Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
File: en7OlN5d9qGjTJjsZtPZaOWymyE.mft (raw, json)
Hash identifier: MjDcMavDeyvn+t/ZEuiMUn4mXfQmsb9khfLi3tmiMqk=
Subject key identifier: 41:AB:BE:72:BD:B1:5C:D2:9D:5C:32:7B:B8:F1:11:0F:ED:32:B7:B2
Authority key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
Certificate issuer: /CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Certificate serial: 01A0C9D9131B169E18BF3E7BDB2E34724F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
Manifest number: 1149
Signing time: Tue 22 Sep 2026 16:00:41 +0000
Manifest this update: Tue 22 Sep 2026 16:00:41 +0000
Manifest next update: Wed 23 Sep 2026 16:00:41 +0000
Files and hashes: 1: 1-kxWXv05LSEshrBJnjD59T0FQ7Q.roa (hash: rHapWpK9pigcf/GGIQp1nmEJbzSoQssokoPt9LrVksY=)
2: en7OlN5d9qGjTJjsZtPZaOWymyE.crl (hash: gq9hvtrJA6vx7YotoLNlsWsNvbrvVmonxX7xG086qTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:13:1b:16:9e:18:bf:3e:7b:db:2e:34:72:4f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Validity
Not Before: Sep 22 16:00:41 2026 GMT
Not After : Sep 23 16:00:41 2026 GMT
Subject: CN=41abbe72bdb15cd29d5c327bb8f1110fed32b7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:a8:09:db:c7:d2:e1:ea:4b:27:5f:84:0e:
12:b5:75:34:79:81:e2:56:80:36:ad:4a:aa:89:df:
a4:be:55:73:d2:f1:b9:7b:97:76:48:e8:db:5c:a8:
89:6c:28:a0:c8:80:6c:76:17:c4:14:2e:cf:69:37:
f7:99:32:39:37:68:25:94:5e:3b:10:f8:91:1a:b4:
da:f9:c2:b6:70:a1:e7:42:cf:b9:1d:1f:3f:95:d0:
85:01:37:a4:a1:f2:b0:82:c9:8a:a8:60:de:30:34:
f9:6f:5c:b6:a6:15:08:cf:45:fb:2d:0c:63:5d:64:
83:34:e4:99:a9:5b:de:2b:8a:29:9f:a9:ac:3a:85:
2b:5f:e4:54:5f:2e:e7:25:9e:55:a7:97:4b:bf:f9:
86:5b:91:59:41:96:25:9d:87:74:2b:d5:9b:29:f4:
a6:ae:7f:c5:81:c3:85:51:ca:19:62:ac:5e:36:41:
6a:98:e4:5b:c3:09:bf:0f:df:03:ce:e1:9f:93:e1:
b7:2b:d2:19:c1:3a:66:07:c2:d5:da:43:2b:bd:e7:
2b:db:b6:e0:d6:bb:f3:ce:e3:88:2a:33:cb:35:68:
db:1f:70:ba:a4:a7:a3:5e:aa:f7:67:73:d6:6e:c6:
64:03:7c:66:1a:1d:b2:20:26:69:a9:01:04:9d:70:
99:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AB:BE:72:BD:B1:5C:D2:9D:5C:32:7B:B8:F1:11:0F:ED:32:B7:B2
X509v3 Authority Key Identifier:
keyid:7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:59:14:3e:3f:fb:65:7b:3e:66:f7:c2:35:2e:41:08:43:cc:
7a:ff:cb:3c:4f:f5:11:17:7d:73:1e:53:dc:77:15:08:44:5d:
0a:1e:08:cb:fd:42:9a:0c:f0:7d:ef:81:09:86:86:af:b2:cf:
77:39:f7:05:fa:f1:6f:54:f5:bb:b6:f9:73:b3:5c:e1:d7:ba:
15:1f:8b:d5:3a:75:5c:41:5e:f9:2d:2d:7d:f2:5e:55:24:0c:
c6:f0:ac:9a:b1:9a:b0:a8:ef:ef:c8:79:c9:d0:9d:65:0c:41:
59:d2:4e:ad:4d:d2:6c:da:78:ae:bd:66:cd:46:02:3e:32:a8:
c2:66:d0:1d:66:52:23:66:67:c9:2a:de:9e:c7:a2:b8:dd:e7:
aa:fa:0e:da:84:f0:4a:cb:a7:9d:7b:f9:d0:e1:b7:8a:a1:aa:
ab:bf:07:d5:35:59:6d:ca:33:20:52:b4:a2:79:8a:d8:e3:91:
24:b2:54:d2:c1:63:15:8f:39:9c:9d:e8:55:e6:ee:69:39:27:
07:91:25:aa:fc:a1:7d:e2:68:77:4c:60:9e:67:fc:e2:2b:84:
b0:d1:7b:4a:28:0c:88:a4:08:91:83:a9:1d:a2:21:d3:06:ba:
f9:c7:76:13:12:5a:d1:e2:84:0b:b3:ca:ff:a8:3d:f9:aa:12:
bb:3f:cc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:32:00 2026 by rpki-client