Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
File: gU7b0ZY0y7kaDS2v11nUyafne3o.mft (raw, json)
Hash identifier: 9oIGuVlCtoMSnHI/WObODdbyhm7ayLsmX9sawOhyL+M=
Subject key identifier: 3A:5A:BB:2B:B7:38:58:A8:6B:8A:B1:99:90:B8:76:F2:C0:CC:75:89
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Certificate issuer: /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial: 01A0C66A7679DCE1B8D0CF0FB3BBC13861F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 00:01:00 +0000
Manifest this update: Tue 22 Sep 2026 00:01:00 +0000
Manifest next update: Wed 23 Sep 2026 00:01:00 +0000
Files and hashes: 1: 2mdLM4QMSFolc5LIsVCE-5xpuxw.roa (hash: Pb6j/jV8p9sMo1nrwtTOTYAV2/aTJmLOHn6ZswOsyqw=)
2: dTiJsEq_JJ5524hOgqQnN8Ddhhg.roa (hash: C8qRzW17uM9hsxbqGg5gMXnbyDi7MEbAVWHt31dT0Ag=)
3: gU7b0ZY0y7kaDS2v11nUyafne3o.crl (hash: djzwaE/rzkCGrIajKKatQT1no1IhKiJz844ESy7ueUw=)
4: kPXbHwmFeaUgl0gADFGcVtXfM54.roa (hash: PFLTi3V9mE8UoiZOrhozT0x6k7lKbzmX0yMq70JlctI=)
5: zJqeRCb5j4Dd57Zj7b1drSwEVOY.roa (hash: kMSmGuO+kRwRxKV3HZvVShc5KQnbIWPqxWeSNvdxgoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:76:79:dc:e1:b8:d0:cf:0f:b3:bb:c1:38:61:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Validity
Not Before: Sep 22 00:01:00 2026 GMT
Not After : Sep 23 00:01:00 2026 GMT
Subject: CN=3a5abb2bb73858a86b8ab19990b876f2c0cc7589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:b9:82:12:da:c9:a2:73:b1:49:9d:25:dc:
81:4f:b0:c2:b0:e9:dd:5b:39:44:0c:df:3b:4d:3c:
b2:73:4b:6f:21:d8:79:b3:47:85:e8:84:1c:b1:d5:
3e:0c:03:c7:23:eb:5f:99:3c:b1:b7:1f:2e:50:98:
c0:ba:82:c7:03:6d:a1:37:94:19:e5:04:cc:a0:80:
4a:cc:bc:7d:d0:10:52:87:93:1e:d3:45:b9:17:67:
f9:3d:7a:b4:77:9d:3b:93:b0:b8:ae:b2:17:62:30:
c6:0c:4e:3a:64:8b:63:35:09:63:40:3a:02:e6:1a:
0d:a4:d4:b1:cb:1e:67:37:a2:17:a3:e0:56:b2:65:
40:b2:39:71:57:14:b5:26:69:11:06:4b:ae:4e:6f:
55:1d:40:a5:94:21:0d:20:9d:df:b4:84:72:c0:bc:
4e:6c:96:3e:db:8b:42:5e:89:1a:06:8b:b4:ff:60:
81:71:6f:87:e3:30:06:4d:dc:9c:d7:3f:30:8c:47:
67:e1:2d:97:40:ca:3f:21:1c:0f:43:18:6a:4a:0f:
84:77:52:44:31:2a:56:17:47:77:80:a6:cd:3f:43:
1f:2d:d4:40:de:3e:44:7e:95:5c:79:19:10:6a:1f:
9d:63:eb:61:8a:5c:ce:41:fc:73:fe:29:af:5b:23:
32:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5A:BB:2B:B7:38:58:A8:6B:8A:B1:99:90:B8:76:F2:C0:CC:75:89
X509v3 Authority Key Identifier:
keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:12:df:d2:18:04:b7:c3:01:27:d8:a4:c8:95:5d:81:c3:e4:
30:8f:8d:82:da:34:c6:d9:a1:a7:82:01:af:12:1d:1c:98:d6:
92:d6:ed:9c:81:34:20:55:24:8f:b1:64:f3:dd:66:83:12:a3:
e1:53:64:1f:b5:f1:05:19:bd:cc:13:d2:86:87:a0:ed:51:7f:
64:5c:4f:77:b2:48:5b:c3:83:43:52:64:59:ba:09:ed:50:93:
8a:cb:fe:e3:99:54:ee:5d:70:82:81:03:99:a0:5e:d4:e5:b1:
21:0d:fb:5e:0e:ab:57:9d:d4:7e:b7:57:17:ea:0c:c9:f8:a2:
60:b8:ae:3f:aa:a1:14:08:07:97:5a:09:1d:69:5e:db:e9:66:
5d:ac:c2:e6:33:e0:85:78:0f:eb:3a:f8:d0:39:57:ec:6f:8c:
fb:6c:d8:e0:07:2b:77:94:bc:34:15:d4:04:3e:fe:50:b1:22:
23:bb:2a:05:39:f4:89:4c:5a:ac:c4:11:5a:fe:70:53:6a:40:
35:4e:c5:b2:3f:d5:10:c6:d1:09:88:98:1f:0e:58:4f:3a:7a:
44:42:42:4c:36:9f:a4:88:8e:f6:d1:1a:4d:92:7e:11:15:fe:
42:67:34:e9:01:39:89:c1:a5:3d:2e:86:6b:0b:5d:14:68:39:
ed:d9:8a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:56:55 2026 by rpki-client