Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
File: x1VwJGd3DtabNnt3u-ZAvG20FT4.mft (raw, json)
Hash identifier: iF3sRmQlDyCruyTSeDzue+b9PjEy0xjP2dCQxJp3v6Q=
Subject key identifier: 70:C7:6D:9C:6F:C2:19:C2:DD:8E:6E:CA:34:87:5A:31:70:1F:3C:B1
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 01A08B311C87561C590C9908338ADD2D670B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
Manifest number: 148D
Signing time: Thu 10 Sep 2026 12:00:46 +0000
Manifest this update: Thu 10 Sep 2026 12:00:46 +0000
Manifest next update: Fri 11 Sep 2026 12:00:46 +0000
Files and hashes: 1: 0bmFeOalAd948A9rOGuXh9wiu6M.roa (hash: XaNjIthcYnfjKW08RFTHlKHxTa2srkgDpERAUPeigOY=)
2: 3bor1lJpsbxwoxpTVw7SPphj0KA.roa (hash: MKCpN8MSRgBkERkhEGqpPaY9qiTFWm3a9NewCeOTHfw=)
3: EN5YRtRNeJB3G_kn9_QszN63XRs.roa (hash: ED4WNccI96qY8PVsosO6wi3ARts0z42Q1MVgegQE8i4=)
4: Pv_B5wrNSOIQ2rOvMqV3MMegG7w.roa (hash: wwJ2iaOAypy2cu/YyFarYyFvvtG9167wYna2ztGjItM=)
5: S4cOm5eDZspURLWbEjjfUiB2w9A.roa (hash: WT7udJa3v1pG5JhWMUlVe+UmSzwa9B/DLth0MoSpo+c=)
6: WGarpJ7r84I2BUjPwsh_FrmY5eE.roa (hash: enfn5n+6zegDsbYCXp7miXXJum8vzX4WWxNLJX5Keh4=)
7: Wi7IqvDgVK392tuCNUoibcF9Xwc.roa (hash: 8UDRh/dVbBhU/0zaDX6N0W8S2rKIEZNL8f2ZIttBB5A=)
8: rqBI1Yge5d8pkYEHzMcFHLBAy_s.roa (hash: 5Bfk1P6XoOfoIACEr9dJa6ZH0ZEA6wxnqttPtb85Opc=)
9: x1VwJGd3DtabNnt3u-ZAvG20FT4.crl (hash: cm46oJJ7p3WI9L2KbWU+SvVk1arh0K1V4SsRQBIvIYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:1c:87:56:1c:59:0c:99:08:33:8a:dd:2d:67:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Sep 10 12:00:46 2026 GMT
Not After : Sep 11 12:00:46 2026 GMT
Subject: CN=70c76d9c6fc219c2dd8e6eca34875a31701f3cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:df:db:d7:67:86:52:f1:66:b3:dc:8c:48:5d:
a5:db:e1:7d:f4:4c:4e:36:88:78:69:9a:2b:7f:f4:
52:18:1e:37:98:bf:24:55:48:95:fc:d6:2c:4d:11:
37:8c:17:6e:88:e8:d9:27:4c:62:b5:06:6b:13:dc:
06:28:8b:1e:97:eb:34:42:84:d8:67:9a:9c:7a:10:
ed:62:55:e5:29:f5:5b:8a:2a:b9:e7:43:61:e7:8e:
96:83:52:89:70:f6:79:5c:f3:69:d1:73:c7:02:5e:
23:88:3a:58:16:b5:17:8e:c7:70:d0:98:0e:7c:d8:
22:de:cc:36:7c:f7:aa:f9:d8:d5:ce:bb:42:e2:88:
59:6b:cf:1c:16:77:67:fa:8b:1e:ac:b3:18:35:0b:
ec:e0:47:62:3f:3a:7d:db:54:99:72:68:1c:35:3e:
5c:27:c6:12:f4:c6:ec:08:0f:ed:f3:1a:74:72:08:
78:f3:ef:79:a2:cd:71:f8:92:65:5b:80:5a:b5:0c:
ab:0e:06:75:52:a0:bd:ac:f1:3a:03:4d:e4:a6:21:
83:a9:9f:0f:0c:4f:d0:51:b8:28:5f:41:a6:73:7b:
68:bb:2e:15:45:99:93:9d:ff:47:be:25:97:37:a0:
6e:cd:64:b8:1b:a1:e2:b6:67:4d:aa:c1:3d:c1:d6:
89:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C7:6D:9C:6F:C2:19:C2:DD:8E:6E:CA:34:87:5A:31:70:1F:3C:B1
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a2:d2:11:21:fd:97:b5:02:6e:30:2b:09:59:0e:12:3b:87:
31:97:e8:93:d7:35:29:7b:a7:b3:75:51:6c:70:2d:80:a0:3b:
05:1a:ae:5d:b8:6e:71:b7:bb:d3:16:b3:eb:49:39:a8:48:00:
56:98:62:97:4d:64:89:6c:65:ee:f9:a1:38:b2:bb:f2:e1:6d:
ba:b4:96:a5:40:57:7b:04:b8:34:d6:af:87:84:01:7a:45:b5:
8b:cb:f8:32:70:45:bf:d3:a9:24:a7:f3:5f:1c:17:d6:87:b8:
f7:16:54:92:1f:41:38:7c:db:ed:fe:9c:a6:fb:e0:3e:ba:86:
db:39:8c:95:a1:76:8a:af:5c:c4:b6:bd:87:62:67:ac:65:2b:
9c:ab:3f:ca:b4:2c:22:86:99:91:fc:ac:c5:38:30:8b:0f:60:
36:66:cf:95:4a:ce:85:ff:41:d3:f8:88:b4:6a:93:1d:f4:b6:
4d:83:15:90:b0:0f:31:c5:b8:40:0b:1a:db:d9:91:3a:6c:46:
6c:c8:c3:81:25:92:17:bb:2c:f9:bc:2a:de:f9:9a:55:72:fb:
35:fe:76:96:95:4b:b8:81:72:2a:b3:0a:f7:e6:a9:f2:71:c0:
c6:33:f2:97:86:a5:53:42:9d:4e:ed:3f:88:58:3f:6e:c5:d6:
1f:3f:60:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:01:19 2026 by rpki-client