Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
File: 7149b2n6K0JReRHq5WlXMDB5kVY.mft (raw, json)
Hash identifier: 9VlRG7jaEVioabNIwWot4sddhe2kYITsRVp714EosVQ=
Subject key identifier: 5C:19:67:9B:82:FF:E6:73:D6:AD:BE:CB:E5:91:C4:60:84:DE:2E:ED
Authority key identifier: EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
Certificate issuer: /CN=ef5e3d6f69fa2b42517911eae569573030799156
Certificate serial: 01A0C9D8951FDB50B3C23DCD9D765C7396B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
Manifest number: 0FC3
Signing time: Tue 22 Sep 2026 16:00:09 +0000
Manifest this update: Tue 22 Sep 2026 16:00:09 +0000
Manifest next update: Wed 23 Sep 2026 16:00:09 +0000
Files and hashes: 1: 7149b2n6K0JReRHq5WlXMDB5kVY.crl (hash: ouA3G4ls/52JO6/tiBjx9Op578jXDWEho45Ql/WaEJA=)
2: _bZKuF7AFVv9FOPtEDmaIyaLkgc.roa (hash: /OjfGerjj4MNTsCbNROwrp1Es3nNekhRr//F8a0HSXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 16:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d8:95:1f:db:50:b3:c2:3d:cd:9d:76:5c:73:96:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5e3d6f69fa2b42517911eae569573030799156
Validity
Not Before: Sep 22 16:00:09 2026 GMT
Not After : Sep 23 16:00:09 2026 GMT
Subject: CN=5c19679b82ffe673d6adbecbe591c46084de2eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:76:09:76:8c:03:35:c7:c9:a2:63:c2:e7:
91:a0:aa:e8:b0:15:86:9a:67:58:d0:3f:68:c8:cc:
90:5d:ee:e9:eb:59:78:21:46:a0:d1:be:5d:55:29:
08:03:5b:79:4f:8c:f3:df:9f:29:c6:27:05:39:d6:
2e:d4:5d:e6:f3:93:80:d4:cf:4b:d5:76:05:ec:cc:
82:08:a6:3c:ed:5f:94:29:58:73:a7:61:a0:5f:3a:
e4:28:10:00:ee:ce:56:54:25:04:1c:5d:59:f0:2f:
85:87:c6:b2:65:21:e2:98:b3:01:de:7e:26:f6:3f:
45:88:56:f1:d3:75:3d:bb:dc:a2:47:e4:66:2a:35:
de:e1:18:62:cc:b6:4f:33:dc:dc:c7:4d:ac:63:bd:
9c:e4:00:82:49:4d:8e:c9:94:b2:84:00:31:99:a4:
eb:ab:3f:a3:54:8e:e3:79:98:86:b3:6d:f9:9e:87:
6b:37:9b:81:35:81:33:09:59:f7:5f:cf:3b:ae:49:
9c:27:99:c5:40:57:6b:0b:8a:27:fd:f0:b9:c6:f2:
26:8c:61:47:fb:06:d1:eb:64:25:86:5a:85:d0:69:
9e:fe:bf:0a:1f:18:73:fb:8a:e6:5c:ae:9d:2f:9b:
03:43:3e:e6:3f:4e:12:68:60:f0:db:3e:6c:50:8f:
6d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:19:67:9B:82:FF:E6:73:D6:AD:BE:CB:E5:91:C4:60:84:DE:2E:ED
X509v3 Authority Key Identifier:
keyid:EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:cc:93:af:26:1c:b8:e6:c6:70:c5:49:d3:14:09:eb:36:80:
37:e7:8a:42:2f:1a:27:52:7e:33:94:ae:2d:1d:57:03:09:56:
c5:c1:e2:1b:61:e1:29:1e:6c:5c:5a:2f:2b:f7:06:45:6c:73:
03:e6:ba:6b:68:98:44:7b:d0:dc:e9:77:29:88:ce:4f:f9:6b:
ac:d1:b5:c5:5b:ce:ed:54:25:7d:c5:3b:bb:58:52:73:7a:12:
d7:67:8f:30:1d:fd:12:a2:f0:3f:2e:97:3c:42:90:51:b8:fd:
c5:81:bf:42:d7:cd:7c:c2:ba:05:27:6d:6f:b7:8f:06:9f:5c:
60:b7:40:cd:d7:e6:05:fb:dc:70:c1:76:5f:ba:dc:99:ae:04:
c8:8f:d2:ac:2b:24:7b:f3:a1:24:4e:f8:47:08:63:b3:82:01:
97:1a:5b:aa:f1:92:20:79:71:43:a7:70:51:d0:10:0a:ff:4a:
82:0e:ca:e0:24:46:04:0c:6c:4e:cd:a4:90:4b:fd:2a:e0:ee:
64:58:8d:4a:50:6d:f1:3f:0f:7c:f9:4a:57:5e:0a:39:71:dc:
fb:b3:01:14:be:fd:8f:10:a9:07:41:fe:98:8d:96:9f:b8:d0:
ea:ce:bc:83:40:21:0b:87:b4:1e:7f:ae:3a:00:b5:34:50:9c:
44:29:38:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:43 2026 by rpki-client