Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
File: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft (raw, json)
Hash identifier: Y/YK5kSadTgvlbAT/PzHFkJpyt6sRVx6fRYVkNbS4hA=
Subject key identifier: CB:F6:F6:02:A7:80:48:D8:DF:5C:83:88:3D:1D:B7:62:1E:DA:DB:83
Authority key identifier: EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
Certificate issuer: /CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Certificate serial: 01A0CD7EE0E4E36E9C4BEFBF49244A24C3AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
Manifest number: 12AD
Signing time: Wed 23 Sep 2026 09:00:39 +0000
Manifest this update: Wed 23 Sep 2026 09:00:39 +0000
Manifest next update: Thu 24 Sep 2026 09:00:39 +0000
Files and hashes: 1: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl (hash: VcP9m8e4mMV2ZimWfMHY/anROTWNZss5KoWRT7+Arpg=)
2: xkug34IJaWSwOfn5zGdas0MixZ4.roa (hash: IepgvoNLMpyof9xTWeZX3c1cPMLbQuZpVjyEywQxdwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:e0:e4:e3:6e:9c:4b:ef:bf:49:24:4a:24:c3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Validity
Not Before: Sep 23 09:00:39 2026 GMT
Not After : Sep 24 09:00:39 2026 GMT
Subject: CN=cbf6f602a78048d8df5c83883d1db7621edadb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b8:81:cb:04:55:a3:87:e2:8c:d6:93:06:3f:
65:1c:34:6d:39:49:a0:a0:1b:25:0c:b6:55:f0:c9:
cb:ad:1c:41:4d:14:0f:12:d8:d6:93:1a:f4:a6:97:
9c:50:1a:c3:da:01:38:df:ce:1c:05:f8:27:0c:e5:
09:3e:82:2e:bd:67:1f:29:67:98:7f:05:68:b5:82:
e8:12:5d:88:23:51:d1:7a:c5:1c:84:69:f7:02:f0:
d3:dd:da:f1:02:a0:51:3d:fb:aa:dc:f9:d4:66:0f:
e1:8d:73:eb:bf:d7:27:63:89:a7:4a:3e:6f:d8:30:
53:59:e8:5f:fe:73:2c:8e:53:ea:04:3a:17:f2:8a:
2e:cf:34:a8:89:53:33:e2:f1:3a:c4:50:de:36:0b:
31:79:59:9c:fb:38:43:58:30:c5:ac:19:cf:47:38:
50:88:5c:a2:15:0f:5a:6a:a0:11:b2:13:01:41:74:
db:d7:20:a8:83:24:bb:26:43:5c:e1:0a:70:a9:9d:
70:72:42:e1:bc:5e:dd:74:ee:9b:90:ab:ff:5d:9c:
63:b1:2e:60:7b:31:f6:81:98:2e:4f:59:4f:67:1b:
39:ba:9f:84:94:ed:32:38:6d:95:33:c1:08:3a:19:
ee:cc:3c:12:be:15:6d:fa:6b:04:12:b3:9e:82:82:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F6:F6:02:A7:80:48:D8:DF:5C:83:88:3D:1D:B7:62:1E:DA:DB:83
X509v3 Authority Key Identifier:
keyid:EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f0:bb:42:c2:51:5e:86:47:9d:55:29:e7:1a:e4:69:e1:7c:
53:0b:13:7f:73:c4:29:ae:41:dd:63:ed:34:d4:14:df:4e:3b:
d6:4f:4f:24:8c:2f:b6:13:09:f6:e6:89:9a:91:f1:07:7a:97:
e5:89:42:23:46:2b:7d:b0:21:10:bd:70:41:4c:9d:cf:b4:b5:
eb:b3:58:04:ef:79:3a:1f:59:f0:44:4b:74:c0:3b:b6:94:28:
27:7e:5f:9d:b5:e5:80:b9:2f:14:ef:1a:69:d1:02:c6:05:12:
c8:79:db:33:48:77:c9:a1:b0:08:53:b7:35:57:21:42:d3:a8:
c8:5d:58:4d:e3:62:52:5d:ff:d3:a4:7e:a0:30:e8:fb:c5:2b:
44:0f:d6:22:91:3d:90:24:35:77:df:32:9c:a3:35:72:07:b8:
b9:ee:16:0d:b7:4c:2b:14:6d:55:cf:dc:b1:ac:54:46:b0:cb:
78:42:73:ff:33:f3:bd:76:a4:d5:86:61:f7:86:a5:7a:12:e6:
3f:29:51:6e:0c:93:5f:71:4c:d9:08:ba:25:90:6f:cf:bf:81:
61:07:ba:f4:93:7e:a4:ac:18:6e:97:99:e0:d1:b4:a3:58:8b:
98:83:96:31:56:f3:77:27:5f:13:c2:14:70:76:29:41:b2:ec:
37:db:da:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:28:02 2026 by rpki-client