Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
File: r-xPShbMUb1RYhARU5zrV0rBXQI.mft (raw, json)
Hash identifier: TSrMWirwh7F1POIOOm/JlzHDiJgWBZymrz9NQP5vdIM=
Subject key identifier: 01:1D:DF:84:33:13:99:F7:E8:73:6E:1A:E1:D7:D0:0F:10:BD:EB:2D
Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Certificate serial: 01A0D80468ADD5D11585EE6911843517A4F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
Manifest number: 1A76
Signing time: Fri 25 Sep 2026 10:02:42 +0000
Manifest this update: Fri 25 Sep 2026 10:02:42 +0000
Manifest next update: Sat 26 Sep 2026 10:02:42 +0000
Files and hashes: 1: 1-kk5YtawRkJQwdDT4MsBuFBc3Yo.roa (hash: Aamvd7Z6s9hiJAa6DbrukXmWAwrVI2PPj/AOKYI7G4U=)
2: PoqWbVHh-FUr2dkHNr-gmxi2c-8.roa (hash: YLgUsuGSocGrObs4G25+Ghw9LtEJ63hht/5KGdZnHW0=)
3: pjM3LX3IWBwhVZCLWvigLJvSQJQ.roa (hash: 3UYX3NqDLCGEU8dgjIHi5102NNO+66HkfR/cZxzpA3A=)
4: r-xPShbMUb1RYhARU5zrV0rBXQI.crl (hash: karoWBG2aN+i6XGtqWwalJf8ortLSxgYogpdOEtR69s=)
5: t5ZpdQdakz93WmXWJ_al0M0qYog.roa (hash: ZYC1omK7NgO2nQPCpRlt52kAchXz0Fe3jlMw43xrEYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:68:ad:d5:d1:15:85:ee:69:11:84:35:17:a4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Validity
Not Before: Sep 25 10:02:42 2026 GMT
Not After : Sep 26 10:02:42 2026 GMT
Subject: CN=011ddf84331399f7e8736e1ae1d7d00f10bdeb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:82:85:29:de:81:7e:b8:0f:bc:be:3a:33:
8d:de:7c:70:16:16:f3:8a:2f:3b:27:e5:ca:8d:3e:
84:3b:49:0b:20:c7:8a:7d:8f:93:a7:3f:16:44:7a:
f8:74:38:5f:35:41:95:76:24:32:95:63:39:b0:79:
34:8d:42:e1:f6:23:23:06:a4:89:a3:a5:2d:4f:cb:
5d:e3:01:19:54:12:9d:67:e6:3d:73:11:0f:53:2e:
da:59:a5:af:24:de:85:26:e5:54:44:27:ab:8c:39:
7d:ba:9b:e6:21:8c:d5:d5:c0:c7:f8:7c:15:84:26:
04:2f:0a:b8:77:73:0f:a7:b8:bb:3a:2a:68:ea:8f:
5c:15:63:12:6f:64:53:15:d9:41:3b:18:90:11:2f:
7f:76:9c:6a:6d:35:7b:f4:cd:15:6b:12:ad:08:a3:
fe:7e:27:7c:4e:f4:27:f6:df:f8:f6:e8:07:cb:e2:
79:d4:87:3d:54:4f:11:ce:f1:6f:ea:ef:08:00:6c:
5c:4f:44:64:7c:73:7a:13:90:68:98:78:50:ef:92:
76:81:16:66:15:cb:28:a0:b2:81:94:0f:ac:40:9f:
24:a3:ef:27:1d:1e:10:13:cb:c9:47:26:de:fe:48:
e0:64:19:38:93:4d:9c:ee:3f:92:e1:8a:a9:f1:fa:
21:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1D:DF:84:33:13:99:F7:E8:73:6E:1A:E1:D7:D0:0F:10:BD:EB:2D
X509v3 Authority Key Identifier:
keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3b:79:b1:f5:6f:7a:73:5f:ae:77:07:e1:06:ae:81:d2:7b:
88:2d:2d:55:66:db:c5:32:99:e2:c6:13:2e:65:cd:64:64:f7:
9d:2f:b5:0d:99:2f:3c:a1:fa:a5:c0:5c:60:c8:fa:be:50:61:
70:37:db:94:d6:1d:6b:29:7e:5b:31:c5:94:dd:e9:18:f4:7e:
15:db:08:e9:99:3a:86:d4:c2:85:12:be:85:69:7f:80:13:3d:
0a:09:7c:73:bb:fb:36:b9:5d:b4:26:c6:0f:64:c5:fe:56:77:
38:83:6d:6e:62:01:05:e4:69:5d:26:12:33:63:7d:68:e0:b1:
db:a0:4e:35:80:dc:59:dd:fc:aa:b6:cb:72:58:5c:53:9c:f2:
9d:b9:5d:c5:5a:17:68:d4:fc:06:73:17:a9:84:30:0b:6f:5a:
6e:38:90:7e:69:72:76:1e:42:6b:10:d0:24:f1:e3:6b:4e:00:
62:24:d7:1a:37:ce:b9:61:63:80:f9:8a:1c:a1:32:c3:88:8e:
e6:f4:a7:14:0e:5b:bb:84:90:8f:e9:63:0a:62:29:a2:9d:d2:
a0:ff:ac:3a:5c:a2:a8:1c:15:63:18:e9:f5:fb:0a:96:a2:5d:
6c:7e:87:76:57:32:3c:97:c9:27:53:88:b1:1b:21:cb:79:94:
32:f1:47:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:16:51 2026 by rpki-client