Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
File: tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft (raw, json)
Hash identifier: Ib6HHRjN+bqP/vZCAol8QKryR1X+GgNVEN6uaf4D54U=
Subject key identifier: 97:ED:7D:CB:09:67:FB:FB:E1:05:4B:09:7B:35:BF:C4:18:46:8A:09
Authority key identifier: B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
Certificate issuer: /CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Certificate serial: 01A0C8584AC78D191B15C1C034095D175A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
Manifest number: 0754
Signing time: Tue 22 Sep 2026 09:00:24 +0000
Manifest this update: Tue 22 Sep 2026 09:00:24 +0000
Manifest next update: Wed 23 Sep 2026 09:00:24 +0000
Files and hashes: 1: EgBYTsP4WnLdOgI7v9fWewoBmRQ.roa (hash: SdXuNAo4cL+y4o9C6xVzKmsv8YTzVdsZLx73iiyVrKA=)
2: Ga7-1Qov9vY-UFa-abxTXMlth0Q.asa (hash: 7EOJyJMNQt+17435Z8by5UBYeIkbSkCBu+yaDqILeZM=)
3: tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl (hash: +okRM6YOHmfTb2Vf9thJrdfjX/jm6mVy1D8JYM+qNw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:4a:c7:8d:19:1b:15:c1:c0:34:09:5d:17:5a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Validity
Not Before: Sep 22 09:00:24 2026 GMT
Not After : Sep 23 09:00:24 2026 GMT
Subject: CN=97ed7dcb0967fbfbe1054b097b35bfc418468a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c2:bf:4b:8a:8c:14:25:0e:7d:a0:18:d8:ea:
d0:1e:d7:fc:ea:a4:1c:dd:a5:81:b5:20:10:67:04:
ca:ca:e4:e7:73:0d:77:27:77:7e:dc:99:39:a5:99:
75:96:16:78:04:d7:6e:dd:46:d3:2e:dd:f6:6c:84:
b2:2e:2e:5d:74:db:da:ec:b3:bc:00:c8:67:96:de:
ad:81:26:21:20:c0:28:be:95:5e:c4:5f:87:0f:20:
ca:9d:17:f0:e7:a1:b2:0f:ef:4e:5b:4a:32:52:5d:
58:f4:46:92:a2:bd:f7:b6:1c:89:e1:a5:40:ac:26:
67:7c:18:83:03:93:56:22:a3:66:bb:c4:2e:6e:f8:
ac:4c:ed:70:08:8d:e1:ce:3a:7b:e9:93:14:84:36:
90:c1:32:27:df:c4:76:66:05:49:97:51:70:c0:65:
85:97:8a:96:6e:44:a1:18:6f:94:3c:00:cb:5f:b6:
66:26:bd:30:b0:78:14:5b:cb:ce:c0:90:c1:04:53:
51:15:df:62:5d:ec:cd:7d:03:2b:6f:2c:60:1c:0a:
28:d3:f4:ca:5b:03:5c:b6:ed:56:f1:29:cd:bf:b8:
2e:79:ae:48:8e:2a:ea:a1:f0:7c:8c:7c:a7:87:70:
7f:13:5c:5e:30:a2:64:2e:1d:c1:ed:ea:a2:6e:e9:
a2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:ED:7D:CB:09:67:FB:FB:E1:05:4B:09:7B:35:BF:C4:18:46:8A:09
X509v3 Authority Key Identifier:
keyid:B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0f:0a:08:ea:50:7a:33:ee:69:0d:0a:59:a2:73:2d:18:ff:
66:43:8e:26:b4:05:62:55:30:a1:c8:1f:ae:02:22:95:0a:26:
43:e7:3d:ef:67:32:cd:34:b4:d7:94:81:dd:8b:9a:95:4e:3f:
1b:32:01:6a:3d:21:69:fc:17:d1:16:e5:50:53:92:e2:f4:e9:
26:d7:95:da:84:71:76:bf:a4:4d:22:87:f9:3e:9d:98:b2:87:
8e:f5:ab:86:7e:88:ff:77:bc:24:58:81:ff:05:4b:02:99:e9:
fe:c1:29:7f:5a:9f:08:cf:e5:1c:f6:8b:f2:90:fc:6c:a1:81:
d7:19:29:c0:ef:ff:3e:d3:18:bb:37:36:b2:a7:ba:35:60:80:
a9:22:18:a0:9f:0e:4a:ae:38:bd:e3:7f:2b:ed:28:32:20:b7:
a5:94:3a:87:5e:e1:9f:04:d7:aa:ac:d5:eb:55:90:6c:40:55:
86:81:e3:47:ea:bf:f5:c9:8d:42:cb:08:48:70:f7:56:73:07:
61:e3:f7:a3:39:f1:ff:93:f7:c6:32:13:28:62:63:d4:91:f6:
58:ef:23:e4:77:81:72:ea:cf:f1:5b:bd:48:f4:e5:ed:ab:dc:
b6:66:16:26:bf:5b:62:9f:2c:6f:14:37:92:ac:4b:41:5b:f9:
e9:6f:ed:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:35:08 2026 by rpki-client