Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier: WXlEks+7DfhGHos38zlOGwrHE78qND3NzJ99RRhTWeg=
Subject key identifier: DB:5C:F6:85:73:9C:57:E5:D7:78:8A:B0:46:C5:37:4F:40:14:74:D4
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 019FFEA55BE929FF30C3B56DA074F3F28371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number: 1A09
Signing time: Fri 14 Aug 2026 05:01:17 +0000
Manifest this update: Fri 14 Aug 2026 05:01:17 +0000
Manifest next update: Sat 15 Aug 2026 05:01:17 +0000
Files and hashes: 1: O0zdzMf69p1geR9BzbHj8H6216Q.roa (hash: gB3ykbY7Zy2yOIDfRVoU3HqEBAgziuKZvTGr//ZJWIo=)
2: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: l4nWq7L7d81vmsKbfA/MMX4/b4tYps5qp75ZOV/e4Io=)
3: sYgcwFmXC21qQr4HaIkoLUDZGq4.roa (hash: o16QA0TxR5R2SVkQH4tgiDW7/Tyeif3rP5L2akN0sow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fe:a5:5b:e9:29:ff:30:c3:b5:6d:a0:74:f3:f2:83:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Aug 14 05:01:17 2026 GMT
Not After : Aug 15 05:01:17 2026 GMT
Subject: CN=db5cf685739c57e5d7788ab046c5374f401474d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:ec:1a:df:6b:fb:6e:65:2e:91:5f:96:6b:
05:3f:dd:ca:af:3d:1e:d8:da:85:f7:04:18:20:ca:
5b:86:c3:c3:95:0e:83:60:fb:19:87:02:84:12:76:
2e:46:14:45:31:bf:48:54:90:7d:31:6e:45:7d:01:
f7:bc:67:39:1f:fc:c4:f5:41:8d:9c:8a:9f:8c:65:
03:7c:30:1f:b0:98:e6:4e:cd:cf:33:a7:92:c1:67:
1c:4c:8d:7b:a1:71:32:9e:de:23:cb:48:68:8a:7f:
24:9c:ee:2a:30:41:c6:41:ec:9a:64:22:2f:d4:8e:
32:d0:04:33:b9:8f:44:8a:55:1c:cd:bd:f8:39:24:
fa:d0:4d:b0:40:c9:31:bf:fd:59:72:d1:24:c2:bc:
b4:05:59:05:7e:2d:da:8e:b5:e6:3a:83:9b:ca:6f:
f1:b5:e5:e4:8b:7b:aa:45:47:4a:ed:95:80:26:e7:
a3:2f:88:04:cb:13:2b:0d:b0:6d:af:82:5c:f8:a8:
77:53:3a:33:45:f8:c8:49:1d:20:5f:7e:bd:76:63:
69:d4:6e:91:6b:7f:35:8e:e6:bb:48:85:2f:f1:e3:
87:27:ea:99:89:51:ca:87:30:88:8c:d6:7b:7b:96:
35:6b:49:cc:24:42:d5:16:d2:1e:5a:7b:d7:50:72:
23:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5C:F6:85:73:9C:57:E5:D7:78:8A:B0:46:C5:37:4F:40:14:74:D4
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8a:c4:46:e8:71:3c:c0:38:ad:fd:ba:e1:9f:59:14:72:70:
09:98:d0:84:49:ca:d3:39:bd:7b:4a:de:ea:c6:45:eb:51:39:
e9:4f:25:e0:c6:eb:c6:f8:e7:c7:5c:21:f1:0c:1a:3e:dd:e1:
50:56:41:42:2b:c0:d9:b8:b9:17:f8:aa:c0:62:5e:3a:dd:1f:
58:75:3a:f5:69:b2:13:5a:d0:3b:7d:18:84:33:8f:d7:c5:4d:
e8:10:ff:3e:74:b6:49:df:29:20:f2:1a:54:e3:fd:2a:3b:ec:
9a:4f:41:80:da:22:09:ed:e3:2c:fc:49:fa:5d:ab:25:d7:6c:
57:1f:37:2e:48:cf:fd:66:fb:13:58:a7:fe:28:ed:32:75:55:
3d:8c:2a:75:41:2d:77:18:d1:6c:44:c0:91:cd:30:d5:1e:2b:
97:b9:67:de:e3:07:27:a0:3c:a0:26:3f:95:02:54:c4:f7:b3:
b7:f5:ca:e2:a3:8f:0f:00:b9:37:84:6d:40:e6:76:76:72:46:
a8:95:b2:80:3b:e8:f7:82:c2:88:03:d6:6e:ff:47:6c:77:bc:
b4:8d:24:2b:f5:ee:36:f4:d9:3d:9a:3c:7c:8a:d7:10:8e:92:
b6:67:60:d2:85:d8:54:ee:a8:27:7a:ea:a1:3a:3a:81:66:17:
76:8f:f8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 06:30:37 2026 by rpki-client