Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
File: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json)
Hash identifier: Mwy5HD3z2QWCUNhPv/YfpDGoK9qMkML99euA1KIijvE=
Subject key identifier: 6B:07:2C:A8:6F:D9:4A:04:C3:5F:D9:22:1D:E6:87:75:4D:1A:44:19
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial: 01A118CFF33DBFDC8CCC90873B0E94B0994F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
Manifest number: 0D5C
Signing time: Thu 08 Oct 2026 00:00:43 +0000
Manifest this update: Thu 08 Oct 2026 00:00:43 +0000
Manifest next update: Fri 09 Oct 2026 00:00:43 +0000
Files and hashes: 1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: 2E66SuAFXAvTpDB+q3f58yhL80P+TaQ2E8Fcte2/zlQ=)
2: KVXgF5z3zvUbDWDR9vEfB08gTrE.roa (hash: UHAb4fioT9YjE1AokUnZfVbvlTm8HooTgsw5q7QUcZ0=)
3: p_71hNByXrDuNYKSNzWqmsK9r-A.roa (hash: KH7XFzdKacxa7PKL/12r22Uz9GNXLSLW65hXt/t41hQ=)
4: wO6fRWt8N7XMvIeyLTRMhJ0-t94.roa (hash: HaZn3L1Ow7LzOKxqi0hwoJYvNFRFIKrjZGo6K0g1OtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:cf:f3:3d:bf:dc:8c:cc:90:87:3b:0e:94:b0:99:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Validity
Not Before: Oct 8 00:00:43 2026 GMT
Not After : Oct 9 00:00:43 2026 GMT
Subject: CN=6b072ca86fd94a04c35fd9221de687754d1a4419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f0:73:37:56:5c:e8:c1:5b:8c:79:1c:b8:ba:
b5:22:ea:7b:20:7c:4c:da:63:1f:2b:74:a4:c0:ef:
2c:9c:5c:3d:e5:3a:f2:0f:f4:5d:b0:f3:6c:2b:21:
66:44:5f:1f:63:da:a5:1d:e7:a5:45:eb:5b:d6:19:
38:2b:69:cf:3b:e0:9c:9d:c0:e1:9b:08:5c:fc:17:
83:bd:3e:c4:38:8e:d6:16:9e:d0:6e:5c:52:4e:a3:
64:34:f7:8e:89:ee:78:fa:bd:43:2e:25:e0:d0:2a:
b1:3d:2b:76:41:88:b1:79:01:fb:2b:e2:0a:6b:c5:
6b:74:9e:6b:b8:13:33:83:89:59:e6:4a:4f:19:02:
f3:c2:69:60:84:7d:fb:ce:9b:92:16:73:80:31:45:
6f:94:be:54:73:ee:4b:80:b9:01:17:67:23:14:9c:
72:5a:7a:c1:df:88:76:80:dc:26:99:79:dd:da:40:
15:88:d9:11:31:7d:9c:eb:a5:b5:f6:41:7e:b0:dd:
1f:2f:54:7e:44:81:31:20:48:27:7a:3b:99:55:3d:
e0:fe:db:bc:d6:7f:7c:58:29:bb:cf:cb:fc:1e:01:
3f:12:e4:1c:1f:07:24:25:ed:28:c8:e4:5a:5e:b4:
2c:ed:e4:aa:d6:f3:bc:6f:3c:f3:7c:1c:61:41:96:
35:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:07:2C:A8:6F:D9:4A:04:C3:5F:D9:22:1D:E6:87:75:4D:1A:44:19
X509v3 Authority Key Identifier:
keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e0:73:d3:c2:9e:80:e7:6c:a1:87:3f:a3:26:82:ba:5e:f5:
e5:ee:18:bc:0c:56:74:25:68:70:30:64:58:27:fb:c4:55:8f:
ff:5f:ad:63:23:30:26:c1:7c:c0:8c:0f:c2:41:68:dc:ab:2c:
ce:c5:5f:e2:27:25:21:e5:96:1d:f3:78:c9:6c:c7:e4:59:0c:
c4:6e:0c:54:fc:a4:d5:47:38:75:34:75:29:09:3c:f7:d0:80:
e1:53:66:3e:33:a2:5f:59:2f:d0:1c:b4:1c:38:5c:d5:95:63:
d1:a1:9b:58:34:97:8f:24:c4:2b:35:1c:ca:28:9f:3b:02:f3:
47:2c:3a:c2:a9:8a:ba:60:bb:ac:70:5a:10:2e:36:c9:ba:58:
10:60:f5:a8:26:2e:61:43:fd:1c:98:cb:52:25:cd:21:da:f0:
07:74:25:e2:ed:33:a4:cd:3c:f0:9d:76:5f:4a:9c:05:a3:49:
8c:90:41:29:3b:a8:a2:3c:df:59:d3:f6:2f:a6:80:4e:e9:93:
8c:e9:17:27:5a:f7:9e:96:1a:2c:fc:52:51:b0:84:4a:13:b5:
13:73:a5:8a:2c:82:62:bc:29:00:14:17:7e:a3:68:d9:7c:41:
85:12:29:37:a1:31:57:39:8a:23:72:7a:00:79:80:fa:e1:6d:
44:8d:0f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:55:45 2026 by rpki-client