Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
File: t72OrhZp3rOj-kGGSR4FyzLOCSo.mft (raw, json)
Hash identifier: gHc0OXA1VcsldaW92fXB/l6/JYrc93i2KKwd47GBUbc=
Subject key identifier: 04:AD:7D:45:06:48:23:D3:64:61:79:D8:6C:72:B9:5C:E8:64:C8:C3
Authority key identifier: B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
Certificate issuer: /CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Certificate serial: 01A108EF1EADC962FEEF3BE1F217FE40BB07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
Manifest number: 1547
Signing time: Sun 04 Oct 2026 22:00:51 +0000
Manifest this update: Sun 04 Oct 2026 22:00:51 +0000
Manifest next update: Mon 05 Oct 2026 22:00:51 +0000
Files and hashes: 1: OhJpimseggO-Y4_hoEiI1nB-3a4.roa (hash: zDlcOi1opjdDim5XNlXyOBikBSD080S2FUrAKbWMWcM=)
2: t72OrhZp3rOj-kGGSR4FyzLOCSo.crl (hash: CiHU0z4w3209SqCsVo2ja/g+1eL/N98X0lOxs4TG/ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:ef:1e:ad:c9:62:fe:ef:3b:e1:f2:17:fe:40:bb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Validity
Not Before: Oct 4 22:00:51 2026 GMT
Not After : Oct 5 22:00:51 2026 GMT
Subject: CN=04ad7d45064823d3646179d86c72b95ce864c8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f1:d0:c6:c8:84:f4:a4:90:ea:b2:4d:5a:f4:
98:38:eb:61:82:9a:5c:94:8b:04:2b:81:91:eb:ff:
c5:d9:f3:2e:cb:2f:47:57:56:b9:47:52:50:b4:18:
b7:a4:97:3a:18:e4:88:18:22:90:e5:65:c4:a2:58:
ee:db:1b:2f:06:9d:95:e1:e8:b4:af:f4:76:34:2d:
86:6e:1d:40:dc:a8:f2:fc:d9:4e:88:d0:e8:e7:ac:
62:d4:d9:a9:78:35:f9:84:1c:21:67:0a:d6:3c:33:
66:f1:a4:24:19:dd:2d:f9:97:8b:f8:40:af:fe:53:
a1:9a:72:c8:87:7f:4b:25:ff:3b:14:6d:5d:1d:b5:
2d:97:51:d9:b2:21:63:ab:bd:d8:61:c5:c1:42:9d:
60:8a:cc:45:44:e5:a0:dc:1b:14:fc:fb:08:9c:20:
2f:3a:3d:b0:03:c2:50:9a:b8:b5:19:78:08:05:6b:
d2:24:0c:7a:0d:c7:3d:cc:42:76:02:5c:4b:db:c2:
8d:a4:c6:92:87:e7:d4:cd:57:e5:c8:68:95:32:2e:
15:3b:09:fd:a5:9b:ad:d3:59:da:a8:e0:a7:a6:73:
f7:42:3a:c1:50:99:63:39:38:29:8a:1f:7e:65:ca:
ba:a1:a4:b5:22:7f:c9:d7:88:b8:ee:ef:e8:f4:8d:
c1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AD:7D:45:06:48:23:D3:64:61:79:D8:6C:72:B9:5C:E8:64:C8:C3
X509v3 Authority Key Identifier:
keyid:B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:82:5e:58:0c:f3:ed:15:01:7e:f8:38:7c:6f:f9:ef:a8:25:
5c:a1:f9:70:a2:dd:f2:60:e4:44:b3:a7:f3:50:a4:0b:b1:b4:
73:94:c4:60:23:f4:d8:b7:9e:31:3c:bb:e3:91:e2:bb:ad:01:
29:76:82:42:6d:71:12:1f:d5:cf:ec:b3:af:53:aa:99:c8:86:
c0:2d:32:bb:c4:43:8c:2f:da:88:23:d1:8d:cc:13:15:dd:f9:
7b:4f:ff:fd:f9:af:9f:bb:50:b1:36:cf:ed:9a:09:17:da:be:
bd:98:77:9b:6e:b7:2e:66:32:94:44:08:48:a6:9f:b0:f6:10:
8d:74:32:3c:9a:a1:e4:b0:a6:14:9f:9a:8d:31:5a:7a:0a:db:
28:2f:b4:16:6d:d1:94:72:0a:76:8a:38:e9:d6:a3:7b:fb:e5:
bf:db:71:90:88:19:8e:f9:74:c5:8f:33:59:af:80:b4:bf:ff:
76:1f:02:19:81:f4:e0:ee:b3:00:39:d0:48:a1:3a:95:83:c2:
e7:18:76:58:75:a6:e7:11:2d:d9:7f:66:1c:d3:31:06:9e:8d:
65:ca:b8:0b:15:11:fe:d4:78:07:d0:16:b0:71:e7:12:41:48:
d8:93:6e:71:ca:84:45:ee:37:0b:f7:37:7f:b1:86:39:11:18:
25:7d:9e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 02:00:45 2026 by rpki-client