Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier: pCHDX4rsl+Sc01y1WQA5d1/88DF4oVgibrVSkt4MKAA=
Subject key identifier: 41:D3:7F:0B:80:07:48:96:1E:A0:03:8B:21:A8:CE:C1:D7:64:11:FE
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 01A11C75D1146F81FA72718E876AE2C54E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number: 1A9D
Signing time: Thu 08 Oct 2026 17:00:45 +0000
Manifest this update: Thu 08 Oct 2026 17:00:45 +0000
Manifest next update: Fri 09 Oct 2026 17:00:45 +0000
Files and hashes: 1: O0zdzMf69p1geR9BzbHj8H6216Q.roa (hash: gB3ykbY7Zy2yOIDfRVoU3HqEBAgziuKZvTGr//ZJWIo=)
2: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: CMRvC7Uos1FDzMqBBS+cyc0JEWffeV49rvSXE8Pgq5w=)
3: sYgcwFmXC21qQr4HaIkoLUDZGq4.roa (hash: o16QA0TxR5R2SVkQH4tgiDW7/Tyeif3rP5L2akN0sow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:75:d1:14:6f:81:fa:72:71:8e:87:6a:e2:c5:4e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Oct 8 17:00:45 2026 GMT
Not After : Oct 9 17:00:45 2026 GMT
Subject: CN=41d37f0b800748961ea0038b21a8cec1d76411fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:57:da:95:f9:45:d7:4b:56:20:3b:5b:89:dc:
d4:02:62:c8:c1:1f:89:3f:f4:b2:e2:fc:ba:80:45:
78:31:14:54:0a:ed:fb:aa:34:f8:9a:92:25:ec:2a:
4d:90:38:84:31:0a:86:dc:de:63:5b:3f:bd:d3:fb:
9e:90:fd:65:73:a0:b9:b5:51:ec:d5:92:b3:27:48:
42:50:2e:65:cb:fd:15:0d:db:8a:3b:05:b1:b7:77:
7b:31:ad:f8:b3:40:82:e5:34:32:df:b9:3e:cd:a9:
83:79:8a:bd:cd:c8:88:b5:fc:49:f5:cf:84:0e:a2:
5d:7a:40:c1:9b:8a:85:eb:3a:ae:54:0c:57:a6:fd:
cd:72:16:96:e4:a2:f5:05:2f:47:45:74:8a:ab:49:
d7:cc:a3:89:9a:ce:ea:71:a5:f6:59:03:cb:f3:fb:
40:22:8d:87:ea:32:1b:01:5e:fa:bb:b1:e2:63:88:
4c:25:e2:2f:ca:bb:fd:69:9f:b8:1c:8c:62:e2:6b:
cb:8d:d7:a6:ba:45:bf:73:64:f9:80:5c:77:42:ac:
22:f9:04:06:8c:69:4a:64:55:1f:d4:a0:ef:c7:99:
3f:e5:bb:76:b4:d3:b5:21:87:a0:c2:89:ac:7d:8a:
81:ae:92:72:77:00:5a:b6:83:61:f8:5b:65:2e:1b:
11:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D3:7F:0B:80:07:48:96:1E:A0:03:8B:21:A8:CE:C1:D7:64:11:FE
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:94:8b:83:ab:7f:15:a6:dd:b5:67:47:85:14:35:1f:9e:15:
29:c9:96:89:a5:23:df:60:02:26:73:28:54:37:0d:8a:4d:20:
ea:38:80:6a:e7:c0:99:42:19:43:68:e5:ab:ab:57:55:03:95:
06:e9:7b:d1:07:4a:73:f8:d0:31:70:ee:e7:c4:2e:b2:13:f9:
0e:06:6a:fe:8b:9b:22:ff:98:f9:23:fd:3f:22:c7:a0:86:34:
05:1a:f4:01:a8:d1:a9:08:54:32:da:c3:7e:a2:27:45:89:8d:
99:22:9f:4c:29:ba:65:25:71:2f:e5:42:9a:da:14:f5:16:ed:
47:e4:2f:55:cb:2d:15:f5:89:67:e3:2a:f0:a4:98:92:70:8e:
85:4b:2c:e3:96:98:36:ef:e2:96:53:27:56:5b:93:00:a7:41:
93:0f:0c:fe:95:a3:c3:29:46:e1:d9:43:7e:4e:a4:3c:51:17:
24:f2:31:57:a2:68:00:fb:89:74:39:8e:22:9b:0a:b2:ee:bf:
89:84:c3:87:5d:0d:eb:dd:29:2d:cf:59:1a:b2:74:7f:e9:71:
21:50:4f:5b:d5:9d:f9:96:27:b0:37:bf:ad:80:37:e0:e9:62:
2f:d3:a7:a5:35:7a:1e:00:e4:1d:2d:e8:44:53:53:06:d4:8c:
79:f1:47:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:25:25 2026 by rpki-client