Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/m7pRyuell0rHz4V0NLcfil9mSwc.mft
File: m7pRyuell0rHz4V0NLcfil9mSwc.mft (raw, json)
Hash identifier: kjo0cZgnfFltU6uNlVX42Tsh3Sj5M2ck19np4zRZcjE=
Subject key identifier: 49:49:C0:AB:77:43:B6:D5:BC:36:09:F5:6B:1D:7D:34:42:23:8F:BE
Authority key identifier: 9B:BA:51:CA:E7:A5:97:4A:C7:CF:85:74:34:B7:1F:8A:5F:66:4B:07
Certificate issuer: /CN=9bba51cae7a5974ac7cf857434b71f8a5f664b07
Certificate serial: 01A0D9BBC34E1A62574DCFF4995D089FAEF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7pRyuell0rHz4V0NLcfil9mSwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/m7pRyuell0rHz4V0NLcfil9mSwc.mft
Manifest number: EC
Signing time: Fri 25 Sep 2026 18:02:36 +0000
Manifest this update: Fri 25 Sep 2026 18:02:36 +0000
Manifest next update: Sat 26 Sep 2026 18:02:36 +0000
Files and hashes: 1: AUt5aEe9I9r-_yYGhcti899JX80.asa (hash: W9/s7qsjqgi329110nptyxROIVauh37lCo9hMcGLc8E=)
2: m7pRyuell0rHz4V0NLcfil9mSwc.crl (hash: WGLrL2MQu8JgK3CqNIhb5kyBuij8jIeYWwwJdSATLDQ=)
3: nT0adKrHOXX76zlKbeIetM2fImw.roa (hash: mcJKLegTxunUDPkoN6855luXrU9XjcS8d14LoXoBwZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/m7pRyuell0rHz4V0NLcfil9mSwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/m7pRyuell0rHz4V0NLcfil9mSwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7pRyuell0rHz4V0NLcfil9mSwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:c3:4e:1a:62:57:4d:cf:f4:99:5d:08:9f:ae:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bba51cae7a5974ac7cf857434b71f8a5f664b07
Validity
Not Before: Sep 25 18:02:36 2026 GMT
Not After : Sep 26 18:02:36 2026 GMT
Subject: CN=4949c0ab7743b6d5bc3609f56b1d7d3442238fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:b3:e9:33:d9:3e:d8:7a:f2:cb:bf:74:22:
a9:a3:ab:d7:d2:7e:13:32:52:65:03:23:fd:e8:c9:
bf:d0:2d:7f:ce:a5:a3:0d:cc:8f:64:aa:1d:f5:13:
46:d3:56:e5:79:39:a2:72:c3:28:e7:96:e0:69:82:
1c:ba:62:16:9d:9a:23:3a:b8:a3:ea:ad:be:5a:5e:
8c:5c:71:72:57:b0:54:b7:cc:f9:a6:ec:08:68:91:
e9:07:06:c0:9a:70:99:6c:5c:e0:7f:68:36:61:ac:
7f:db:cd:28:50:6f:1f:e4:c7:d8:37:16:b6:22:40:
9a:38:51:3b:ff:1e:a8:6e:2c:08:ea:b1:49:dc:14:
56:bb:a8:03:72:83:04:be:3e:8e:87:5d:e5:f5:7f:
06:35:03:46:94:f5:ad:74:36:bc:80:4c:6e:8b:bb:
08:7d:86:84:28:72:0e:ea:61:68:22:89:3d:70:60:
29:c8:79:2a:b7:e2:8c:3b:83:23:91:d5:91:6b:b4:
75:6a:a6:cd:f5:7b:dc:31:55:f9:e0:32:dd:04:38:
54:eb:2b:8c:10:cb:96:36:67:b6:4c:10:8d:21:fa:
06:af:ff:2b:fa:63:ad:b4:fb:df:b8:11:1e:d5:68:
17:85:6f:ac:b6:90:6a:ac:51:fa:c4:42:aa:8c:a0:
10:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:49:C0:AB:77:43:B6:D5:BC:36:09:F5:6B:1D:7D:34:42:23:8F:BE
X509v3 Authority Key Identifier:
keyid:9B:BA:51:CA:E7:A5:97:4A:C7:CF:85:74:34:B7:1F:8A:5F:66:4B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7pRyuell0rHz4V0NLcfil9mSwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/m7pRyuell0rHz4V0NLcfil9mSwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/m7pRyuell0rHz4V0NLcfil9mSwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c8:c4:5c:ea:e9:10:0f:dc:f5:63:51:9a:52:1d:44:01:ce:
de:8e:d7:68:b3:bd:a3:c4:d6:2d:40:35:f0:2c:6b:da:10:08:
f0:69:77:42:e7:59:95:42:0b:2d:9d:c9:26:f6:f6:31:a8:c1:
7b:0d:eb:03:3c:7b:a9:81:0d:6a:c7:ee:29:06:1b:af:bd:b5:
8d:d0:30:a4:90:be:cc:17:69:35:af:64:66:fa:d9:46:c6:7f:
2a:92:29:ef:17:5c:fb:70:8a:f9:19:b6:8d:55:d5:3c:aa:3a:
32:c2:e7:71:a4:b0:6b:16:1c:fe:53:c3:f4:fe:e6:5f:8b:02:
d2:01:60:65:fa:8c:ff:a9:40:ea:8c:86:6a:56:b5:5f:88:8b:
dd:23:f8:8d:2b:ba:4d:7b:3d:52:91:fb:8e:4f:fa:40:ee:51:
3a:5a:c6:73:0a:6a:fe:af:c4:86:ab:f6:df:1b:b0:19:4f:a9:
40:4b:b3:3d:63:f6:34:9f:bc:93:0e:6a:e6:19:2d:12:1b:eb:
fe:67:3c:1d:29:4b:1d:d5:2f:c2:ba:ee:ff:7e:11:f1:52:55:
d3:f4:b5:b2:21:06:41:17:ef:e0:34:06:9f:66:b9:96:49:db:
1f:cf:9d:0b:29:af:fb:d5:50:c5:81:47:52:8a:26:af:e8:31:
88:f2:1a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:06:41 2026 by rpki-client