Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
File: d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft (raw, json)
Hash identifier: T7+5xCB2gi5VPNMqomYO1iKcBzhAzQghHeisQremLBs=
Subject key identifier: 8F:36:3B:F7:F0:76:C3:6B:17:71:27:5D:07:85:BB:5D:65:C0:9C:D2
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial: 01A0DF1817AB29E7BAC45AA640C7E6139DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
Manifest number: 1250
Signing time: Sat 26 Sep 2026 19:01:32 +0000
Manifest this update: Sat 26 Sep 2026 19:01:32 +0000
Manifest next update: Sun 27 Sep 2026 19:01:32 +0000
Files and hashes: 1: 0gkjksOno670ocIFMbRjSDKIvKQ.roa (hash: 7fdQyOsucl3w/CcG9UB31TgK1ZGG4pW/88lMHFnh6NI=)
2: 91KPHlggwTaeQm7B9Z-AqzP9EBQ.roa (hash: IkXK2vJL4pQnTxIekZE8OSCq0z8UL2BTuoyyjhTkN4c=)
3: QcWwPEpe-P-scFp6iy4Zd8jPfjk.roa (hash: n7+TsjKCJzLkUr9shTyI7r/icRNSvOD74GCCpk5ZSUI=)
4: SOoKX4cNuYJIPao636suM6QbecU.roa (hash: AmP+tcOlMZhqBPlPO/PnVy1DrGZoadzcvOYUXfRfWD8=)
5: Tz7z7nnpOo-_7_49pU8TRQgx4D4.roa (hash: fX3u4dH9kXlBUEKXajJ7/RMZrYzYaBeRsNw5GTo8Vhs=)
6: d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl (hash: pAWQth3eDnUv727kZz7BC0tOR5UAiZcPghVyKLrKsd8=)
7: qBcLlywaD6m7lZXiWermZkxeWVc.roa (hash: auQTPfDUcRzWJ8RTz3z6nOVCI/Q9IjlAOX2YpbeFNMA=)
8: ve-jf9EP-jZkCjaun2Gx06psfDo.roa (hash: 5muddW+OaJvatwuoYErV6aaVeMSYh2Ga8iL+J5a6G3k=)
9: xdAaexAUdUDttJM21F7tUlAz2vs.roa (hash: VedRkQ44jOEPcPIUd0dHiyi/hpTJ8KF1xUzmzLpT6Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:18:17:ab:29:e7:ba:c4:5a:a6:40:c7:e6:13:9d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Validity
Not Before: Sep 26 19:01:32 2026 GMT
Not After : Sep 27 19:01:32 2026 GMT
Subject: CN=8f363bf7f076c36b1771275d0785bb5d65c09cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:55:2a:65:d8:fe:a7:0d:f4:19:66:25:28:19:
d8:c9:ac:3b:94:36:d6:74:a3:21:a4:46:bf:a7:9c:
f6:d5:f0:60:cb:cd:30:65:32:6b:4c:64:a3:74:17:
04:df:40:48:32:36:02:62:9a:d7:43:3c:8c:db:78:
39:09:a4:03:ec:76:f5:a5:85:4b:54:7f:11:5a:34:
d8:a3:6c:e2:11:1b:38:60:fc:28:30:6a:3b:70:7f:
e7:c2:df:4e:24:85:e0:ea:4b:48:7e:c4:cb:96:65:
ad:cf:45:44:ce:2f:eb:0f:84:e8:fd:47:c3:c3:69:
00:4c:fc:c0:ba:e1:05:04:1b:2e:92:56:b8:a9:86:
e9:fc:85:85:43:ea:e1:b5:61:e5:4a:4b:b6:5b:e5:
d6:6d:84:54:89:6a:59:d6:27:17:fd:6d:1d:81:fb:
16:b0:92:20:60:66:e3:e2:ff:27:cd:8e:29:3f:d6:
c2:4f:74:e3:43:94:f7:e2:95:93:1a:17:8b:4a:69:
a5:5c:54:3d:09:05:72:16:4a:06:80:7f:b8:f8:a7:
53:a0:1f:e1:40:23:c9:c4:7d:f5:17:57:f2:89:06:
ae:98:7a:c6:38:66:5d:54:34:eb:bd:21:b2:be:c7:
e3:a9:55:e7:c0:0d:61:51:90:07:c2:4c:db:45:29:
c3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:36:3B:F7:F0:76:C3:6B:17:71:27:5D:07:85:BB:5D:65:C0:9C:D2
X509v3 Authority Key Identifier:
keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:4e:bd:1e:6e:14:f4:2f:ed:95:81:71:08:04:da:a0:e0:e9:
3d:ec:f1:f0:b7:87:c0:03:d7:7e:04:82:c7:b4:43:0c:3c:06:
7d:87:6d:6b:7a:31:72:2f:bf:4d:a8:b5:1a:b3:ae:73:3f:50:
c9:3c:f6:7c:0d:46:85:b0:ca:51:33:6b:30:5f:19:e9:5f:96:
49:6d:67:5d:0d:dd:04:1c:da:0e:e0:20:51:f8:0b:89:24:eb:
86:ae:6c:22:98:78:c5:b0:f6:16:74:f4:1e:62:9d:35:35:a7:
b7:57:ed:cb:3e:0a:99:6a:63:09:3a:46:e0:3d:93:73:50:a1:
cd:f9:20:83:6e:b4:95:97:0b:80:22:d3:df:6b:22:4b:ae:e7:
72:71:b8:fa:99:f3:6d:1d:e4:e4:fe:4f:39:f9:21:40:af:80:
0d:e4:3a:46:30:ef:d1:92:66:3b:71:10:d9:eb:06:e7:de:ca:
98:77:59:fa:8d:54:5b:dd:63:c2:0b:f7:84:60:8a:b9:bd:8e:
dd:fb:f2:e0:20:8e:aa:95:1f:29:d3:e3:ee:4f:8a:da:12:07:
7a:9a:9e:0c:11:47:7c:8b:32:4e:bc:79:ef:0e:3e:d7:87:aa:
f3:0e:8d:3e:89:ae:a9:e3:46:24:aa:0d:36:69:33:4d:48:b9:
44:60:48:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:20:12 2026 by rpki-client