Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
File: 7zGgVPyftLFH6KmL2n5xyBrwvP0.mft (raw, json)
Hash identifier: l6GXf4ImaQ8b9fMlcecUscTl8wmg527lD025+ZRV6Pw=
Subject key identifier: 45:76:9F:49:D1:11:C1:AA:59:63:44:4B:EF:42:05:62:1E:0E:9D:FF
Authority key identifier: EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
Certificate issuer: /CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Certificate serial: 01A0FFB5ACAD62BF16F09408B8F787CE3663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
Manifest number: 1A87
Signing time: Sat 03 Oct 2026 03:01:31 +0000
Manifest this update: Sat 03 Oct 2026 03:01:31 +0000
Manifest next update: Sun 04 Oct 2026 03:01:31 +0000
Files and hashes: 1: 7zGgVPyftLFH6KmL2n5xyBrwvP0.crl (hash: hNqg00sZCjwNon3yn9LzMfpX95EBrrkzlPStaNKZeUs=)
2: RwU9zWthyfSOUWuvsWlsVhpMbmQ.roa (hash: 74TavDCjufR6GUNTwdp6AJnNFnxix31gx+8KWS5C2g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:b5:ac:ad:62:bf:16:f0:94:08:b8:f7:87:ce:36:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Validity
Not Before: Oct 3 03:01:31 2026 GMT
Not After : Oct 4 03:01:31 2026 GMT
Subject: CN=45769f49d111c1aa5963444bef4205621e0e9dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:81:65:1c:a7:89:70:b0:47:52:46:4e:c5:d9:
e1:45:ef:04:ab:a4:6f:0e:e0:66:84:15:86:cb:87:
ec:f8:c6:af:51:e0:b2:b1:71:a8:a6:91:db:32:ae:
3b:6b:a6:99:41:15:bf:87:48:47:15:52:ef:92:a5:
07:ad:c8:11:bd:64:92:a5:64:d4:2b:a9:3f:16:04:
92:38:c1:21:c3:eb:db:7e:93:26:60:51:ff:26:7d:
15:3b:ac:5e:6c:b2:3d:39:78:a1:2b:21:31:66:bd:
8b:a0:a4:ad:a6:42:03:2b:bd:e2:a3:39:eb:95:dd:
84:67:59:64:90:81:b1:43:da:4e:20:a9:46:2a:ea:
36:6e:06:a4:7d:ed:30:33:6a:9b:9b:e9:23:84:dc:
7f:e3:aa:8f:4b:2b:ec:71:7e:1f:4f:ed:f9:d8:5e:
47:2a:51:a9:cc:26:57:45:65:81:4f:a1:05:11:4f:
80:88:25:7b:af:7f:7c:e0:7e:c6:c9:0f:ff:3c:a9:
9c:e9:0e:f9:68:8b:26:17:04:82:81:b3:ca:98:60:
37:d2:04:00:7f:67:89:08:69:4e:00:c6:64:cf:6a:
1e:84:d7:cb:e5:10:09:07:ec:19:d6:30:4e:c7:11:
b9:95:75:de:d1:cc:4f:e1:c9:d0:30:33:19:09:6d:
2e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:76:9F:49:D1:11:C1:AA:59:63:44:4B:EF:42:05:62:1E:0E:9D:FF
X509v3 Authority Key Identifier:
keyid:EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:35:45:82:35:c0:36:3c:48:78:6d:e8:7c:af:74:b5:ba:39:
27:fd:0e:69:00:77:49:b6:d4:e2:1d:0d:99:99:e5:fd:63:d4:
e7:7d:f4:5c:22:d7:5b:64:29:88:a7:cf:14:fe:8f:96:f7:17:
48:39:25:0d:4a:80:03:ee:bf:77:57:d9:4a:0a:b0:12:e9:12:
78:68:7d:bf:58:ef:7a:b2:20:8d:9e:35:fb:b3:b7:d3:fe:b7:
59:65:a6:56:26:a4:2a:36:ec:01:f8:6c:08:8c:6e:c3:0c:bb:
c9:3d:1f:3e:1c:ba:77:61:cd:88:6b:6b:26:ce:af:f3:cc:3b:
3c:6f:37:bd:cd:e6:49:56:34:c5:01:e6:4a:a9:4c:5d:48:8d:
03:6b:e4:fa:23:a5:39:9c:fd:e4:2d:6d:f0:2b:ca:0a:cf:47:
5a:bd:d7:28:15:20:f9:b3:3c:88:b7:95:b5:4d:a6:43:e8:fb:
e7:d2:9d:92:ff:e6:b6:1f:d7:7c:5e:75:1f:14:4a:d9:c9:1b:
df:e0:1b:59:2e:ac:c5:c5:70:a7:ac:18:cc:79:70:e1:03:a4:
80:a7:9b:d1:f5:bf:2d:63:40:de:53:a1:52:ae:ab:ee:3e:93:
a7:00:01:b6:9c:e6:b9:33:8f:d6:c8:ff:41:db:78:19:01:6e:
80:f9:a4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:33:32 2026 by rpki-client