Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier: O3SURhzjgIKesph7xxMhoZi+6yWuOpNvYKOBi4Vevn0=
Subject key identifier: 0A:B9:CC:15:27:92:17:B2:02:FF:6E:6A:E5:DA:37:1A:20:EA:0F:5E
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 019CAAFD98BFF538EAFEAC1C510100F3C093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number: 1850
Signing time: Sun 01 Mar 2026 20:01:12 +0000
Manifest this update: Sun 01 Mar 2026 20:01:12 +0000
Manifest next update: Mon 02 Mar 2026 20:01:12 +0000
Files and hashes: 1: O0zdzMf69p1geR9BzbHj8H6216Q.roa (hash: gB3ykbY7Zy2yOIDfRVoU3HqEBAgziuKZvTGr//ZJWIo=)
2: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: rCy3ulSutkhWtheyRdLB66Cpu9N3A+QfF3cqlvgq4f0=)
3: sYgcwFmXC21qQr4HaIkoLUDZGq4.roa (hash: o16QA0TxR5R2SVkQH4tgiDW7/Tyeif3rP5L2akN0sow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:98:bf:f5:38:ea:fe:ac:1c:51:01:00:f3:c0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Mar 1 20:01:12 2026 GMT
Not After : Mar 2 20:01:12 2026 GMT
Subject: CN=0ab9cc15279217b202ff6e6ae5da371a20ea0f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:97:d2:4e:70:20:25:a4:9e:7a:ac:f3:64:
91:b6:fa:d0:38:28:5e:7d:a0:78:6f:32:84:36:24:
3c:88:bb:f9:c9:91:da:a5:b2:10:8b:07:66:e7:d5:
f5:89:71:e2:92:79:38:dd:ea:ce:81:55:84:48:9e:
55:15:53:b0:22:39:1e:eb:0e:15:b5:f5:30:c8:24:
4b:dd:30:0b:98:c0:93:c9:c2:76:31:2a:10:bb:e6:
0e:99:54:f1:f2:8c:4f:10:56:a3:26:01:4a:c7:b2:
28:98:98:24:c6:68:a3:1f:62:f1:6c:84:d9:fd:04:
a8:0c:9e:03:43:71:a5:35:19:42:b3:e3:d8:f0:63:
d6:2d:5c:c7:9d:7c:a2:60:0b:e9:09:65:16:55:cf:
9a:66:4c:b8:3e:5e:87:ad:8d:62:32:1f:34:9c:af:
21:dd:86:5f:57:3c:4b:1d:f2:17:b4:80:b9:fd:8f:
48:25:30:8d:4a:9d:d9:10:30:84:e6:21:14:79:e9:
dc:e6:2c:83:69:10:a4:c0:e4:fa:4b:5d:29:0f:6c:
72:7d:4f:84:5d:d9:19:b7:ed:14:43:6a:71:1e:10:
eb:c8:4d:4c:2b:eb:01:91:32:6b:de:56:9c:e1:1f:
3f:63:40:c7:21:20:2f:b9:eb:ea:21:b7:1d:83:23:
2e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B9:CC:15:27:92:17:B2:02:FF:6E:6A:E5:DA:37:1A:20:EA:0F:5E
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:69:50:3b:f3:ca:22:3b:51:97:17:f7:64:26:4b:c3:bf:90:
07:58:08:5d:72:18:02:57:23:22:41:fc:8a:e0:d7:e3:56:c4:
90:bd:4c:7a:b5:a3:ee:26:ab:40:51:7a:82:65:91:e0:8b:93:
ad:29:26:66:ce:c8:db:9b:74:ee:14:9a:16:09:08:5b:66:eb:
d3:42:ee:bc:3b:de:13:89:bd:8d:0c:bf:40:59:91:7c:92:61:
bd:8e:2d:c7:15:a8:50:39:a6:47:35:23:50:2a:cd:98:36:d0:
55:33:26:5e:be:41:98:c9:05:b9:ef:68:60:7a:8f:e6:0f:54:
d7:8b:30:d8:e1:7b:36:80:af:7f:ef:18:5c:db:25:65:42:ea:
50:5b:9a:81:c4:30:7e:a3:e3:ae:de:00:c8:e7:4f:9c:cc:bd:
4b:47:f9:5f:0c:c0:d6:13:2d:1a:4c:ab:24:af:1c:87:02:ce:
2d:35:f6:e0:ba:4b:af:4a:80:6c:f1:96:f7:0b:4e:fc:05:77:
e8:fe:1b:4c:26:5f:8a:27:90:ae:fa:59:77:62:95:01:53:5f:
c4:ac:55:7b:6b:a2:f3:ae:0a:3b:a3:74:95:d4:e7:f1:92:62:
c0:94:1a:de:03:7b:57:8a:6f:c2:af:ea:ae:ae:5c:b8:8e:88:
f1:1d:5b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:50 2026 by rpki-client