Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
File: d7AlLypnrNQplw-mSmQXd29y2NY.mft (raw, json)
Hash identifier: 5VYuMbKTwTYCtWov+boWBW5etQZMCdx5EEy65M2MTP8=
Subject key identifier: 0F:36:81:CD:74:54:55:6F:D7:41:0E:2F:DE:6B:07:60:FE:2B:15:2C
Authority key identifier: 77:B0:25:2F:2A:67:AC:D4:29:97:0F:A6:4A:64:17:77:6F:72:D8:D6
Certificate issuer: /CN=77b0252f2a67acd429970fa64a6417776f72d8d6
Certificate serial: 01A16EA4831ADA830AF4EDBDEE16838CED61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
Manifest number: 099A
Signing time: Sat 24 Oct 2026 16:00:37 +0000
Manifest this update: Sat 24 Oct 2026 16:00:37 +0000
Manifest next update: Sun 25 Oct 2026 16:00:37 +0000
Files and hashes: 1: GZzLxFCp1bVkiSpEsTLVVr4H9XI.asa (hash: ivqvyTFoXDuekBB8qUC8sgSfxDY8iNPCYAvAp+TmOlY=)
2: d7AlLypnrNQplw-mSmQXd29y2NY.crl (hash: bPP7uxACjgKvNxltct+IMQsj+5jCqf8jAsj+q7syZ+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 15:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:a4:83:1a:da:83:0a:f4:ed:bd:ee:16:83:8c:ed:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b0252f2a67acd429970fa64a6417776f72d8d6
Validity
Not Before: Oct 24 16:00:37 2026 GMT
Not After : Oct 25 16:00:37 2026 GMT
Subject: CN=0f3681cd7454556fd7410e2fde6b0760fe2b152c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d1:92:c6:7f:c7:1d:d2:f7:82:c5:87:45:5a:
81:47:52:7c:ca:cb:ab:0c:0f:1f:08:01:3c:56:9a:
fe:2b:fc:ef:9f:7d:e0:ae:f0:fd:4e:e7:36:b1:de:
d5:8d:a6:df:98:85:0d:9c:fa:63:fa:cc:a0:e0:fb:
a2:3a:f1:eb:a4:04:8f:7b:44:4b:a6:65:1c:85:af:
90:57:b5:54:46:2b:35:c7:3c:20:2a:02:6d:37:65:
b7:f4:ab:90:8a:fe:6d:5e:8d:08:90:0b:31:13:c1:
0d:32:8a:5e:e1:ce:a0:7e:04:6b:41:2c:61:da:24:
a2:f3:91:ab:9d:f5:90:c8:cd:f7:01:dd:2c:3f:94:
c7:b5:8e:f0:6f:5b:be:a7:aa:02:e4:b0:cc:8a:ec:
79:0e:30:76:60:c4:b0:c3:18:0d:e5:9d:0b:cf:ed:
3a:13:98:fc:78:41:db:0a:1b:51:c4:fa:7d:20:80:
23:0f:e4:44:ad:5d:e8:be:f8:2d:6b:18:01:a3:6e:
71:15:f6:1a:f8:b6:a6:67:6e:a9:e1:b5:1b:9e:66:
cc:f5:cc:16:76:8f:04:b0:53:1f:02:9d:33:dc:b7:
54:0c:04:03:47:f3:fd:3a:d3:5f:9b:47:a7:2f:ed:
90:5d:62:3e:b6:34:a0:b8:5e:f6:20:8d:da:f5:59:
19:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:36:81:CD:74:54:55:6F:D7:41:0E:2F:DE:6B:07:60:FE:2B:15:2C
X509v3 Authority Key Identifier:
keyid:77:B0:25:2F:2A:67:AC:D4:29:97:0F:A6:4A:64:17:77:6F:72:D8:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ad:d9:58:35:95:b3:0d:53:ac:39:73:cf:12:71:2a:0b:ef:
70:96:bd:27:77:8e:f7:6d:00:79:d9:35:8f:2f:0a:bf:b8:b6:
3f:49:f6:b8:ed:46:fd:ba:86:e8:42:0b:e9:d1:69:f9:26:24:
7d:3a:22:0d:a7:3b:0f:7a:73:1a:f1:5f:6b:d1:26:8f:51:32:
bc:32:7d:0b:07:b9:a4:ad:b2:26:08:2e:fc:61:7d:f2:cc:35:
b3:8c:61:a2:43:89:6b:c5:b9:0c:66:0d:12:6d:83:ce:5f:df:
2f:22:ec:18:16:2a:e4:69:16:e2:89:dd:44:83:20:1d:5c:eb:
3e:10:04:f3:98:25:c3:a1:e4:13:5d:f8:7b:ed:33:5d:8f:85:
12:a9:44:cf:71:fa:00:65:28:39:36:14:fd:00:7a:a8:4b:3c:
23:ef:ee:f5:0c:8e:b7:ba:c0:74:79:35:ab:b2:69:bf:81:e8:
69:3b:9a:73:85:81:ee:ec:a6:04:33:03:79:a7:d2:36:3e:8f:
39:1e:7c:f2:a9:dd:dd:1d:1e:62:e8:df:9d:90:d5:0a:c7:b3:
5c:e5:f1:30:0a:89:94:58:53:49:7d:35:dd:5d:91:9f:3e:58:
a0:36:72:f7:d1:43:14:e9:16:b6:b2:86:74:e1:d1:6e:0a:5c:
42:94:b4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:44:30 2026 by rpki-client