Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/7H491OPmGG_IV_QQAUEJGF_T4LM.mft
File: 7H491OPmGG_IV_QQAUEJGF_T4LM.mft (raw, json)
Hash identifier: 5nABKLzelJr8Lv0f3F/kXoiPph5+AzSlLHfC5MSXMT8=
Subject key identifier: 33:E6:33:2D:08:92:2C:3E:18:CD:EF:10:3B:EC:8B:6F:AF:01:FA:9C
Authority key identifier: EC:7E:3D:D4:E3:E6:18:6F:C8:57:F4:10:01:41:09:18:5F:D3:E0:B3
Certificate issuer: /CN=ec7e3dd4e3e6186fc857f410014109185fd3e0b3
Certificate serial: 01A0D1249AC4190EA4C99C70C0713433B534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7H491OPmGG_IV_QQAUEJGF_T4LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/7H491OPmGG_IV_QQAUEJGF_T4LM.mft
Manifest number: 16
Signing time: Thu 24 Sep 2026 02:00:32 +0000
Manifest this update: Thu 24 Sep 2026 02:00:32 +0000
Manifest next update: Fri 25 Sep 2026 02:00:32 +0000
Files and hashes: 1: 7H491OPmGG_IV_QQAUEJGF_T4LM.crl (hash: RSTR/RaHhN7XVY/a7Gwy1HP9LiTfy6wn0XQMiBmonlM=)
2: GPgE8Js570-QLkZUKoJ1126aifk.roa (hash: 8t2EybYwOYg8iaMpOVbMKmfuxyVmfmhAErNMOv+rkx0=)
3: dZUEtJOg8buS0KSq3TP_LatHVeo.roa (hash: HKrpoxg/elM/P+fh5BgNzbrOsO/5w+yqFe6WOxefcu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/7H491OPmGG_IV_QQAUEJGF_T4LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/7H491OPmGG_IV_QQAUEJGF_T4LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7H491OPmGG_IV_QQAUEJGF_T4LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:9a:c4:19:0e:a4:c9:9c:70:c0:71:34:33:b5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7e3dd4e3e6186fc857f410014109185fd3e0b3
Validity
Not Before: Sep 24 02:00:32 2026 GMT
Not After : Sep 25 02:00:32 2026 GMT
Subject: CN=33e6332d08922c3e18cdef103bec8b6faf01fa9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:ae:f5:64:74:dd:1b:10:f7:b5:d1:fe:9a:
b0:e6:cf:15:11:c9:5b:07:fd:2f:03:21:a1:68:7b:
27:01:d5:72:4a:5b:32:5d:f7:eb:f7:0c:17:f1:7d:
e6:1b:a5:5d:68:23:46:a4:d6:48:6d:94:ac:31:ac:
d0:da:1d:dc:ed:10:c2:d6:80:bc:0e:f3:55:0c:29:
37:ef:1e:56:83:4f:36:7d:44:7c:01:ac:1c:c3:24:
ad:ec:8f:d0:59:64:f7:83:62:b1:8f:d0:f1:19:ac:
58:e0:a6:c8:53:ff:c6:62:76:b0:c2:e6:17:38:19:
05:f8:f4:cf:4e:a3:03:f3:35:22:29:bf:5c:51:6a:
89:eb:46:b1:22:9a:c5:86:97:08:e3:42:59:13:6a:
91:69:a9:fc:ed:e9:c6:41:10:d6:db:f9:fc:5c:36:
66:07:54:52:a4:92:87:5a:da:0a:44:76:b7:bd:b0:
d5:fd:7c:bb:75:d8:55:77:c2:9b:97:c2:fb:e9:e5:
d3:fb:2d:5b:89:3b:30:4d:36:23:0a:5e:a9:4f:a6:
f4:b0:db:ac:ff:ee:2a:72:3c:f6:31:25:2e:b3:ee:
4a:dd:3a:cd:b1:ab:87:83:74:e0:fa:81:57:23:a8:
9e:38:d0:1c:49:c6:c1:00:f2:58:bc:42:11:18:5b:
30:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E6:33:2D:08:92:2C:3E:18:CD:EF:10:3B:EC:8B:6F:AF:01:FA:9C
X509v3 Authority Key Identifier:
keyid:EC:7E:3D:D4:E3:E6:18:6F:C8:57:F4:10:01:41:09:18:5F:D3:E0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H491OPmGG_IV_QQAUEJGF_T4LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/7H491OPmGG_IV_QQAUEJGF_T4LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/7H491OPmGG_IV_QQAUEJGF_T4LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a7:48:7e:70:9f:ee:ed:d6:94:b3:80:cb:99:b9:28:b3:5f:
49:42:31:63:cf:78:4c:4f:b0:f0:c3:0a:93:46:de:4a:31:c6:
bb:f4:7f:54:5f:bc:0c:17:a2:79:67:c2:5c:3d:4b:a5:26:49:
d7:a0:5c:b3:db:4b:74:b8:8e:16:ac:db:d9:33:e6:12:00:7a:
4c:9d:0d:f3:e7:c9:2a:9c:16:73:f9:a1:62:1d:8a:3d:c1:88:
cb:eb:d9:93:a4:c2:93:4d:33:1d:1c:b8:7a:89:70:a6:c5:0e:
d6:2c:95:96:cd:76:3f:6c:24:d5:29:7f:38:27:d0:a9:c8:2f:
32:20:c3:89:fd:6a:ac:3b:93:2a:48:67:6f:e8:4a:92:57:d5:
41:81:fb:39:c5:1b:ba:39:29:0b:2c:c6:af:68:da:2d:f6:7b:
bd:68:10:68:f3:79:92:42:be:f0:82:3e:a5:13:36:71:a1:ed:
f7:4c:27:b9:90:36:ce:3b:8d:95:f9:02:33:c5:58:57:86:c3:
00:3a:c8:82:c6:08:3e:55:2a:2d:fb:68:c9:bd:9b:3f:6b:48:
72:9d:05:8c:21:0f:68:3a:22:d5:8a:c4:63:f7:8a:55:92:cd:
2a:9f:e7:0d:5d:4f:60:2a:31:d5:24:10:49:a4:67:92:75:aa:
0b:5e:65:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:35:28 2026 by rpki-client