Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
File: K7wAKis1mxqoh54cTXBFWzGS76w.mft (raw, json)
Hash identifier: oIcScTBG5RqVTv6zawzfXJBcDKtRiZkrlAW4xz6qCM0=
Subject key identifier: CA:C9:0C:AE:5B:9B:BB:BE:79:E1:63:8F:60:42:2E:7C:2C:63:45:1F
Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
Certificate issuer: /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Certificate serial: 01A08AC32990B005E5E99B0CB73473A4F3DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 10:00:40 +0000
Manifest this update: Thu 10 Sep 2026 10:00:40 +0000
Manifest next update: Fri 11 Sep 2026 10:00:40 +0000
Files and hashes: 1: 2UmZFRrJ0P-2mwYSao7Xzkep2iA.roa (hash: N9+wOT3ic7u1Pc0UnkkcEFa7DljVTAIJF/p2BSuaQHw=)
2: FaZ0cLgTBZNcBwPe27HVLy0g3uQ.roa (hash: UEgljiMrAQpcRRhA4Pac+ms+SkFVsWGJ6bxNZbKxlps=)
3: ForxXITTo8VcelO4P9r7TvsO-XY.roa (hash: BAZ7Et0pfjNtIefZkGXGB5w18XLBmdb6lCep7vhdglk=)
4: K7wAKis1mxqoh54cTXBFWzGS76w.crl (hash: Yk1L/sQnl4ssPCo4UG4jFFLofLQhlVH0U4cHc8gpeyo=)
5: ncypf2iinEe-q_LnbnKjYSF5rJc.roa (hash: X77xC4nNcyrrbUpykZ9gvEucbXtxd0H2H3Sybmc5J48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:29:90:b0:05:e5:e9:9b:0c:b7:34:73:a4:f3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Validity
Not Before: Sep 10 10:00:40 2026 GMT
Not After : Sep 11 10:00:40 2026 GMT
Subject: CN=cac90cae5b9bbbbe79e1638f60422e7c2c63451f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:44:e5:35:b8:f2:17:54:69:dc:1e:da:d6:5b:
09:ea:0a:94:1a:15:88:dc:0a:e7:80:ad:df:33:af:
ed:6e:e2:5e:ff:d4:c4:a6:55:dd:af:97:65:1b:d4:
6e:dd:eb:72:d4:ff:0b:e2:e2:3f:7e:eb:c6:b5:80:
97:d9:f5:57:b1:39:48:cc:54:8e:f8:85:6c:f4:92:
1d:8a:c9:bc:3e:93:bd:40:93:fc:21:82:a6:5e:9e:
6e:25:22:ec:6d:0e:eb:81:4b:48:87:04:50:a6:00:
0c:44:fa:3a:a8:61:89:92:29:c5:b6:6a:b6:2e:31:
be:60:b6:75:22:e6:97:fe:56:51:4e:51:9d:c1:8f:
14:01:16:56:4b:38:0c:fd:3d:95:65:5f:e6:be:8b:
0d:a6:f5:68:38:8b:cf:fd:0f:22:e2:b4:3c:31:6f:
ae:32:d5:bd:01:07:c0:08:e6:e9:e9:29:f3:80:5b:
91:57:bc:47:4c:25:cf:26:9b:35:59:87:a1:48:8a:
b6:63:cf:38:07:fc:ec:b1:2c:12:a3:29:ea:a0:4e:
9d:45:88:01:76:6d:9c:d5:46:f0:8e:9f:23:86:4b:
8e:db:6f:37:b4:fc:e3:91:c1:de:61:fd:45:a7:37:
46:6d:d4:83:eb:89:87:ca:ca:0b:93:5d:44:de:d8:
ff:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C9:0C:AE:5B:9B:BB:BE:79:E1:63:8F:60:42:2E:7C:2C:63:45:1F
X509v3 Authority Key Identifier:
keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:14:9e:a2:8a:79:24:4a:2d:62:05:ab:95:a9:ec:6d:cf:c4:
fc:49:d0:bf:99:0c:4e:3c:69:ad:12:b7:04:d4:d5:1e:8b:b1:
1e:84:ff:97:05:be:d6:80:77:d0:cd:3e:e2:b8:92:cb:ef:c5:
25:c1:92:d4:33:7f:36:9f:cc:eb:06:c1:12:a8:e2:6a:fd:25:
a3:7a:9d:a6:d3:65:50:01:c4:44:a5:20:5f:b9:5c:a9:2e:f0:
bd:37:87:a8:6c:b7:77:ae:bb:b6:10:4a:2d:f0:f5:38:bc:89:
f2:d1:9d:24:7c:e2:6b:17:c5:dd:5d:8c:15:4f:e3:d2:2c:ed:
36:1c:57:97:67:cd:bf:e1:d1:53:0e:0b:15:a6:c9:a1:a0:6c:
b8:1a:ee:8c:b2:da:6c:ed:ad:a1:48:0a:77:e2:74:5e:6a:40:
14:a8:9f:35:0a:a1:5b:b5:9b:d9:02:d0:ab:57:65:a2:49:eb:
08:86:c6:80:09:5a:6e:cb:24:11:36:fa:cb:9b:9f:3b:6f:f3:
88:82:f7:3e:8e:17:da:fa:c9:60:12:db:c6:4a:e0:af:ec:d2:
37:9b:eb:9f:7e:19:3d:00:b7:70:f9:8a:01:c7:94:d7:70:ba:
75:84:15:90:90:b5:65:a3:41:95:3b:6e:09:b8:f8:23:df:18:
c8:30:21:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:55:57 2026 by rpki-client