Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
File: 7d1hus9lTmZdkSp23o9jtQBMfkg.mft (raw, json)
Hash identifier: 62Y0CWyUkm8VO7Ey+wlILKcwyZZZyt9vUUpHH/o+kOU=
Subject key identifier: 44:4F:F8:A9:70:0F:AF:CF:2B:E8:5E:FB:89:A7:73:C0:AA:CB:48:79
Authority key identifier: ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
Certificate issuer: /CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Certificate serial: 01A0C40E3683D4FDBC05BFA4B8CF3E9C757C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 13:01:00 +0000
Manifest this update: Mon 21 Sep 2026 13:01:00 +0000
Manifest next update: Tue 22 Sep 2026 13:01:00 +0000
Files and hashes: 1: 7d1hus9lTmZdkSp23o9jtQBMfkg.crl (hash: 3jMaYAX6rVaB5hJSmx68yGh6Cr5YC69xYqUpEj+X08Y=)
2: lBKb95x_7BAv49LYfrO19Hosuas.roa (hash: u8R/9/gVEM8wPOouFpMqLvJteQ0bg4i6gAiI/GzejGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:36:83:d4:fd:bc:05:bf:a4:b8:cf:3e:9c:75:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Validity
Not Before: Sep 21 13:01:00 2026 GMT
Not After : Sep 22 13:01:00 2026 GMT
Subject: CN=444ff8a9700fafcf2be85efb89a773c0aacb4879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:90:43:cc:4f:f0:be:ff:77:a3:a7:75:bc:7b:
a9:15:91:df:97:4a:b6:1d:5b:5e:52:c5:eb:a5:1b:
f5:63:f3:60:be:d9:4e:30:1b:75:2a:d7:fa:8c:c2:
c8:12:47:d7:f4:4d:17:c7:80:02:80:86:7c:ca:04:
a1:3e:ad:9a:a7:3e:cc:5a:4f:b4:20:a3:ef:44:82:
55:40:bf:ab:ee:c7:4b:69:72:ca:09:73:c3:93:25:
24:f7:56:5d:61:ef:ab:46:7e:17:7b:ab:73:c3:61:
b1:97:97:2b:41:e5:bc:e0:cd:93:d6:4b:13:55:1b:
6e:0b:32:db:ff:a0:b9:da:a0:1b:25:a8:d2:c5:86:
67:f1:7d:df:05:e5:a6:5d:44:8d:02:9b:40:69:78:
22:92:8d:dc:cb:d7:70:7a:6c:e0:35:82:b6:4c:34:
d5:9d:f6:3f:4f:da:3d:de:f9:67:31:d8:c6:55:30:
92:1f:5d:c9:a1:c8:45:a8:e7:68:27:89:76:6a:75:
66:05:b3:31:04:c9:3c:de:c0:e2:ad:c0:67:34:3c:
5e:ea:22:5a:59:33:7f:04:50:b1:bf:ef:60:76:6f:
fc:bf:aa:9f:77:32:4e:1b:9b:5e:86:c6:d7:10:66:
e6:ea:66:1e:6e:f6:e5:96:f6:fa:7e:1a:48:a2:c1:
87:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4F:F8:A9:70:0F:AF:CF:2B:E8:5E:FB:89:A7:73:C0:AA:CB:48:79
X509v3 Authority Key Identifier:
keyid:ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f0:b4:08:e8:6a:70:44:41:84:9b:bd:30:93:a6:e7:88:7b:
86:c7:c5:73:0a:88:91:9a:1e:a5:5d:5e:1e:ed:73:0e:26:b6:
34:3b:81:98:0f:97:5a:74:9b:3b:a2:60:82:bc:a9:80:29:9f:
76:01:c1:1a:fa:bd:ba:a4:5f:f6:08:0f:97:3c:a0:dc:70:44:
08:43:ec:69:4d:ae:a5:73:52:b1:37:98:0a:38:64:d6:45:6c:
f3:9f:ae:40:47:46:fa:05:ee:22:d3:47:88:a9:24:eb:cc:bb:
c2:b2:cd:49:ec:b0:7b:2c:dd:f6:9c:ad:7e:ed:46:d6:10:40:
44:33:74:eb:6c:ba:02:46:ce:29:de:1b:88:61:a1:4f:9e:d3:
32:d3:5e:95:f1:32:b6:25:e5:72:ff:65:79:80:bd:90:7f:35:
05:48:64:b6:46:67:85:6d:60:8a:5a:9b:6e:8c:1b:74:f7:c4:
ca:74:65:e6:d6:00:6b:09:d4:dc:dc:d1:fc:06:e3:0d:d2:6c:
8a:ac:35:c2:b6:fe:b0:c6:84:a3:4b:82:37:c3:5b:22:e8:fb:
35:ff:a4:0d:d9:c3:e4:20:1a:1f:79:0f:12:d4:1a:d3:84:4e:
3f:59:aa:0b:65:5c:5d:35:11:c0:bf:42:6f:a3:6e:6d:81:50:
12:8f:14:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:08:55 2026 by rpki-client