d2:ab:b1:ca:0f:1c:6f:3b:26:42:11:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Validity
Not Before: Oct 11 01:01:17 2026 GMT
Not After : Oct 12 01:01:17 2026 GMT
Subject: CN=e3fffedc8e7d0845b6092768b7a03247122a6d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:77:ed:14:41:50:f3:48:3e:14:21:be:95:
f2:95:71:04:29:90:44:76:30:02:fd:a0:67:fc:ff:
9c:f2:03:0e:04:96:5d:9b:4f:98:dc:b0:57:2c:e8:
08:75:00:ff:88:24:dc:98:9b:be:d6:44:2f:2d:29:
fc:6f:c7:75:9a:1e:c0:bf:47:03:af:0e:33:36:5e:
06:77:00:ad:35:f3:e8:1b:ad:dc:6e:b3:1b:16:ad:
4b:a2:6b:80:e6:ca:8c:f7:ad:fe:94:b8:10:1c:38:
53:17:48:81:d5:5a:76:f9:ef:fb:81:94:6c:31:85:
c7:ec:d1:7d:82:3a:aa:04:b8:3a:15:af:a5:a1:ec:
59:46:fb:95:47:fc:96:c8:f6:72:a8:14:0d:12:bd:
ca:88:ae:cd:de:4a:cc:d4:70:6e:0b:96:5f:e9:80:
47:bc:62:b2:37:1c:97:77:14:6c:c0:fd:a8:3f:cd:
26:a0:5c:8a:73:82:18:4b:8c:b7:aa:9f:4e:bc:89:
f9:81:2b:0f:3e:c9:01:3e:9e:03:1c:e5:66:61:fb:
4d:4e:4f:cc:99:20:4f:f0:f4:3f:13:04:01:2a:48:
be:e9:48:b3:b5:fd:0d:7a:21:db:2f:ce:73:10:cf:
ea:57:26:22:c7:b4:dd:14:c5:fe:bc:27:28:b8:e2:
82:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FF:FE:DC:8E:7D:08:45:B6:09:27:68:B7:A0:32:47:12:2A:6D:64
X509v3 Authority Key Identifier:
keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:00:3c:56:3c:8e:06:26:d3:9b:db:e4:33:e5:1a:b4:00:1d:
9b:41:5c:7d:3f:57:3a:fc:58:a3:2c:16:95:a7:09:8a:59:17:
af:8e:47:83:32:65:c5:22:67:6e:de:82:31:ea:86:a6:2b:ab:
2c:a9:a7:a6:d4:e5:3b:33:b8:63:78:f1:7c:7e:96:ee:f3:22:
fa:cc:b3:d0:82:5f:e8:23:28:5c:da:9e:44:42:02:d4:8e:72:
91:83:df:93:43:3a:a4:8a:d7:4c:d1:1b:96:e3:df:4c:82:f4:
29:ef:0b:e5:17:8a:a1:cb:a3:40:95:01:ae:c0:41:a4:61:ac:
ad:3e:7e:9a:3a:87:fc:c2:3f:35:2e:dd:ad:3d:fd:6a:4e:ab:
2f:c5:f7:6c:77:9e:0a:65:00:c9:82:f7:2b:6b:91:3b:c2:62:
a2:aa:58:9a:e0:4e:c7:19:50:c9:3a:e1:09:62:4b:1e:cb:f1:
c6:91:10:50:a6:9b:31:d8:e8:31:7a:02:16:0c:ea:d4:51:a1:
15:64:8e:8a:03:ac:e9:12:b3:b3:88:c9:d1:3d:e8:af:75:af:
f7:22:31:80:03:c8:d1:f1:11:19:5e:4e:4f:c2:76:e4:32:c2:
1c:c7:c6:98:01:30:11:fb:02:c4:a2:6d:eb:56:39:b2:41:00:
00:97:02:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:49:53 2026 by rpki-client