Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
File: 7a4BhsaCMBS8LELQTqZQv1zLmXY.mft (raw, json)
Hash identifier: CvXyXQI3CrkseslgVp/Gbukqhi8IAST7LLnaFj9i5uc=
Subject key identifier: 0B:EF:EA:00:96:71:E5:76:78:84:3A:B6:BC:03:3C:D8:A7:F1:D2:9D
Authority key identifier: ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
Certificate issuer: /CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Certificate serial: 01A0CEFF061A01639DC3583A458C49FB2AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
Manifest number: 199B
Signing time: Wed 23 Sep 2026 16:00:14 +0000
Manifest this update: Wed 23 Sep 2026 16:00:14 +0000
Manifest next update: Thu 24 Sep 2026 16:00:14 +0000
Files and hashes: 1: 7a4BhsaCMBS8LELQTqZQv1zLmXY.crl (hash: 1xX0JxxOt/ZfJaRYhgy7nWdPED9FrfLW6gSxTTUhP9Y=)
2: WxQ64uv-zX-eye9sRlN7C2cRqwI.roa (hash: H3Nchr9jYSxejrjh37X3oEL6arcb0RjMrAm9O9pSwMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 16:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:06:1a:01:63:9d:c3:58:3a:45:8c:49:fb:2a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Validity
Not Before: Sep 23 16:00:14 2026 GMT
Not After : Sep 24 16:00:14 2026 GMT
Subject: CN=0befea009671e57678843ab6bc033cd8a7f1d29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:e7:d9:e8:dd:49:65:0b:01:1c:9f:89:87:
3d:5a:b4:ed:5b:ba:d6:56:4e:04:b5:cd:9f:42:39:
d5:2b:b8:48:37:2e:d5:e5:44:ef:2e:69:c1:2f:3e:
e5:c2:79:87:84:48:e4:63:c5:da:0f:85:f2:ba:e1:
19:9c:c8:d7:7d:89:89:1d:f2:90:22:7d:2d:c2:ba:
27:0a:34:c3:5e:40:da:f0:b0:a0:a4:16:14:03:70:
1a:02:d7:ec:b5:fa:40:e3:26:1b:02:cf:75:b1:98:
52:89:0b:c5:5f:eb:4d:cb:70:c6:d0:1b:45:32:e9:
94:6c:31:7e:9a:b7:11:bd:da:b3:88:e7:59:05:d7:
19:94:27:af:63:f9:59:2c:00:dc:64:d4:26:54:43:
3b:0e:88:ce:e2:a1:c9:2e:4d:b8:cf:24:1a:9d:d1:
ff:5a:2d:57:d9:6c:e0:80:bd:0e:37:37:6b:30:c4:
11:99:36:ac:4c:d2:09:88:75:6f:a6:1e:bf:84:bb:
08:4f:88:d1:c0:b4:62:f9:f2:a5:fa:ed:68:31:9f:
f9:23:4c:57:8b:2b:a8:90:38:13:d4:17:db:00:7a:
60:ee:55:6a:0f:be:81:23:8f:6f:05:3a:53:69:df:
f0:d1:17:c0:8e:7c:b1:07:ea:47:15:32:e2:99:73:
72:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EF:EA:00:96:71:E5:76:78:84:3A:B6:BC:03:3C:D8:A7:F1:D2:9D
X509v3 Authority Key Identifier:
keyid:ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:47:a6:78:cd:c2:20:4e:9c:99:49:4e:b9:67:d1:8e:af:05:
04:b8:46:76:b3:2b:df:b9:4f:99:f6:44:dc:39:3c:bd:0b:67:
64:a3:9c:a0:34:e3:cb:93:97:f1:30:12:f8:b6:da:b9:48:32:
2d:a5:b2:d7:a5:1c:07:a8:92:80:97:b1:4d:47:6d:01:57:26:
d1:9d:20:ba:d0:4c:5f:df:fc:f7:1c:52:ea:ff:c3:23:cd:fd:
7d:79:81:a2:7c:c6:5f:a4:5d:e6:86:8e:93:52:ee:4e:0a:5a:
4d:5f:bf:d3:7d:02:45:b6:df:95:93:21:74:fb:9c:6b:aa:f9:
9f:54:87:ca:34:ce:b0:de:53:56:e4:2c:a8:b1:d8:92:52:ca:
85:10:ee:e0:fb:d7:cf:70:e8:db:da:ed:88:91:f7:70:af:7e:
29:99:65:cc:f3:a6:2f:71:2c:bc:41:94:11:6d:de:6a:76:c2:
3e:4d:96:99:15:d7:8f:ec:a6:9b:6e:81:01:a8:34:89:79:4a:
62:4c:93:8d:57:2b:b1:e7:fc:50:ef:dd:bb:ec:23:d3:6e:b0:
98:9d:d1:bf:e6:a4:56:f2:02:9b:89:0f:d3:8b:b6:1e:92:b7:
3e:b0:79:0f:b3:96:c8:9d:d1:d1:df:b0:ce:fa:5f:72:77:fc:
6d:77:c0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:49:51 2026 by rpki-client