Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
File: _X5IAbAS8bGZsv0RqqxS13VjRzk.mft (raw, json)
Hash identifier: 7b4gCqzUblwgFo2E8fS+ik06p6+8s5kPz7+CystbUEI=
Subject key identifier: 25:62:F4:ED:CF:86:73:B0:C7:11:F5:01:85:45:C4:7D:11:84:53:65
Authority key identifier: FD:7E:48:01:B0:12:F1:B1:99:B2:FD:11:AA:AC:52:D7:75:63:47:39
Certificate issuer: /CN=fd7e4801b012f1b199b2fd11aaac52d775634739
Certificate serial: 01A0D3EF700C9BB6FE0C739606193A60925B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X5IAbAS8bGZsv0RqqxS13VjRzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:01:19 +0000
Manifest this update: Thu 24 Sep 2026 15:01:19 +0000
Manifest next update: Fri 25 Sep 2026 15:01:19 +0000
Files and hashes: 1: YDVKQbfRYIpm7hR70cFm_r3Bozk.roa (hash: aF7PQA8hwmlUZMld6dK9hesrrO56Rkyyowsvq4iO504=)
2: _X5IAbAS8bGZsv0RqqxS13VjRzk.crl (hash: 31qDK85pfbwJJfERiid6QzTFpni2m9H8gs4Z/bFbdiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_X5IAbAS8bGZsv0RqqxS13VjRzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:70:0c:9b:b6:fe:0c:73:96:06:19:3a:60:92:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7e4801b012f1b199b2fd11aaac52d775634739
Validity
Not Before: Sep 24 15:01:19 2026 GMT
Not After : Sep 25 15:01:19 2026 GMT
Subject: CN=2562f4edcf8673b0c711f5018545c47d11845365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:f7:e0:65:73:65:81:18:a4:51:03:ea:60:
6d:96:2e:bb:9f:6f:35:57:0a:d9:97:1c:be:ba:56:
8a:f3:de:ed:43:3e:a2:a4:0c:5b:ef:4c:b7:e0:dc:
46:3b:65:37:a2:97:a9:8a:d6:58:cf:25:2c:4a:91:
5b:c2:a7:6d:9c:fa:90:53:aa:30:b4:d6:97:41:75:
a6:8d:61:db:13:40:17:65:89:19:75:5f:f8:36:e2:
1b:2f:13:9d:40:ef:5d:33:d4:3b:44:c6:d7:74:d8:
51:bf:ac:f5:68:dc:0e:f0:bd:a0:28:b1:27:79:96:
ba:d8:ed:8d:b8:0a:de:27:32:ef:e9:bc:a6:0a:72:
43:52:fa:88:74:c9:9d:52:4f:79:eb:dd:53:fc:b7:
d9:05:22:af:f1:93:1c:41:53:3e:83:81:90:6c:16:
97:19:9a:06:d1:f7:b2:b7:12:8b:a6:b3:19:7b:28:
40:10:23:db:d8:95:17:bb:2a:83:37:c5:fd:b6:7b:
34:d7:1f:ce:ce:a7:78:92:40:97:bd:cc:63:1d:1d:
95:7a:a9:fc:98:16:e0:ad:98:63:47:ae:dc:2b:63:
b0:ed:18:70:76:5f:0f:de:00:6d:c4:7e:fb:a4:c4:
c6:98:22:a0:37:68:01:ba:23:89:03:ef:a5:b1:10:
b5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:62:F4:ED:CF:86:73:B0:C7:11:F5:01:85:45:C4:7D:11:84:53:65
X509v3 Authority Key Identifier:
keyid:FD:7E:48:01:B0:12:F1:B1:99:B2:FD:11:AA:AC:52:D7:75:63:47:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X5IAbAS8bGZsv0RqqxS13VjRzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1c:a3:37:fb:bf:e9:7c:36:8d:ff:d2:55:81:f0:17:2e:8c:
ae:00:98:08:a3:38:3c:22:31:d9:78:6d:ee:55:10:d7:11:57:
46:2a:e7:79:e3:0b:a3:c7:de:ce:d8:e0:e5:dc:86:40:84:c8:
54:3f:96:ab:6a:f6:72:a2:19:92:e9:ea:95:e0:5f:0c:69:56:
6f:ee:11:6b:3b:2c:d6:89:4f:0a:6a:dd:ff:fb:c2:10:3f:56:
0f:39:f2:c0:52:af:0e:86:57:91:90:1b:43:45:6f:7e:97:a9:
a0:39:59:ef:3d:37:6e:51:7b:b2:7f:bd:2e:2b:b7:c4:e5:5a:
d8:05:28:ed:17:73:b0:14:ca:e1:fb:54:a3:27:94:b6:09:98:
30:75:37:58:cf:99:d1:db:fc:29:69:8a:1f:71:d1:81:87:e1:
b5:82:ee:79:38:92:5b:4f:f9:6d:34:30:5b:a2:fe:bf:99:9c:
5e:7a:2b:9e:15:ed:8b:fe:36:9e:21:de:14:66:18:0d:50:1c:
0b:72:8e:a6:40:dc:32:b6:ce:f1:42:57:01:34:59:2b:b6:38:
36:4d:e4:33:23:6d:5b:3d:99:00:a1:2e:89:01:11:85:c5:8a:
a0:99:ed:dc:95:44:71:30:09:79:e8:c4:32:80:16:7a:2d:09:
ba:6c:ad:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:40:52 2026 by rpki-client