Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier: c+tJT1A6zhdni8wlci6gw/8Be+m3b6dPPByOV0v5whQ=
Subject key identifier: 4A:7E:04:23:94:69:22:2D:32:57:0D:67:33:D0:A4:45:CC:8A:31:66
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 01A1189948B629FD5D3EC52941C672ADBB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number: 1A9B
Signing time: Wed 07 Oct 2026 23:01:01 +0000
Manifest this update: Wed 07 Oct 2026 23:01:01 +0000
Manifest next update: Thu 08 Oct 2026 23:01:01 +0000
Files and hashes: 1: O0zdzMf69p1geR9BzbHj8H6216Q.roa (hash: gB3ykbY7Zy2yOIDfRVoU3HqEBAgziuKZvTGr//ZJWIo=)
2: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: j/JeBzY+x7K+yvAQHHr+aXmHDI1BxrVsm3B31zzGza8=)
3: sYgcwFmXC21qQr4HaIkoLUDZGq4.roa (hash: o16QA0TxR5R2SVkQH4tgiDW7/Tyeif3rP5L2akN0sow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:99:48:b6:29:fd:5d:3e:c5:29:41:c6:72:ad:bb:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Oct 7 23:01:01 2026 GMT
Not After : Oct 8 23:01:01 2026 GMT
Subject: CN=4a7e04239469222d32570d6733d0a445cc8a3166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:70:44:75:c9:95:8b:d8:41:c8:2e:0a:30:
d4:74:11:0d:c4:ec:46:49:d8:df:94:08:ff:ed:88:
da:1f:b3:1d:7b:cf:90:d7:34:d4:15:61:ab:44:e2:
6b:09:73:f9:59:c5:1d:bf:b5:19:54:d7:4a:76:34:
9b:c1:c5:0a:1f:4c:8a:a0:6c:86:c9:44:71:32:87:
e5:22:ab:1e:16:2e:c5:4d:40:e7:67:46:bf:4e:d6:
d6:7a:28:71:e8:81:99:ac:a7:6d:4e:5d:b5:67:cf:
60:1a:3d:e8:e0:94:61:c7:a2:3d:1c:86:f1:33:ea:
45:07:82:2d:9a:23:3f:53:7e:7c:b5:d2:0b:ed:3b:
cf:2c:f3:7b:6c:3a:63:cf:79:20:68:9d:84:bc:e9:
31:eb:c4:26:0b:17:4b:78:28:24:21:be:e4:4d:03:
cd:4e:c5:8d:7b:d7:92:96:fc:5c:27:61:23:54:08:
aa:a2:17:fb:8a:ae:b8:62:be:10:bd:a8:3d:bb:02:
51:f0:a3:49:47:cf:da:97:60:75:4c:47:03:dc:69:
05:01:ee:c8:e1:4e:17:92:a1:13:81:e1:4c:a9:11:
83:cc:59:fa:31:17:a9:4b:2a:4a:0d:9b:d2:e6:af:
cf:b7:d9:84:67:e5:bd:b0:31:a5:7f:80:ba:97:44:
04:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7E:04:23:94:69:22:2D:32:57:0D:67:33:D0:A4:45:CC:8A:31:66
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1c:5d:f2:0b:dc:de:f6:0e:bb:0e:92:9b:65:3c:95:23:ee:
c2:5a:ec:e9:94:82:cf:ce:f9:88:be:73:b7:89:25:91:1b:82:
04:99:69:d7:81:27:6d:f0:0d:b8:97:63:63:e1:e9:9d:be:72:
57:79:6b:d7:f7:98:d9:6d:77:d9:9c:eb:b8:bd:ed:41:78:f5:
97:32:b5:15:72:4f:13:81:b6:fc:94:19:16:1a:66:f2:1e:da:
3c:a6:35:a0:1e:1a:ad:25:5f:62:e9:1e:eb:99:22:ba:64:30:
3b:b7:51:a4:27:fb:f0:ea:87:0c:ca:f8:64:a3:15:e2:8e:75:
e1:1e:21:78:2c:c0:8f:f0:59:67:bb:50:ca:6e:a7:7c:20:a3:
e5:1b:40:fe:59:bc:a1:a1:3c:ee:0f:f6:1a:b4:9a:13:a2:f5:
b5:c8:4c:1d:9e:f7:d9:0b:df:03:62:f4:9d:a0:70:e0:06:cb:
1c:65:98:b7:6c:9e:9b:b8:6f:dd:50:6d:eb:57:a7:fa:02:76:
06:d4:48:29:3b:dc:28:b0:1a:1f:20:8e:30:f1:d8:82:54:a7:
89:d1:f1:7c:33:09:1f:e3:47:eb:32:8a:02:43:9a:a3:9f:0e:
9c:35:78:98:00:e4:7e:84:73:b9:7e:ce:f8:cd:25:22:34:ad:
5e:ab:f7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:53:51 2026 by rpki-client