Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
File: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft (raw, json)
Hash identifier: SJERqmO6BO8fql1igraVDkrr0bsfIMV49uvTSgT4c/U=
Subject key identifier: C2:94:99:0A:9B:C9:2E:1C:F5:FF:7B:6F:FB:21:31:E1:0C:ED:AC:56
Authority key identifier: D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
Certificate issuer: /CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Certificate serial: 019CAAFD227E2A62A7EB3376AC36ED64A961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
Manifest number: 117D
Signing time: Sun 01 Mar 2026 20:00:41 +0000
Manifest this update: Sun 01 Mar 2026 20:00:41 +0000
Manifest next update: Mon 02 Mar 2026 20:00:41 +0000
Files and hashes: 1: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl (hash: B/ziGY4v8KtQbDXVhHzqgQK/mlhmV/MkiSbvS5c1Gzw=)
2: nVcrQjhWQvZv3MpiEu7OA3dqEsU.roa (hash: q6SGNZPGxWCvS2kjA8Hhq7jz4Krm0km/a67HNcgbwrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:22:7e:2a:62:a7:eb:33:76:ac:36:ed:64:a9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Validity
Not Before: Mar 1 20:00:41 2026 GMT
Not After : Mar 2 20:00:41 2026 GMT
Subject: CN=c294990a9bc92e1cf5ff7b6ffb2131e10cedac56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:ef:5d:f0:23:4f:fd:d4:31:96:5f:37:4e:
8c:da:39:58:cb:3e:8d:86:57:88:0f:33:2b:d4:ef:
93:93:9f:21:1a:b9:2b:9f:91:4b:8b:24:a2:e1:36:
0a:f3:f4:64:8d:e0:9a:9c:77:28:e9:a9:33:8f:59:
14:44:16:fc:62:fa:20:4a:42:2a:54:ce:75:e0:cd:
b9:9a:9d:8c:60:ae:c8:f2:2b:e6:b6:66:9b:e0:92:
03:07:e4:60:e4:2d:78:5b:0d:2d:2a:e4:63:13:ad:
51:75:da:51:1e:ea:47:52:f8:59:a6:c3:4b:17:d0:
f5:ef:c3:8b:89:a5:b1:ea:26:10:fa:13:63:4e:c6:
6a:9e:67:1e:be:9b:44:28:04:be:4f:55:cd:07:ba:
e3:9c:83:99:19:dd:d2:e0:42:3d:80:0f:a0:50:59:
09:ae:90:fc:ba:88:ff:21:88:b4:59:18:c7:ff:5d:
c1:20:03:e5:9c:ab:75:e3:ec:ee:5c:0b:40:f9:07:
50:d0:93:80:3c:1a:cf:3d:df:10:65:9e:cf:7c:b2:
6b:5d:c7:22:e3:ee:57:6c:ff:90:4a:09:af:9a:fb:
7b:1f:e5:d2:05:36:88:e9:e2:1a:8d:37:a8:21:49:
7e:06:c4:4d:6b:0e:6b:e3:81:57:f7:29:f3:a0:39:
fe:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:94:99:0A:9B:C9:2E:1C:F5:FF:7B:6F:FB:21:31:E1:0C:ED:AC:56
X509v3 Authority Key Identifier:
keyid:D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8a:64:cd:82:33:71:f3:0c:5a:c8:11:10:7c:bf:8f:d3:39:
63:74:62:c0:06:e3:78:f6:5f:14:d1:ca:7e:13:2f:a3:ac:d3:
eb:15:fe:38:ad:3c:5a:af:10:bb:16:b3:c1:5f:6b:c3:ea:97:
9b:da:0e:c9:ac:08:b9:d9:c3:01:2b:60:5c:1c:64:f0:4a:fd:
90:bd:55:84:33:2a:c1:29:56:fd:cd:13:b2:50:43:e8:3c:fb:
42:e0:48:2d:c9:79:1a:7f:18:e6:25:ef:c4:84:e1:2b:dd:fe:
f0:6f:1d:64:b3:6d:c6:0c:76:26:89:fb:01:d4:2e:7e:23:35:
9c:ba:b1:c0:00:86:ba:ad:aa:ae:d1:be:01:e0:3c:92:47:b1:
cf:99:57:96:0b:69:4b:b7:34:b6:6f:04:a0:7d:45:c0:b7:eb:
0e:87:f5:68:ec:f6:74:76:cf:e8:01:31:c9:a3:7f:fd:3b:71:
c5:78:d6:24:73:03:82:bd:56:49:10:6d:6e:ed:fa:42:38:5a:
ef:16:15:07:4b:22:31:87:56:1b:1e:9d:a4:46:0a:94:5d:32:
27:a6:2e:fc:31:d1:f7:53:0b:e8:fa:ce:89:a5:cd:a5:02:82:
e2:a1:81:f9:0c:61:5d:10:46:fc:84:d5:04:e6:04:37:27:17:
92:e7:56:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:43 2026 by rpki-client