
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
File: i7AWzMBcV2V0az92QtBD6BEgNwU.mft (raw, json)
Hash identifier: 9s0dh1BmehuV5mOf9wBejyRY1DScgG4NGFsJtGVO+fg=
Subject key identifier: FC:3F:EF:3A:77:B0:EF:2F:1B:5F:55:F9:52:70:3D:D8:62:85:26:F7
Authority key identifier: 8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05
Certificate issuer: /CN=8bb016ccc05c5765746b3f7642d043e811203705
Certificate serial: 01A0D07F7B0E1C9A2A8D531FF3BCB73D85DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
Manifest number: 0556
Signing time: Wed 23 Sep 2026 23:00:10 +0000
Manifest this update: Wed 23 Sep 2026 23:00:10 +0000
Manifest next update: Thu 24 Sep 2026 23:00:10 +0000
Files and hashes: 1: Uo4wvgdXfyF3e2k0pZS0H1UzGLw.roa (hash: MZrsYUO7qgY/xpSvPUXy1NiJNVe3XMBHtcUlpHocjuI=)
2: i7AWzMBcV2V0az92QtBD6BEgNwU.crl (hash: L+ygCJx0tkpat2zr8fgCgmtWk347RmLaZ9bGg8ZXHCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:7b:0e:1c:9a:2a:8d:53:1f:f3:bc:b7:3d:85:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb016ccc05c5765746b3f7642d043e811203705
Validity
Not Before: Sep 23 23:00:10 2026 GMT
Not After : Sep 24 23:00:10 2026 GMT
Subject: CN=fc3fef3a77b0ef2f1b5f55f952703dd8628526f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:79:02:6d:44:a7:5d:6b:e1:ed:10:9d:42:ac:
04:51:87:71:70:be:46:38:8f:ae:8d:e9:9b:b2:78:
af:54:e9:9d:3b:7a:db:2a:9a:4f:62:2e:7a:6d:ad:
e2:0b:70:f3:8e:0e:f9:13:30:ff:ae:59:0c:35:23:
f4:2b:77:5d:63:30:9d:b6:d6:da:83:b6:47:e0:c8:
78:7a:47:4e:aa:65:3f:bf:6d:d7:8a:14:0c:2a:ba:
64:ac:78:ae:48:19:58:08:75:83:1e:bc:69:c3:07:
68:10:ca:03:e4:85:69:eb:6b:fb:78:33:1b:d1:f9:
7b:f5:bc:d9:9d:c5:f9:ed:4f:62:67:16:b6:47:53:
6d:6e:01:f6:97:de:3c:f1:41:d3:6d:5d:a7:60:3d:
b5:90:75:8c:45:96:8d:43:a6:3a:a2:3e:41:e5:3c:
5b:f9:a4:29:b1:ab:79:ca:b1:1c:bd:17:7d:c1:35:
3f:93:c3:c4:ec:87:c9:45:e7:13:69:5f:af:5a:3a:
df:11:4e:9b:8c:5f:d7:f4:68:ef:36:c5:ec:e1:72:
66:65:c9:c3:96:4b:6c:6b:4b:70:3b:80:00:fd:e6:
79:4f:41:22:24:de:57:ab:8c:d5:84:8e:d4:69:24:
26:ef:6c:51:3b:e2:56:eb:70:b0:10:58:8e:16:7b:
2a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3F:EF:3A:77:B0:EF:2F:1B:5F:55:F9:52:70:3D:D8:62:85:26:F7
X509v3 Authority Key Identifier:
keyid:8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:bd:ba:22:1f:74:5d:30:c5:b1:37:6f:e2:73:e4:ec:0e:d3:
d2:4e:72:f9:22:12:c3:3a:ef:67:a2:eb:e9:bc:b4:1e:17:7a:
93:d0:51:6d:e4:80:14:bb:07:4f:90:19:74:9f:61:96:d0:48:
d9:40:d1:12:17:eb:f5:2a:56:56:71:6b:12:e5:d9:5d:f5:32:
08:9c:d0:dd:f2:10:57:c5:0a:86:60:a3:a9:0c:c5:08:91:c1:
1c:26:4c:09:8f:e3:c9:d9:3e:2d:b0:fa:2f:d1:e8:d9:1a:94:
bc:a3:d3:dc:ce:8e:14:b9:54:74:77:37:78:90:47:f2:52:03:
22:a8:c6:14:76:f7:b6:e2:e5:5c:6c:46:89:ff:e7:7d:a6:24:
e0:57:f6:b5:0d:44:ac:22:43:a4:93:0a:44:df:dd:c6:db:09:
04:7a:3e:0b:70:fd:e8:10:62:c7:f9:da:c8:6b:84:fb:b6:40:
20:ee:f2:45:a7:d9:c4:11:68:33:f9:cb:e6:61:82:9b:9f:38:
7f:bb:4f:93:f9:ae:3c:a1:a3:da:83:6e:27:28:a5:54:49:e6:
38:bb:40:1a:85:6c:8a:85:ce:d2:b1:26:f5:c8:e3:fa:45:3e:
a4:f0:0c:da:ed:4b:f8:91:ec:b3:89:1b:d6:fb:90:ab:6e:e8:
a6:82:c7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:47:37 2026 by rpki-client