Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
File: 7JxoXPZnHMZW-S52RVejg3jygnw.mft (raw, json)
Hash identifier: cmeIbuqB5XETuHtLN992Ykqo1/mng2BrGLw/XMP+tMA=
Subject key identifier: 75:0D:7F:D3:9E:C8:48:78:72:6C:3D:3F:5F:20:DF:07:EF:31:EF:00
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Certificate issuer: /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial: 01A0DD97747A23870950E623FE45898C24AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
Manifest number: 0BAA
Signing time: Sat 26 Sep 2026 12:01:25 +0000
Manifest this update: Sat 26 Sep 2026 12:01:25 +0000
Manifest next update: Sun 27 Sep 2026 12:01:25 +0000
Files and hashes: 1: 1-OYnNzXr6Vo5v0tdTY5uXPebeXE.roa (hash: HvTSCO8dnKWpIGNv0ZhtPHvjO7rUBO8uy6VJMUgGVj0=)
2: 5DTG2pQHtM0QiGmSH96_4M3Hn5k.roa (hash: ITY7NiqI6LopyqA5OlrdJTOTC/MthEeeabjTB3wyEhU=)
3: 6ZocPdivpIRD6QdnAMptwVOX21Q.roa (hash: korMx/J1IYvQ1qfo2zDPp/wTs3aeEsOKfh+niNHKI+8=)
4: 7JxoXPZnHMZW-S52RVejg3jygnw.crl (hash: gCDBomhQbDWhk12ogSha7Q+Lh8axjr8q97XYBB1R7xk=)
5: Rb9KBoBLJn6K8gQhZg2wL_hnX2Q.roa (hash: Pnn1XhHhvI1FVLr7IXQzdyTXVT364mukcsmYH/cxMhg=)
6: SPwnkc4KWHYyIdbwYFp8NZlDCiY.roa (hash: KC/lF7RUbJj45vkXam8H51gZNnQogYtQZS5HMvSRW30=)
7: _NcN0_srf3O704WXy9JSPPzoAPI.roa (hash: de1At12GY0xzd9iJZD6XKMewvGBkIyLz1ARkXv3a1oE=)
8: djl4yLaR492a1MyY0DtkNwyzb78.roa (hash: ej60VYUqOdqHjFm3piE4ykWKGCUfy0gAqtpywAR05qI=)
9: x8PuWJNPJBC35K_SG-mLe9gxJtA.roa (hash: i+jPp0P0KxStb0wvP/NjPbGbfQidMuZ2R8mV3ecH7IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:74:7a:23:87:09:50:e6:23:fe:45:89:8c:24:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
Validity
Not Before: Sep 26 12:01:25 2026 GMT
Not After : Sep 27 12:01:25 2026 GMT
Subject: CN=750d7fd39ec84878726c3d3f5f20df07ef31ef00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:97:d6:f3:1e:4f:e2:a6:4f:f6:18:40:08:f9:
c2:c3:b3:d5:6d:44:1c:35:71:0e:6c:63:77:2a:8d:
2e:96:12:67:44:cf:cc:62:bb:6f:5c:ee:04:3f:cb:
85:9e:e8:a2:01:cb:fb:80:d1:a7:fe:7e:bd:36:57:
2a:88:4c:86:61:1c:9e:d4:a6:c3:7b:ee:05:26:e0:
f6:15:56:56:4d:5c:3f:2e:a3:08:c1:b1:aa:c1:d9:
17:00:57:36:38:fa:3b:f4:b8:48:c9:73:5b:85:f2:
37:95:77:cd:1b:ca:89:69:0a:04:82:3b:b2:1e:29:
47:1d:c8:3c:32:3e:50:45:78:b3:dc:8c:f3:23:ca:
24:1d:d7:2c:44:bb:74:f0:fe:f3:f0:01:e9:82:64:
c9:b0:c9:7d:2d:a6:fd:87:f2:de:dc:06:1e:2a:ce:
3c:c7:f6:14:39:0c:88:d0:94:b7:cb:76:b1:b3:3b:
a0:31:7b:4c:c2:80:c5:92:fd:35:c9:db:f8:4e:4d:
0d:99:0b:ef:e9:a6:24:82:28:ff:4d:0a:dd:61:3e:
51:88:1a:e1:2c:bd:f5:57:38:66:a0:9e:6c:dc:2f:
ef:49:f6:93:a4:70:76:c0:da:de:56:02:9e:5b:64:
e6:5a:93:98:f7:b2:59:00:c9:7e:07:6e:71:f7:b0:
67:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0D:7F:D3:9E:C8:48:78:72:6C:3D:3F:5F:20:DF:07:EF:31:EF:00
X509v3 Authority Key Identifier:
keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:13:d8:ad:60:0f:97:aa:4c:e7:41:41:83:5b:76:c8:83:bb:
1a:40:d6:81:ce:ca:a3:1e:0f:93:88:46:bc:a7:ec:c8:72:2d:
ed:2e:31:7a:5b:6b:45:73:56:08:d4:ef:bc:52:87:1e:ab:81:
bc:99:3a:20:5c:84:76:a5:86:6b:ad:0d:8d:f8:e5:70:44:62:
5c:27:54:6e:81:d6:03:63:13:9a:66:81:c3:1c:b8:1b:63:0d:
86:e3:23:57:16:27:68:b5:22:43:28:ec:4a:13:0e:6e:05:5d:
48:22:29:52:59:23:23:6e:fe:aa:a5:45:61:d4:49:22:e7:24:
65:f8:68:f9:ed:a7:26:fe:f3:58:3c:52:29:b8:d6:ff:15:07:
fb:89:12:10:ba:38:37:b8:a7:73:c2:3b:ff:32:53:7a:d7:ed:
c6:03:cf:6e:6b:ab:49:72:37:2e:cc:3a:9c:dc:df:5d:36:3a:
5f:82:6d:8e:00:5c:2e:1d:42:4e:e7:cd:d2:a1:5e:35:ac:f7:
15:02:a9:a9:dd:b5:8e:bf:3f:ac:af:57:f6:49:58:69:e0:00:
2c:c1:f8:bb:71:71:da:4a:1e:72:61:cc:f6:bb:98:a5:7f:cd:
31:e2:d2:6e:a2:3f:4f:39:5e:0d:61:cb:8c:a8:de:a3:03:ab:
b3:90:4b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:27:08 2026 by rpki-client