Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
File: x1es7dSIRbnr0Muqfb2ri8z9jWE.mft (raw, json)
Hash identifier: /sPkuFelUtLJ+aYjw1x7okkXr8b2ajuI42eB7sIv3vU=
Subject key identifier: F7:EB:A1:4D:55:88:18:BA:08:4F:42:C5:4D:A9:59:5C:6F:81:8E:43
Authority key identifier: C7:57:AC:ED:D4:88:45:B9:EB:D0:CB:AA:7D:BD:AB:8B:CC:FD:8D:61
Certificate issuer: /CN=c757acedd48845b9ebd0cbaa7dbdab8bccfd8d61
Certificate serial: 01A18F428896940F68B19BEF60D2D15346CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1es7dSIRbnr0Muqfb2ri8z9jWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
Manifest number: 0148
Signing time: Sat 31 Oct 2026 00:01:04 +0000
Manifest this update: Sat 31 Oct 2026 00:01:04 +0000
Manifest next update: Sun 01 Nov 2026 00:01:04 +0000
Files and hashes: 1: 1-Urp8rAL1ZSmlkxaPOzl5pj6sR8.roa (hash: eq+9SCGsso6J0nmlRfLYKk2u+tOTbol21TaNCHcqDic=)
2: YBBatb3zVPdSOcJ9MpSHMK867-k.roa (hash: IlKGC7X7khejWn4GInerZOXh0TDt6Gd+xhqLmW0TfU4=)
3: x1es7dSIRbnr0Muqfb2ri8z9jWE.crl (hash: 80Vh45rIiYJmYnrHCSgMNHbC6fPnCZqVhzDKnb/dq+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1es7dSIRbnr0Muqfb2ri8z9jWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:42:88:96:94:0f:68:b1:9b:ef:60:d2:d1:53:46:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c757acedd48845b9ebd0cbaa7dbdab8bccfd8d61
Validity
Not Before: Oct 31 00:01:04 2026 GMT
Not After : Nov 1 00:01:04 2026 GMT
Subject: CN=f7eba14d558818ba084f42c54da9595c6f818e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:92:76:8f:26:4d:6b:c0:a5:9e:f4:e6:e0:
4b:07:90:ba:23:7f:0f:1f:7e:3a:d8:9b:5a:4b:6b:
43:8f:f1:89:0d:4e:5e:2b:b6:39:71:74:52:d5:06:
16:7d:0c:c5:c9:e9:37:19:9a:29:ea:58:07:5c:90:
07:2a:e8:db:1a:2e:7e:34:6c:7f:f0:8e:58:56:44:
7e:3d:2f:d5:b5:5d:45:aa:86:a4:81:e9:f0:64:6e:
8b:5d:a2:ac:e6:79:85:02:95:e2:26:e9:aa:74:17:
e9:87:e0:5a:61:ff:9a:ca:e2:92:de:15:83:05:ff:
f4:93:cb:df:d0:69:d3:ba:77:c1:6f:66:dc:ec:02:
b9:85:00:51:84:df:10:5b:bb:82:bc:95:76:41:5f:
91:fc:21:2e:5e:28:8c:0f:a7:e5:81:a0:18:0a:6b:
f8:5d:76:b7:fa:79:09:f7:88:9e:e5:83:3e:f9:b5:
4e:fa:7c:30:dc:33:0f:12:88:44:90:e3:f8:87:fe:
3c:77:f5:a1:01:9e:e4:78:c2:36:80:95:2e:99:36:
42:59:d3:ed:83:bf:d2:e5:23:82:7c:cb:49:16:87:
df:bd:37:53:49:e8:37:ae:9e:54:5f:07:6e:1d:4b:
a4:17:1b:d3:3b:c3:d1:46:26:f0:e0:81:7f:c4:a8:
73:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EB:A1:4D:55:88:18:BA:08:4F:42:C5:4D:A9:59:5C:6F:81:8E:43
X509v3 Authority Key Identifier:
keyid:C7:57:AC:ED:D4:88:45:B9:EB:D0:CB:AA:7D:BD:AB:8B:CC:FD:8D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1es7dSIRbnr0Muqfb2ri8z9jWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0e:f3:23:bd:e1:58:0b:49:36:e1:80:68:7c:e0:8b:f7:d3:
59:0e:2a:8c:79:9b:37:fa:00:38:d1:ef:3c:45:16:3d:dc:a4:
69:39:bb:d0:81:3f:33:1e:db:22:74:87:b9:4e:61:ad:22:8b:
e1:bb:b6:5b:c0:1c:e5:6d:f8:7e:3b:d0:f1:64:75:50:bc:11:
4a:6f:39:04:24:19:1a:44:e7:08:98:10:22:72:01:54:ff:75:
b2:f0:52:9f:b8:93:a1:18:c6:ac:38:f2:47:78:bb:8e:86:28:
b0:e3:62:b0:0f:4f:4b:1d:94:80:38:ee:48:51:ea:a0:d8:05:
d0:27:c3:90:8b:5b:05:3d:c1:87:c1:e4:4c:b5:b4:10:2e:3c:
06:da:af:77:50:26:31:ea:f0:95:0f:ec:a5:46:e5:83:4d:cf:
e8:cc:af:74:26:01:56:42:9b:0f:e8:02:a2:b6:e7:e1:6c:01:
ef:b9:89:a8:dc:33:dc:ec:c2:02:5a:de:6a:21:fe:82:b3:71:
76:7a:15:6c:24:0d:55:ce:d3:0f:53:9c:16:c6:0f:78:44:bd:
6b:10:15:c1:d9:87:07:34:0b:59:52:c9:c5:1c:c8:5e:26:9f:
4e:9b:9c:92:9d:fc:0a:20:81:b8:a6:f8:e0:cb:ea:16:dd:4e:
ff:3e:07:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 06:52:16 2026 by rpki-client