Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
File: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft (raw, json)
Hash identifier: J7rxUvzgJqVbjU4mbnH6dzZaWujqswNZvXS8AL95djs=
Subject key identifier: 1D:ED:0C:D2:F5:5C:F2:D0:D0:EB:A4:CC:25:60:64:FD:E6:35:8D:7D
Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
Certificate issuer: /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Certificate serial: 01A0D315033276FFE1DB30F6C464D5D2EDAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 11:02:44 +0000
Manifest this update: Thu 24 Sep 2026 11:02:44 +0000
Manifest next update: Fri 25 Sep 2026 11:02:44 +0000
Files and hashes: 1: F13QQirUcyQJSbRfCl6w_cI9WWQ.roa (hash: Qmtb36fS7mGPq7TyueOpeM3xtlJooopxzuWWdKo+FIo=)
2: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl (hash: PJpwKcUiHb+YXERTscDuivK3PfSFTOV/C5e6A/aW8OY=)
3: yXL2c-lh8z3Pu6QXVoEmuyvEfX4.roa (hash: yk0yZqIR3aCNm4M9eEBAKHg+9JBzxKPA8wbCVYP14nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:03:32:76:ff:e1:db:30:f6:c4:64:d5:d2:ed:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Validity
Not Before: Sep 24 11:02:44 2026 GMT
Not After : Sep 25 11:02:44 2026 GMT
Subject: CN=1ded0cd2f55cf2d0d0eba4cc256064fde6358d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:cc:66:fd:c1:f5:13:b5:32:1d:55:dd:4a:
3f:5a:99:fd:a2:0d:a3:3a:77:b6:d2:a4:3c:49:3d:
5c:5d:59:6c:05:0f:a7:cc:2e:df:c3:0c:b8:2f:d7:
c7:86:a1:3e:cd:29:fc:33:6e:59:42:44:19:60:ed:
08:61:78:cd:b3:38:35:25:db:82:0a:aa:bd:d8:9f:
61:54:65:39:65:ce:46:33:49:7f:fa:30:29:44:f4:
6d:23:f1:c2:2f:7f:79:9a:5b:73:90:78:97:5e:da:
a5:dd:39:3d:8b:d6:a1:3f:be:41:4f:c6:4d:35:f2:
b5:6a:2d:77:3b:4e:53:0b:b3:4d:7f:e9:a2:7a:18:
da:7d:85:ab:34:5b:ae:b7:4d:d0:bb:40:48:b9:84:
1d:4e:48:ff:63:e0:88:87:d4:16:8a:14:45:81:5b:
b0:fe:90:eb:15:75:f4:c3:5c:80:99:20:32:36:2f:
14:f9:0b:f1:93:45:4a:c4:05:69:2c:9c:29:09:d3:
f3:b2:53:a9:c8:c6:ad:d3:b8:ce:ea:45:b3:97:9c:
d7:44:b4:b9:62:cb:33:76:3e:a1:77:18:d1:0a:e8:
79:9b:9f:3e:be:77:c8:58:8f:91:de:84:dc:f4:05:
b4:80:27:bd:0d:48:73:86:7a:00:20:a6:7a:21:3c:
f5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:ED:0C:D2:F5:5C:F2:D0:D0:EB:A4:CC:25:60:64:FD:E6:35:8D:7D
X509v3 Authority Key Identifier:
keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:30:7a:f1:c9:ea:42:4d:f9:95:55:f8:ff:05:af:02:90:6e:
83:21:90:55:c3:b3:4c:0c:4f:8e:f0:92:c7:b2:f0:9e:84:b5:
6e:09:fd:6b:43:c9:5c:3d:b7:e8:a4:02:50:59:cb:eb:f5:a5:
11:39:e5:df:c2:ac:4f:ed:a7:c4:ff:b5:d1:31:6f:8b:6b:a8:
b5:e4:12:d8:79:ea:d9:76:cb:7a:fd:d7:5e:86:e0:94:43:2b:
75:7b:9f:5b:fa:5b:e1:a6:13:de:e8:34:0e:c6:53:9c:7b:0e:
22:2d:74:82:69:a9:47:5e:4e:88:1e:a6:c1:ce:08:c9:39:e1:
36:a6:eb:13:89:ec:f3:e0:2c:dd:3a:69:6d:3c:de:4c:0e:c7:
ed:fc:b9:46:8c:d5:bf:46:b8:31:b2:b8:56:b0:31:38:e1:45:
fd:f3:48:79:57:2a:2f:76:48:32:d2:20:9e:c4:6b:42:3f:40:
44:66:36:cd:58:2e:bd:9b:fc:c1:dd:2b:52:a7:80:81:f1:c4:
1b:0b:4a:2c:6d:30:19:e5:10:3c:19:31:b1:37:04:fa:d4:aa:
f2:46:90:f3:a4:8e:4a:9e:58:c0:0e:ad:9e:77:5d:38:bc:31:
ff:00:9e:99:15:3b:34:8c:e1:dd:5e:01:64:ca:e9:2a:2e:c9:
03:88:2e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:55:47 2026 by rpki-client