Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
File: rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft (raw, json)
Hash identifier: jMhW9dFp0wX0ffSD+6zPwsDsZ5tArZaYycf4ljc4P48=
Subject key identifier: CF:70:3C:01:90:45:FA:7A:C9:94:EA:DA:92:18:28:78:66:E2:9E:29
Authority key identifier: AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
Certificate issuer: /CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Certificate serial: 01A0E92E52FE418FFC2FD9B1B6FDD2353D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
Manifest number: 1A78
Signing time: Mon 28 Sep 2026 18:02:02 +0000
Manifest this update: Mon 28 Sep 2026 18:02:02 +0000
Manifest next update: Tue 29 Sep 2026 18:02:02 +0000
Files and hashes: 1: csk4BDz5s79i6tCuRhaWetkbfYE.roa (hash: y6UPDjUC5Ue0t7W29lJsgRf1Q1DAQIYmF8ZHDpBKink=)
2: rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl (hash: AngbUySUSwSusEcFuophTU4yV+vSG5xDuZc+R9ptcy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 18:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2e:52:fe:41:8f:fc:2f:d9:b1:b6:fd:d2:35:3d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Validity
Not Before: Sep 28 18:02:02 2026 GMT
Not After : Sep 29 18:02:02 2026 GMT
Subject: CN=cf703c019045fa7ac994eada9218287866e29e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a3:84:ef:c0:75:97:6e:26:41:a1:87:77:f7:
91:a0:54:d4:20:c3:47:56:da:d5:7e:a0:6d:fa:2c:
84:00:41:b7:ba:ab:f3:bf:32:b1:da:5d:c1:e7:1a:
88:c6:d2:32:74:83:10:78:af:bc:60:98:e5:cf:ca:
f2:4d:fb:be:90:3b:5a:7b:e5:e5:16:02:8c:f3:5e:
c3:6a:ad:d2:8c:5c:c1:04:ea:e8:33:f7:97:6f:1b:
c7:53:ab:71:4f:ec:7d:e8:ec:9e:1b:5d:ed:e9:cf:
12:fc:94:1c:37:cc:58:32:4b:50:d4:34:8f:8a:ed:
7f:8d:eb:b9:57:56:bb:1a:ed:16:25:d6:b6:1f:8d:
6c:49:dd:f9:e3:2a:8d:a7:7e:d8:aa:30:44:9d:f4:
e6:b1:22:8d:1d:8e:a4:12:39:ad:ac:a7:67:ef:4e:
87:b7:42:3d:3b:e8:69:e1:c2:db:f7:24:72:7e:82:
cf:de:38:75:08:76:0c:33:a6:b4:39:fe:db:aa:99:
b3:11:d4:85:04:9b:d6:53:5c:0d:91:b8:ba:c9:11:
5e:d9:6d:f4:93:d3:b6:03:78:28:8a:73:02:9f:f4:
01:4a:c4:78:5b:9a:1f:75:56:95:7c:f4:6b:3b:94:
9c:94:12:b1:5c:ee:b8:10:db:0e:0e:d8:ef:35:15:
39:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:70:3C:01:90:45:FA:7A:C9:94:EA:DA:92:18:28:78:66:E2:9E:29
X509v3 Authority Key Identifier:
keyid:AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d1:df:0d:8d:f5:8d:ef:24:d8:b0:a5:a3:44:04:df:74:1e:
2c:c8:00:01:b7:4e:95:14:2e:31:78:e9:5a:84:56:8c:1e:45:
3c:fc:44:2d:3c:56:45:49:e0:72:83:25:87:f4:22:e6:dc:56:
b3:e5:c7:72:b8:5d:94:aa:0b:ac:3e:9f:ec:82:84:e3:0b:23:
7a:9b:11:06:7c:34:60:61:15:e1:c2:6d:34:fc:45:6f:fe:39:
a7:d6:f6:c5:07:e2:c7:ee:8d:8c:82:39:21:0d:e5:5b:d1:bc:
b0:7e:04:16:9d:50:74:76:a0:b3:9a:d6:d2:fc:bb:a0:2e:32:
b0:6b:33:fc:be:dd:09:43:0e:a7:41:df:07:fa:0f:52:25:79:
1d:ab:0f:04:eb:e9:3b:ba:55:59:f8:53:9f:c4:ba:a2:f8:49:
9c:20:ec:0b:81:02:0c:aa:7d:92:19:30:17:02:9d:ba:43:31:
8d:1f:a6:1a:09:cc:7b:68:66:4d:a1:89:6a:42:5f:08:b5:26:
c1:d9:94:49:4e:88:d5:ab:24:61:f2:0f:6f:08:f2:ab:46:b2:
3e:0e:7a:57:54:8b:9f:53:d1:05:ff:4e:39:e1:4a:a4:4a:13:
da:89:df:76:8f:48:19:32:0e:b4:a8:d9:a8:c3:54:31:5d:63:
c6:ff:15:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:21:06 2026 by rpki-client