Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
File: 12b8bxuOK2BPf7c8Kf1daJoOqB0.mft (raw, json)
Hash identifier: DZZrXgne5Mlr1wyEskArUGI++nJaiUbsK+/xK9ZlPbk=
Subject key identifier: 2A:08:B8:6D:EB:BE:49:05:F3:EC:A0:1A:FE:08:BE:B0:A6:5A:6E:16
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 01A0D011F3485378BFB15DE21C280B397336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
Manifest number: 1A7B
Signing time: Wed 23 Sep 2026 21:00:32 +0000
Manifest this update: Wed 23 Sep 2026 21:00:32 +0000
Manifest next update: Thu 24 Sep 2026 21:00:32 +0000
Files and hashes: 1: 12b8bxuOK2BPf7c8Kf1daJoOqB0.crl (hash: LK5aZfCvtLtgR2TgPEa4IWJhxNlhu5TrUhYnmVe6tYA=)
2: 1N-KhQzruMGSdoGiZ7CO4u7ckk8.roa (hash: FLfbiUatng7gGWOmNIMwpoiBvu3NsECWb2uDXnrhlvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:f3:48:53:78:bf:b1:5d:e2:1c:28:0b:39:73:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Sep 23 21:00:32 2026 GMT
Not After : Sep 24 21:00:32 2026 GMT
Subject: CN=2a08b86debbe4905f3eca01afe08beb0a65a6e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:fb:18:b3:05:7c:5a:66:4c:0e:e7:38:b5:87:
c6:01:5c:dc:db:a0:2e:67:19:90:a1:a5:1c:8b:77:
3c:16:67:e9:85:b6:27:e3:2a:d7:67:33:ce:9d:b1:
cf:70:b7:dd:e8:e7:74:99:eb:fc:ea:b5:7e:0e:a3:
0c:4c:98:ed:39:95:0b:50:e7:e5:7d:a6:08:37:00:
28:e0:05:a4:96:b4:a3:79:c7:45:b4:b0:d9:68:c9:
b0:d8:51:01:0d:32:f4:dd:ad:b1:99:3a:a1:97:2f:
aa:1a:7c:fe:3b:06:a6:a9:7f:2a:e3:52:65:e9:ba:
95:10:06:93:19:4c:26:18:d7:c2:62:0a:6c:0a:23:
9f:09:e8:5b:8b:02:58:5c:17:a4:6f:85:15:cd:b9:
37:3c:2e:7d:f4:e9:71:44:96:fc:27:3f:fe:fc:77:
b8:6e:b4:56:f2:af:85:5a:a3:32:ac:f8:a5:6c:22:
91:d9:e9:b3:65:ee:2a:f4:10:2f:32:92:13:9d:df:
58:7c:66:33:a2:7e:54:03:0a:7b:db:8f:89:2d:40:
cd:20:3a:d0:60:c4:15:fd:59:be:cc:ce:c3:9e:bc:
53:0c:32:df:a4:6a:16:37:d1:2b:2b:43:15:c5:d7:
80:0a:25:82:51:46:08:33:02:33:1d:02:17:8c:60:
b9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:08:B8:6D:EB:BE:49:05:F3:EC:A0:1A:FE:08:BE:B0:A6:5A:6E:16
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:88:bb:da:ea:43:8c:dc:ea:85:16:12:63:f1:2a:37:82:e4:
7f:c0:8f:e7:ab:78:5f:fa:2c:16:a1:50:35:9f:ba:9b:de:55:
38:cb:0c:0b:e2:65:53:b7:7c:ab:e0:b3:a1:1a:51:00:2f:8d:
29:c1:65:fb:2b:cd:49:d4:17:6c:07:8c:67:fd:66:7b:72:69:
f8:ca:65:d3:09:1b:54:79:eb:74:f2:bb:ef:56:46:b3:86:71:
52:a5:28:e3:ae:e7:b1:0b:bb:21:b7:ae:77:69:80:05:52:d2:
e5:b2:60:e2:17:c0:13:38:c9:9d:ef:c0:d1:43:dc:18:80:10:
a8:4a:4d:3b:10:3f:8a:63:93:00:81:54:93:9b:44:10:ae:f4:
60:cb:b4:30:0c:74:a1:ea:63:a2:89:72:8c:33:52:b1:29:01:
29:20:55:71:06:99:e1:71:c6:14:8d:c9:c5:d5:cb:a0:ef:35:
7e:27:ca:63:10:59:ba:c2:b5:18:8b:17:32:eb:bc:6c:c4:10:
be:1c:ed:3d:d2:3d:28:46:2b:4c:fe:4c:09:79:b4:a8:89:9a:
5c:51:d2:b1:aa:4d:ae:c9:51:10:42:9c:91:3e:3d:f4:d5:15:
9f:b8:89:94:d1:1c:ec:ae:78:18:ca:c4:dc:36:71:67:18:95:
c0:36:87:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:10:23 2026 by rpki-client