Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
File: 7Y3fghIIo3DjpbfvjNR5fPxXdII.mft (raw, json)
Hash identifier: bj+yx3e7lI5X3T0ZfLbrTGjpK9FlEcNepWDPE23GiA8=
Subject key identifier: 29:F7:06:11:63:25:CD:CA:55:74:19:80:4C:7C:CD:9A:D8:44:C8:E7
Authority key identifier: ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
Certificate issuer: /CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Certificate serial: 01A0CB90A551121FC63AB3407D97DDCD5CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
Manifest number: 10EA
Signing time: Wed 23 Sep 2026 00:00:49 +0000
Manifest this update: Wed 23 Sep 2026 00:00:49 +0000
Manifest next update: Thu 24 Sep 2026 00:00:49 +0000
Files and hashes: 1: 7Y3fghIIo3DjpbfvjNR5fPxXdII.crl (hash: 675a/ZzN9C6M6sUtDZOt8q2g2itHFLF/YPnqAB9NkTQ=)
2: Z0WVwWptGEGRyg-sh820wNyCLqg.roa (hash: +yXI8Hiac4a98uMpERPin9vZe08d6SLlySsDllVTAlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:a5:51:12:1f:c6:3a:b3:40:7d:97:dd:cd:5c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Validity
Not Before: Sep 23 00:00:49 2026 GMT
Not After : Sep 24 00:00:49 2026 GMT
Subject: CN=29f706116325cdca557419804c7ccd9ad844c8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:c3:58:c3:db:32:38:30:3c:23:65:6a:23:
d2:09:1a:5a:1f:07:68:00:d6:fe:d2:b7:12:5c:f1:
f5:c9:7e:1d:dc:9e:49:1b:13:3d:a5:62:8f:0d:f9:
b0:c3:dc:b2:da:4d:51:46:93:55:a3:5c:79:c9:ee:
77:5d:2c:28:a0:54:a6:43:72:92:36:72:d8:dc:7e:
35:14:0b:6c:4b:6b:ca:c3:11:0f:e4:52:1e:3f:74:
e9:3e:4e:3f:c0:59:ba:a9:f9:8a:32:f9:56:25:71:
38:ef:d3:77:7e:6e:ad:e6:ac:88:8f:f9:ee:cc:b1:
e3:f1:72:86:18:38:ed:b1:16:67:07:7b:f7:65:f7:
68:91:bd:08:87:35:67:33:a0:04:b4:5a:28:58:db:
e4:ca:11:a5:da:5a:b6:68:bc:4d:8e:15:fd:41:6c:
7b:67:5c:8d:19:8d:b0:65:c8:81:78:87:c8:97:e1:
4b:c2:1f:39:01:c9:56:7a:a4:35:4a:5a:c7:fa:ab:
90:27:1f:76:ce:d7:db:82:32:67:90:1d:73:5b:b4:
3c:80:89:dd:b4:30:d1:b9:06:d8:26:3d:d7:d4:68:
34:15:a0:57:73:60:56:7b:4f:68:c5:fe:87:2b:b6:
42:33:99:85:97:2d:91:7b:e4:1d:a8:10:16:8f:6e:
31:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F7:06:11:63:25:CD:CA:55:74:19:80:4C:7C:CD:9A:D8:44:C8:E7
X509v3 Authority Key Identifier:
keyid:ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:6e:9b:f5:54:38:5c:d3:25:8a:c5:13:b3:19:82:cc:cb:18:
f4:db:c4:7c:a7:4b:06:89:e0:7a:47:a3:bb:d0:57:33:22:5f:
75:f8:c8:17:c2:25:7c:d9:d3:f9:ba:b7:ad:8b:be:94:89:c5:
07:9c:38:6f:f6:f7:42:b1:60:d8:3b:77:f5:2f:1a:71:b3:63:
49:45:b1:c7:2a:ef:6d:53:4d:d5:f0:cc:91:5e:7d:ea:cb:f9:
c5:ee:d6:d6:2d:aa:dc:24:9e:ab:ff:16:ac:bb:26:4c:a9:37:
57:29:f6:6e:d7:95:f7:4d:5c:eb:19:86:a6:f1:df:09:98:a8:
8d:92:62:a2:c5:08:23:ef:c2:6d:13:70:ca:19:b6:4c:a4:4f:
7c:0f:24:fb:2d:b6:16:40:c4:67:d4:5b:64:ef:33:54:a6:6a:
04:96:c9:10:eb:53:c1:4f:b3:f7:ad:3d:17:73:40:f7:49:8f:
c4:9d:4c:ce:94:a1:80:38:42:b5:e7:d7:06:da:c8:f3:b6:92:
a1:7e:37:b7:af:67:63:83:3e:8a:4d:e5:04:96:e1:bf:46:b6:
ff:4e:98:25:a0:76:ea:0a:52:31:d9:a6:60:99:fb:a2:2d:56:
a7:20:fd:7c:96:a8:81:99:10:2c:52:75:b5:ee:ea:96:ee:06:
6b:5c:08:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:42:06 2026 by rpki-client