Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/ec892b-4447-4325-9122-1a27a2305ffe/1/dU79gbTukUeAKK41pBT0apG9L-4.mft
File: dU79gbTukUeAKK41pBT0apG9L-4.mft (raw, json)
Hash identifier: s6lCo3biPxb41i7bVoItOxcq5qa9ktf59Yx4oW9FptY=
Subject key identifier: 78:89:C0:CD:40:02:F6:08:BC:B7:5F:A0:74:37:40:BA:2A:7A:5C:95
Authority key identifier: 75:4E:FD:81:B4:EE:91:47:80:28:AE:35:A4:14:F4:6A:91:BD:2F:EE
Certificate issuer: /CN=754efd81b4ee91478028ae35a414f46a91bd2fee
Certificate serial: 01A0C9D971D9B8797099B1278443D04E9395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dU79gbTukUeAKK41pBT0apG9L-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ec892b-4447-4325-9122-1a27a2305ffe/1/dU79gbTukUeAKK41pBT0apG9L-4.mft
Manifest number: 80
Signing time: Tue 22 Sep 2026 16:01:05 +0000
Manifest this update: Tue 22 Sep 2026 16:01:05 +0000
Manifest next update: Wed 23 Sep 2026 16:01:05 +0000
Files and hashes: 1: OyjkYccu_CLKgxrEV7g_bFW-ous.roa (hash: /S7gHpDK0DxMjnQ0e8Y2GVl3yAnFF9lshq6UILw6034=)
2: dU79gbTukUeAKK41pBT0apG9L-4.crl (hash: 2Rnxocxk+X2ldy0GdoGWv0SJxyw5tfWbdkKSEeyv/bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/ec892b-4447-4325-9122-1a27a2305ffe/1/dU79gbTukUeAKK41pBT0apG9L-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/ec892b-4447-4325-9122-1a27a2305ffe/1/dU79gbTukUeAKK41pBT0apG9L-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dU79gbTukUeAKK41pBT0apG9L-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:71:d9:b8:79:70:99:b1:27:84:43:d0:4e:93:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=754efd81b4ee91478028ae35a414f46a91bd2fee
Validity
Not Before: Sep 22 16:01:05 2026 GMT
Not After : Sep 23 16:01:05 2026 GMT
Subject: CN=7889c0cd4002f608bcb75fa0743740ba2a7a5c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f7:ab:5a:ec:f1:c2:d0:a7:bb:6d:8f:62:33:
13:8b:7f:e4:df:a3:bd:29:f9:16:05:ac:d5:79:8d:
1d:41:75:71:1b:38:ee:b3:92:03:dc:53:01:b9:da:
b4:aa:c7:21:52:b0:47:18:e7:8b:55:d5:4d:24:f0:
ae:79:1c:c0:a9:83:04:75:e5:e0:c0:37:2d:79:79:
e8:35:77:d4:c4:c7:84:61:98:39:60:b1:66:04:fb:
48:81:57:d6:90:0b:66:fe:cc:70:46:71:52:45:eb:
0c:f4:5f:0e:e2:89:73:65:e5:60:26:e3:36:f5:18:
06:43:f1:f3:5e:83:eb:90:ef:6e:14:73:cf:4a:e2:
bb:e3:6d:07:aa:cb:13:56:c0:ad:40:dc:07:35:28:
42:0c:79:49:9a:09:60:2a:21:1f:af:30:88:35:d5:
38:bb:e6:d6:a3:32:cb:e0:37:7d:08:8d:99:5e:96:
94:30:66:c6:5b:f8:c5:11:91:6d:d3:d1:5e:2f:00:
79:2d:15:5c:c3:ac:44:7c:c2:71:c1:c8:ae:2c:6a:
78:23:97:27:c8:df:65:9d:fe:e9:40:4c:56:6f:14:
11:15:6a:8c:5f:d5:3f:3e:3c:33:df:6f:eb:7d:10:
42:09:d6:cb:41:01:01:64:bf:01:54:c6:58:29:da:
ae:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:89:C0:CD:40:02:F6:08:BC:B7:5F:A0:74:37:40:BA:2A:7A:5C:95
X509v3 Authority Key Identifier:
keyid:75:4E:FD:81:B4:EE:91:47:80:28:AE:35:A4:14:F4:6A:91:BD:2F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dU79gbTukUeAKK41pBT0apG9L-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ec892b-4447-4325-9122-1a27a2305ffe/1/dU79gbTukUeAKK41pBT0apG9L-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ec892b-4447-4325-9122-1a27a2305ffe/1/dU79gbTukUeAKK41pBT0apG9L-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:fe:db:a3:60:cd:32:8e:63:de:15:5f:28:36:89:4b:85:28:
12:e6:1f:68:a9:ca:06:a4:94:c4:22:7f:5f:c9:b5:97:a4:6c:
72:50:1a:5e:2f:40:69:39:73:d2:45:6f:22:23:32:59:fd:39:
b6:a6:91:83:f0:e6:d4:88:f6:1a:6b:b5:5e:ce:65:4b:e5:2e:
73:a5:f3:3b:af:95:59:03:0e:b0:ac:ce:cf:5b:06:e6:20:b8:
2f:c8:d2:b6:4d:80:9c:7e:24:97:2f:2f:6a:ce:6d:97:5e:2a:
83:07:fe:38:ae:9d:93:30:c9:99:7b:fa:a9:49:13:63:c1:ea:
f5:ff:1f:34:4f:3b:8d:e3:1c:1d:db:7b:db:5a:14:ef:79:1a:
c9:f1:a9:c2:99:df:14:99:d0:bf:6e:c3:f8:df:76:dd:a6:a6:
e7:a4:a1:c7:ee:bc:8f:64:75:ec:76:7e:d5:3c:75:c1:6c:17:
03:82:a7:a4:78:ee:cb:47:79:d6:cc:20:4d:f2:55:91:46:e3:
8e:ad:84:98:2c:2e:68:07:d4:60:f6:8a:76:60:ef:63:90:f6:
8c:db:50:b6:d4:af:2f:55:37:44:f2:d2:33:41:38:dd:29:7a:
53:70:0f:41:f3:7a:16:bb:2b:ea:e5:de:73:3f:a0:1b:76:e0:
0a:13:cd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:24:09 2026 by rpki-client