Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/868cf8-b74b-448a-af13-a28fd9feda76/1/t_-rO6tIKRwB6MDl71D4Hzs5sjk.mft
File: t_-rO6tIKRwB6MDl71D4Hzs5sjk.mft (raw, json)
Hash identifier: MIhQMeMgQj5yDirKJuyhSZq5IvXb7hlkbZKugQ2LsMo=
Subject key identifier: 2A:53:E7:FA:DC:87:6B:26:8E:EE:7F:21:51:A3:05:BB:B4:58:FF:98
Authority key identifier: B7:FF:AB:3B:AB:48:29:1C:01:E8:C0:E5:EF:50:F8:1F:3B:39:B2:39
Certificate issuer: /CN=b7ffab3bab48291c01e8c0e5ef50f81f3b39b239
Certificate serial: 01A0BCC1DAC8B140C8EF80B1EB548D3D5669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_-rO6tIKRwB6MDl71D4Hzs5sjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/868cf8-b74b-448a-af13-a28fd9feda76/1/t_-rO6tIKRwB6MDl71D4Hzs5sjk.mft
Manifest number: 7B
Signing time: Sun 20 Sep 2026 03:00:16 +0000
Manifest this update: Sun 20 Sep 2026 03:00:16 +0000
Manifest next update: Mon 21 Sep 2026 03:00:16 +0000
Files and hashes: 1: 40Yv3FJarP6L9fctYDOp2f3FVUM.asa (hash: jpERvaDO1bnIeXcly3KkynVSBYXXgKkGP8cwdmaFv9U=)
2: t_-rO6tIKRwB6MDl71D4Hzs5sjk.crl (hash: 2IAzPvybFwqbtu3QD9ug6nh+dTkD5UsRiH6dS+L64hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/868cf8-b74b-448a-af13-a28fd9feda76/1/t_-rO6tIKRwB6MDl71D4Hzs5sjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/868cf8-b74b-448a-af13-a28fd9feda76/1/t_-rO6tIKRwB6MDl71D4Hzs5sjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/t_-rO6tIKRwB6MDl71D4Hzs5sjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:c1:da:c8:b1:40:c8:ef:80:b1:eb:54:8d:3d:56:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ffab3bab48291c01e8c0e5ef50f81f3b39b239
Validity
Not Before: Sep 20 03:00:16 2026 GMT
Not After : Sep 21 03:00:16 2026 GMT
Subject: CN=2a53e7fadc876b268eee7f2151a305bbb458ff98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:e9:66:7d:eb:b8:d6:e9:f7:33:35:29:1c:
81:ca:95:e2:09:c6:f7:dd:6b:bb:dc:ba:b1:a3:a9:
17:39:1b:52:57:56:2a:36:07:e7:29:80:cc:d1:74:
02:37:19:f3:6e:12:14:2b:44:31:71:8d:11:6a:59:
f1:f5:ac:1c:aa:20:41:84:c3:9d:46:6b:c3:b9:58:
1e:7c:ea:58:40:42:82:69:e6:fb:d5:77:ea:9a:4d:
72:f3:45:af:7d:56:77:ef:23:84:59:8b:f9:7d:56:
62:fc:e9:05:9c:6c:f9:d0:82:b2:40:d3:c0:bd:76:
47:b2:cf:b2:bd:8a:69:9a:bd:4f:3f:73:3e:e6:df:
f5:bb:c8:9a:59:8b:2e:96:c0:97:34:05:62:cb:fd:
d5:42:02:25:e5:1c:f8:bb:e0:48:34:67:7b:59:d7:
7f:37:a8:c6:98:4c:c0:dc:e4:9b:38:49:f1:99:be:
e5:2c:c2:ed:36:8f:0a:c0:91:ed:59:9f:69:38:d9:
ec:7d:32:e7:df:3d:c8:a6:0b:c3:78:28:26:c0:2a:
2c:71:12:da:bc:3a:a1:1a:32:7d:bb:29:68:f9:b5:
51:4d:a1:85:53:ed:97:70:ae:ce:68:74:74:47:0a:
d0:99:ee:65:ed:51:28:ed:8e:80:02:13:48:cc:68:
db:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:53:E7:FA:DC:87:6B:26:8E:EE:7F:21:51:A3:05:BB:B4:58:FF:98
X509v3 Authority Key Identifier:
keyid:B7:FF:AB:3B:AB:48:29:1C:01:E8:C0:E5:EF:50:F8:1F:3B:39:B2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_-rO6tIKRwB6MDl71D4Hzs5sjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/868cf8-b74b-448a-af13-a28fd9feda76/1/t_-rO6tIKRwB6MDl71D4Hzs5sjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/868cf8-b74b-448a-af13-a28fd9feda76/1/t_-rO6tIKRwB6MDl71D4Hzs5sjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a2:80:2b:f9:b5:37:9b:cf:7b:60:2d:82:4b:c1:2c:a2:85:
d6:8b:b1:18:18:f8:4d:4a:80:0e:ef:b6:79:44:b2:ba:cc:a2:
5c:f0:5d:f5:9b:1b:82:d3:2d:e8:23:65:59:14:6d:26:31:0b:
33:73:00:69:a5:da:c5:54:90:45:97:d2:8d:85:3d:8e:41:e1:
9d:d6:73:ba:b5:1f:6b:e2:28:c5:60:66:6b:35:35:96:01:11:
91:7e:78:0c:51:90:1f:03:0f:a5:86:12:91:68:e7:b5:80:83:
b0:35:3f:f0:53:64:90:cc:1f:37:8e:d0:3b:47:7a:b6:3c:7c:
18:1d:83:17:c7:ea:d6:d4:c0:13:4a:d2:bd:f2:62:de:7c:9d:
21:0a:cc:b1:a8:68:57:9b:e6:0c:c2:37:05:f6:39:4d:f1:fd:
38:5c:ad:3d:41:93:9b:eb:ba:b1:6c:ae:bc:1b:4d:31:28:38:
7e:02:7f:d2:cb:85:06:52:53:3b:b7:db:6d:d4:1f:da:38:f7:
ad:0c:8f:52:62:82:6b:c0:e7:16:31:f3:b5:24:6e:9f:b6:d6:
7a:35:5c:29:65:aa:70:a4:d6:ee:65:02:5c:04:81:fa:71:02:
29:d5:a4:28:c6:73:60:c6:0a:f7:a8:d8:be:b8:90:10:c2:33:
5a:ef:9e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:48:42 2026 by rpki-client