Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
File: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json)
Hash identifier: IcjUkYEEquanR6N8Kc446lxAP1A9UjyJrNBBOniI+Rw=
Subject key identifier: 7D:F5:C0:F4:8B:89:FF:FC:90:1C:AF:73:3C:BB:5D:47:50:F3:0B:95
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial: 01A0C5C51B53ED68FB1FB0CA03A731863E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
Manifest number: 0D31
Signing time: Mon 21 Sep 2026 21:00:24 +0000
Manifest this update: Mon 21 Sep 2026 21:00:24 +0000
Manifest next update: Tue 22 Sep 2026 21:00:24 +0000
Files and hashes: 1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: PCzJijqFKiKHVD+M2ujUbMTCgG+THW1fMXwmqQ7ahNY=)
2: KVXgF5z3zvUbDWDR9vEfB08gTrE.roa (hash: UHAb4fioT9YjE1AokUnZfVbvlTm8HooTgsw5q7QUcZ0=)
3: p_71hNByXrDuNYKSNzWqmsK9r-A.roa (hash: KH7XFzdKacxa7PKL/12r22Uz9GNXLSLW65hXt/t41hQ=)
4: wO6fRWt8N7XMvIeyLTRMhJ0-t94.roa (hash: HaZn3L1Ow7LzOKxqi0hwoJYvNFRFIKrjZGo6K0g1OtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:1b:53:ed:68:fb:1f:b0:ca:03:a7:31:86:3e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Validity
Not Before: Sep 21 21:00:24 2026 GMT
Not After : Sep 22 21:00:24 2026 GMT
Subject: CN=7df5c0f48b89fffc901caf733cbb5d4750f30b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:98:c5:01:f5:24:54:6e:46:c8:23:78:d3:
8b:e3:19:7e:79:5f:c7:4b:55:67:75:fc:ee:5a:af:
5f:a8:04:ee:dd:a8:e9:60:1a:44:c4:10:c2:9a:7f:
a1:b9:64:95:94:bd:cb:12:0a:c1:6f:22:5d:97:f4:
9f:44:85:6c:04:46:50:75:80:dc:d3:64:e0:0f:f9:
9d:3d:2e:7c:41:86:ef:fd:bd:d6:aa:14:cf:ae:72:
75:1e:19:df:28:68:b2:a8:4d:a7:7f:ea:b4:35:a9:
d2:72:11:5e:e9:f6:94:bf:46:75:6c:30:64:0b:fa:
86:58:6d:da:88:e3:00:10:ef:e7:6d:c2:fb:0d:1e:
36:71:c8:66:49:ff:15:25:93:8c:12:0b:05:5c:72:
8f:ce:2c:89:ee:e6:a2:04:76:6a:d2:da:5e:94:41:
be:4c:07:3e:08:1b:57:90:73:11:9a:4e:30:19:83:
12:0e:8b:93:0c:75:c3:07:1e:2d:2f:51:dd:12:4f:
34:5e:6a:9a:3e:c7:4b:b6:54:51:2c:7c:28:67:53:
28:cb:20:69:cd:e2:3a:24:8e:70:8c:8c:b0:64:fc:
5f:35:46:ad:7c:b7:39:64:cf:8c:6e:7c:33:e6:49:
2b:52:90:c9:aa:49:57:6a:18:7d:0e:77:b7:0e:fb:
03:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F5:C0:F4:8B:89:FF:FC:90:1C:AF:73:3C:BB:5D:47:50:F3:0B:95
X509v3 Authority Key Identifier:
keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:93:5a:b1:b7:f0:5e:f0:5d:84:c8:b9:a6:95:3f:51:8d:88:
47:76:40:26:a2:f8:4f:e3:8b:3b:74:92:e5:70:0e:08:f2:f4:
4d:43:fc:59:e7:f6:49:41:a4:33:d7:4e:0f:69:e7:ad:68:24:
d5:32:a8:0b:01:bd:85:6a:db:9e:8f:16:60:08:5b:61:80:83:
25:df:95:7c:d3:4c:4e:6c:40:eb:2f:14:ac:a9:ae:3a:36:75:
30:4e:84:fb:5e:15:d9:9e:7d:a5:e5:34:ae:91:0a:01:f4:99:
8b:3c:88:0b:9a:6b:84:05:89:68:31:92:0e:50:58:ac:44:1f:
83:af:68:37:5f:db:f6:6c:95:dc:c0:82:9a:71:57:df:8e:7e:
1e:67:98:ae:8a:26:6e:83:ed:50:f0:60:2c:30:8f:6f:ff:f1:
26:3d:48:ff:32:d7:ce:4d:bb:c6:a2:00:07:8f:b7:a5:3f:1b:
99:08:e8:fd:20:76:ea:a9:9f:cc:eb:4b:b5:dc:37:00:d9:51:
dd:a2:bd:68:ad:bd:3e:6d:38:60:28:07:cd:d5:df:df:e4:3d:
6f:e9:d4:7e:56:69:96:a7:34:61:34:14:54:d2:79:b5:c4:28:
fa:c8:f2:4d:4f:0c:b0:de:37:50:68:13:54:8f:4d:b5:4d:f5:
c3:a6:7b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:20:47 2026 by rpki-client