Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
File: d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft (raw, json)
Hash identifier: IW41vYu0Lf/IlAX5Q4VdJCYdWNMi30WGmr09sj02IA0=
Subject key identifier: DE:39:92:8A:EE:A0:4C:EB:59:E4:00:D7:D7:DD:95:45:24:6B:41:A3
Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
Certificate issuer: /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Certificate serial: 01A11CACC5B74445A5332D3C848BB2E26747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
Manifest number: 1699
Signing time: Thu 08 Oct 2026 18:00:47 +0000
Manifest this update: Thu 08 Oct 2026 18:00:47 +0000
Manifest next update: Fri 09 Oct 2026 18:00:47 +0000
Files and hashes: 1: _wLbQqpNFVUZXfwkKPHS2EvNsME.roa (hash: b13XNsSSVdJxlN2jmJcwJ/ExmpGXyR6dAM9BzylibwA=)
2: d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl (hash: /5wckV5egfrQu9F6I6XTQF4MTNnx4fZCEjjXUgXqpTw=)
3: k3fmZjh5Nd4d9i-yTk1YzO9a-ow.roa (hash: mS6dHnW2WbLdF67XEsAw2GyVUdDMoZ8sBWqhN+eeuMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:ac:c5:b7:44:45:a5:33:2d:3c:84:8b:b2:e2:67:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Validity
Not Before: Oct 8 18:00:47 2026 GMT
Not After : Oct 9 18:00:47 2026 GMT
Subject: CN=de39928aeea04ceb59e400d7d7dd9545246b41a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:94:61:5c:8f:94:7c:03:4a:13:28:b1:b0:64:
b3:43:b6:2f:b5:5a:01:53:55:f0:97:99:87:9e:c5:
74:35:44:a5:b0:32:a3:c9:6b:06:6b:8e:e5:6d:bb:
e6:e6:b1:8c:08:55:2b:85:34:df:16:40:a9:a6:1d:
c2:95:ea:6a:c1:1c:f8:6f:b1:e0:ec:29:af:fe:62:
c0:db:e5:6e:48:07:b4:54:77:73:34:f8:d3:03:44:
2e:50:d5:b7:e8:81:11:b6:35:e2:f3:8b:20:46:64:
aa:68:b1:6d:43:66:62:f2:96:fa:8f:75:80:87:cc:
c8:bb:08:c3:29:0a:8d:bf:c2:e0:6a:c9:52:16:0b:
10:9f:00:ef:78:1c:91:20:29:b5:fb:95:ed:ec:92:
6a:b0:20:fc:89:e2:24:33:46:ee:68:6b:1a:7e:53:
ae:95:02:41:48:3c:18:96:af:22:68:72:39:57:83:
ab:60:81:69:93:d2:6f:42:51:2a:08:4b:8c:47:ed:
fd:15:4a:60:20:a1:c8:24:68:9c:69:d7:fb:68:89:
26:aa:89:37:2a:fd:38:02:6f:11:29:a8:22:44:92:
1a:de:58:a0:14:5b:9e:bc:6c:dc:7b:32:65:f7:a1:
22:20:c1:49:08:e1:af:0c:59:4e:3c:96:ce:cb:b9:
31:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:39:92:8A:EE:A0:4C:EB:59:E4:00:D7:D7:DD:95:45:24:6B:41:A3
X509v3 Authority Key Identifier:
keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1a:fa:74:0a:8b:7a:c3:74:4a:69:b2:9c:3e:68:78:57:c3:
8e:a9:6d:16:fb:32:30:4a:81:6b:49:f4:98:d8:0e:4b:87:7b:
10:6c:a2:8a:b0:09:b2:15:4a:8a:e2:cc:25:d4:81:60:b8:07:
cb:6f:c6:42:81:62:22:5a:89:a0:b4:61:88:13:d8:29:c5:d0:
e7:e6:16:bf:75:1a:be:6c:fb:a4:d1:df:56:09:55:d7:ee:49:
42:be:a6:ef:d0:fa:f2:b1:88:7f:af:0c:d3:99:36:cb:ee:1d:
83:a6:be:bf:b6:ee:12:b8:6c:24:9f:be:d5:36:fb:48:8e:a7:
8c:af:1e:c0:de:3a:74:42:f8:f4:dc:28:86:b1:44:fa:d0:0e:
60:cf:ac:14:2e:d3:7b:ef:04:16:aa:13:5a:8c:92:35:7c:fe:
94:31:fb:c0:53:1e:02:b8:0e:26:da:3e:9b:01:cd:ef:99:5a:
78:d6:cf:2b:6b:b1:32:2d:e4:98:28:21:79:7f:e3:13:c7:e7:
f3:36:10:b3:20:3d:9f:40:1e:14:7b:3f:13:12:78:63:d0:35:
a7:1b:0f:6a:1f:31:1a:c3:e9:8a:8b:ad:9d:fd:c3:f2:36:d1:
22:b9:4a:60:b3:1d:9b:cf:0c:f9:92:87:7a:55:ac:70:d8:20:
c9:64:74:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:54:10 2026 by rpki-client