Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
File: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft (raw, json)
Hash identifier: nwISdrcanaoHeWSNxPJiAweQ/5e9vaCpFztzt4Hb2lE=
Subject key identifier: 1D:52:8F:F4:C5:21:4E:BE:E7:E4:98:44:2C:B3:36:33:79:1F:A1:B3
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 01A0EA779AD3C3EDA9349C50B78B10F65D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
Manifest number: 146B
Signing time: Tue 29 Sep 2026 00:01:41 +0000
Manifest this update: Tue 29 Sep 2026 00:01:41 +0000
Manifest next update: Wed 30 Sep 2026 00:01:41 +0000
Files and hashes: 1: 5z8L94SxohW89feZF-x7UUHOUGw.roa (hash: J9U9SwJZOAhHbw/+dwZT4u/bEO014TJ7Spfz6aawrAo=)
2: 60ZuDyr70onvZz7b_VP-SDmx33E.roa (hash: twz5MCkaRcivByRDA9QCyxItgQZO9OCdluDvL7eF7Ro=)
3: BlrqBtWblMfctvze6Z4e1h26Vg0.roa (hash: mrpfN/u4KNrOk9l0nXYVVF7vi+rRmvUj9lVXmfONvc8=)
4: NHjW7dPsyIq0Ra6kfJvb1FDPOrc.roa (hash: eNPkOFpshNdBId/GwxgDcZ/1OocRZllruwGL/l+cxaA=)
5: TmO2qs3CJ7nD3brN-Xezi1R7_Eo.roa (hash: r53OH2xwFa4qKn9FoyBvVY4gvGfnLfCBjSGuWq2Tb+U=)
6: e9W3bqM-9Cf9J8NK5NJYdPxtNqQ.roa (hash: fhBttHfpH+r5wDlnd1XHbP4VIUk5mx77G0HB40PrGrc=)
7: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl (hash: OI5B5f/buRSGPzh0JJEHTySeQxwrs7wo6BzqcPDTtGg=)
8: vLogJj6NuTRQtmEXSY4brF-qnBY.roa (hash: zohFkXr1VCR5q6x1R2Xx5enwasHpy8O1g/gJdKkByho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 00:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:77:9a:d3:c3:ed:a9:34:9c:50:b7:8b:10:f6:5d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Sep 29 00:01:41 2026 GMT
Not After : Sep 30 00:01:41 2026 GMT
Subject: CN=1d528ff4c5214ebee7e498442cb33633791fa1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7e:89:5c:07:38:34:6d:2e:0e:cb:01:e1:e1:
74:d9:bc:03:9a:20:8d:31:d9:a3:1e:ba:15:22:6c:
b1:4b:25:a6:61:71:ca:d6:f7:e0:a5:f1:9a:de:7f:
d5:bf:2a:69:05:51:4d:f3:1e:4a:05:62:36:76:f3:
65:ab:aa:2d:7e:39:5a:0c:9f:78:85:bb:76:a3:05:
a3:70:2d:23:5c:b2:3e:3c:e5:2f:9a:6a:c8:88:fa:
d8:24:04:43:c1:b3:eb:c9:e7:7f:bf:63:45:ce:40:
27:d6:13:99:ae:7f:6c:73:66:39:a2:23:b5:69:d7:
ad:c6:a1:ea:2e:bb:13:a9:7a:cd:22:b3:67:7d:56:
f0:5f:38:10:1e:2f:b7:04:9f:8a:53:91:3e:05:3c:
bb:a7:ca:9a:f4:08:36:2c:97:45:99:1c:7a:58:4f:
82:20:a8:1c:78:f5:a5:b0:01:61:2f:5f:f7:a4:bb:
53:62:c9:4c:4b:63:0b:6a:c6:40:4d:a7:1b:24:fa:
a9:90:be:f6:67:c6:57:7b:78:5b:82:f8:7c:a4:be:
fd:3f:4d:ca:5f:b8:df:47:6a:c6:dc:4b:ca:ec:df:
47:9d:2c:55:ca:59:da:b2:fc:17:50:9f:e5:cb:ae:
d3:ba:1d:38:4b:c4:4e:e7:8d:5f:04:2c:a0:8e:e6:
6a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:52:8F:F4:C5:21:4E:BE:E7:E4:98:44:2C:B3:36:33:79:1F:A1:B3
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fc:09:ce:04:cb:b5:45:93:46:6e:1e:60:36:6f:ef:90:0e:
80:b7:7e:e7:b2:11:ba:b7:ad:1c:f0:39:cf:f9:54:bc:51:04:
44:df:fc:9a:87:01:6d:6d:71:cc:e1:c6:c3:9d:95:2f:68:9b:
5d:8d:07:80:ce:c6:a7:88:74:12:b4:ec:05:db:67:77:99:eb:
d5:57:af:25:b8:65:91:6f:d6:18:fc:35:84:08:95:d7:ee:14:
58:3e:5d:2b:02:a6:f0:74:5d:f9:59:aa:99:f9:12:9f:4c:19:
af:b9:8a:9d:57:b1:76:7e:e9:38:61:e5:d2:59:70:b5:c4:e3:
ae:8f:b6:16:af:8e:c3:91:16:c1:0b:0d:17:96:5a:ad:36:64:
1d:d5:fd:ab:37:b3:c4:da:3b:58:19:58:1c:de:97:b1:3f:ad:
0b:6f:c7:9a:be:be:62:69:d7:2b:8c:a5:64:28:e7:eb:23:7a:
e5:d9:99:b3:01:64:f7:ce:f8:e5:27:7b:0e:b0:09:08:ba:51:
02:16:0e:30:93:64:35:78:08:77:97:1c:fd:8c:db:c5:3f:f6:
f8:91:8d:78:ad:c9:57:bf:59:2b:fd:9f:cd:78:9f:09:d2:7f:
f6:35:95:f7:fe:e5:d5:7b:ee:51:bd:60:aa:4c:05:9c:d0:f2:
83:56:7d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:37:56 2026 by rpki-client