Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
File: i7dzgYUSSQpQCthD6irnF-8hsUw.mft (raw, json)
Hash identifier: ihJv25TY47d7LBu6b2JJqdX4J2RphPmWWfyK5aEloGk=
Subject key identifier: A7:E1:F3:DD:3D:44:69:B9:B9:14:DF:FD:73:3B:5C:38:EF:F1:D5:1D
Authority key identifier: 8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
Certificate issuer: /CN=8bb773818512490a500ad843ea2ae717ef21b14c
Certificate serial: 01A138C9A914F1C8F7658EF4F6A16B0776F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
Manifest number: 1AA1
Signing time: Wed 14 Oct 2026 05:01:42 +0000
Manifest this update: Wed 14 Oct 2026 05:01:42 +0000
Manifest next update: Thu 15 Oct 2026 05:01:42 +0000
Files and hashes: 1: Ra13SMTFBvpWhxXrpfFnFw-OimM.roa (hash: b0Za2pBFcrD4LJ53MzUO0gNJytzhPTrcz+l8K+RFsRM=)
2: i7dzgYUSSQpQCthD6irnF-8hsUw.crl (hash: R2vGNuPnK+s5E+vRZgv7osOjtYzrwDnAqdL3DKB7pHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:c9:a9:14:f1:c8:f7:65:8e:f4:f6:a1:6b:07:76:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb773818512490a500ad843ea2ae717ef21b14c
Validity
Not Before: Oct 14 05:01:42 2026 GMT
Not After : Oct 15 05:01:42 2026 GMT
Subject: CN=a7e1f3dd3d4469b9b914dffd733b5c38eff1d51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:d5:d6:7e:12:fa:a1:f4:15:16:84:fe:64:
29:ab:b1:9c:1c:78:23:c1:16:45:80:25:ff:36:d9:
f2:89:ba:2f:64:1c:af:74:c4:e7:5c:54:f3:8e:c2:
43:25:10:57:90:ed:3d:84:57:96:10:31:45:48:ce:
eb:9c:fd:33:14:2f:5c:f8:6c:64:09:13:aa:cc:cf:
e1:1c:95:dd:d5:7a:0b:37:21:95:64:8f:f8:93:c4:
83:9b:5b:08:3f:71:37:2a:00:b3:93:61:f5:3f:53:
0f:d7:fb:9a:fc:cc:ed:4a:f5:a5:61:c1:78:81:f2:
10:e7:97:fe:67:c7:c9:9e:d4:a9:25:d3:90:1e:33:
94:95:d7:06:4b:72:7c:a7:97:73:e8:2d:9d:ab:85:
f8:23:81:08:64:87:a9:d8:72:9c:24:54:22:8f:3b:
ed:bb:91:f0:83:e6:1e:b3:cb:0d:4b:c3:fc:f4:54:
31:37:78:bd:35:d1:13:ee:e0:01:e5:63:0c:bb:1a:
a8:39:0a:ff:e8:71:af:df:01:0c:4b:e5:36:cd:30:
42:27:b1:f4:8e:d5:b6:bf:55:93:2e:65:d4:5b:99:
32:22:f9:db:75:de:a2:f9:95:4b:74:5a:51:e9:91:
b7:0b:7f:4e:89:c7:76:f9:a2:e8:7e:16:7d:db:6b:
f6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E1:F3:DD:3D:44:69:B9:B9:14:DF:FD:73:3B:5C:38:EF:F1:D5:1D
X509v3 Authority Key Identifier:
keyid:8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b8:b5:76:6a:25:47:eb:6e:88:5f:c4:8e:81:bb:dd:5b:14:
e3:21:d4:8b:9b:f8:45:b5:7c:5f:d9:c4:ba:20:51:b8:ca:06:
ad:4f:42:d7:3f:37:b1:77:21:67:88:39:05:17:dd:19:f4:41:
9d:ff:23:19:8b:c1:64:5a:ca:8c:fb:0f:f5:80:8a:d4:0b:35:
a5:25:bf:80:d8:95:0e:4b:0f:0d:1d:88:44:2b:41:38:4e:2d:
d3:43:65:92:ba:8d:33:df:f9:a4:92:b9:4b:5e:fd:0c:97:9a:
98:98:58:c6:04:0e:58:ce:d8:b9:8c:d3:43:e0:9c:d2:dd:0a:
0b:ea:73:a1:2d:55:40:24:2d:4e:c2:59:a1:07:89:b1:ba:2f:
d7:9b:d3:15:aa:ad:06:b3:8d:cd:b9:b7:73:c5:3f:78:3e:d0:
bb:0e:f8:68:8e:3c:84:47:47:27:ee:02:33:5b:cc:6c:4e:ec:
44:f5:a2:6e:cb:07:e9:6c:b1:ed:62:3c:8d:f8:fc:70:12:55:
58:d1:42:8f:8c:b8:2a:6e:af:3f:25:27:95:34:c8:fe:be:d8:
b2:1c:7d:ff:9c:4a:65:4b:36:ef:f5:8f:36:83:45:20:96:77:
89:0d:b1:c9:67:9c:cd:0f:d8:ec:5b:eb:f1:5b:9a:9f:36:ef:
9e:28:a5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 09:07:11 2026 by rpki-client