Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft
File: m7rm4-12beR6umaTu1r4pkiXQxA.mft (raw, json)
Hash identifier: r+8WHUiHoipJrg4ygOx6UDzRhTMIIt4fBwdnbE+8l6I=
Subject key identifier: 5E:6A:3D:6F:D9:07:2A:31:5C:A6:CA:F5:AC:A9:EF:40:F8:95:52:B9
Authority key identifier: 9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10
Certificate issuer: /CN=9bbae6e3ed766de47aba6693bb5af8a648974310
Certificate serial: 01A102B702A9E8330B3BD6DF7F12C8A2D3C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft
Manifest number: 1A8A
Signing time: Sat 03 Oct 2026 17:01:50 +0000
Manifest this update: Sat 03 Oct 2026 17:01:50 +0000
Manifest next update: Sun 04 Oct 2026 17:01:50 +0000
Files and hashes: 1: AtRHUu5djF_9THq1S347r70vIec.roa (hash: 2rpIh+F0dzzUdJUnjgF+65AQ/tE0b6hNiw5NNKKZ9pU=)
2: NEmVNkbXZYrffbAhPL-Xg7g1_vs.roa (hash: Uf0bzb/NFK4azjx8QKPNpOoYIdPXAHv9ZC+GseFVOFQ=)
3: _IFdJfE78-zROqcic2dU-ZWfcFY.roa (hash: uiQtuxAVoE5FJEhMehigG75HbGFAiF/XJZ1c54451JI=)
4: m7rm4-12beR6umaTu1r4pkiXQxA.crl (hash: wHzYhpHGeEjhkYPyzwj/ERI+C1JyimF9mRAuKXKSNaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 17:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:b7:02:a9:e8:33:0b:3b:d6:df:7f:12:c8:a2:d3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbae6e3ed766de47aba6693bb5af8a648974310
Validity
Not Before: Oct 3 17:01:50 2026 GMT
Not After : Oct 4 17:01:50 2026 GMT
Subject: CN=5e6a3d6fd9072a315ca6caf5aca9ef40f89552b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:3a:b8:9d:46:d2:23:c4:b5:a2:c2:05:b3:
6b:47:9c:fc:08:40:43:e3:73:5d:14:2a:d0:85:d1:
fd:33:0f:da:90:f3:0c:54:9e:63:b6:18:3d:7e:4c:
26:37:f9:29:56:73:80:40:f2:ad:f6:6c:b8:1b:3b:
23:c5:f6:fb:ba:79:0c:57:6a:36:66:92:99:d6:19:
0d:74:26:e1:a3:ed:02:ae:c3:56:4c:8a:fa:56:8b:
82:55:92:a9:95:1b:9e:8f:77:5c:a5:0e:79:12:43:
b5:33:87:a7:06:56:65:1a:2a:40:6f:77:77:f5:63:
17:a8:c6:fa:e7:43:4a:d6:be:20:af:28:2d:64:43:
e9:49:38:54:5c:9d:c0:15:1e:0c:c2:5e:13:d5:15:
c9:67:62:ca:81:df:51:7d:df:c1:bc:a7:d3:d5:61:
4f:aa:4a:6d:59:d9:63:90:e2:94:bf:b5:e1:6d:5f:
76:16:92:3e:d6:10:45:d4:48:c6:21:2c:c5:9c:cf:
7d:f0:d1:42:c5:64:92:72:80:3a:86:8b:e7:8c:3c:
1c:a7:a8:30:27:a6:f7:46:28:77:dd:4d:8a:28:a3:
6d:a9:87:92:d9:a3:0e:65:a8:12:7d:f2:dc:9c:ba:
a0:31:14:36:66:59:54:dc:b1:1e:66:ef:0f:a3:d9:
f0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6A:3D:6F:D9:07:2A:31:5C:A6:CA:F5:AC:A9:EF:40:F8:95:52:B9
X509v3 Authority Key Identifier:
keyid:9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:61:be:62:41:6a:56:4e:9a:72:22:da:0a:cb:12:87:f8:fd:
60:60:3d:77:66:c2:b8:ff:05:e6:87:e2:9d:6c:6c:8a:25:21:
6e:31:da:ed:64:74:6c:22:6c:2d:bb:62:2e:54:e5:ef:c5:41:
98:f3:29:74:fa:76:7f:00:d3:7e:62:e5:8c:13:da:7f:58:ca:
7f:63:2c:e5:1f:c2:65:99:36:98:e7:a0:11:f2:5f:01:9e:31:
45:ed:c2:78:4f:68:ef:1c:38:1a:86:27:da:b8:81:6c:fc:c9:
1f:15:ae:f4:96:50:5a:f9:c2:65:d3:62:4e:94:51:6e:f1:b4:
e7:c6:ec:e1:b1:fc:40:14:26:01:db:9a:a0:6c:af:ac:c4:7d:
06:d6:ce:c3:fd:22:5f:2f:34:e8:5a:df:13:82:21:32:1c:0e:
1a:62:77:be:5c:d1:cc:e9:9e:3f:2b:14:64:b6:97:e8:d8:0b:
ca:0b:35:9d:af:57:b8:95:c0:76:f0:51:14:31:ad:db:f9:33:
3a:89:1a:11:c8:07:7a:53:66:14:7a:17:58:52:03:1f:e8:73:
2f:12:76:1f:a5:16:41:dd:6f:be:9b:42:0e:10:d8:d3:f6:f4:
23:86:33:53:20:ea:c5:c7:ec:57:8b:b0:d4:60:3d:1d:b1:48:
82:0a:46:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:42:59 2026 by rpki-client