Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
File: fZ4KWRzFKRTMcA44de11qR7JjCg.mft (raw, json)
Hash identifier: ZoUc/AuhS9wKvscg3HRmexJVelJ/JD3eQDe21vVLNMY=
Subject key identifier: 37:7D:58:3E:4C:92:D0:6E:2F:37:E4:09:70:CC:64:59:06:50:08:17
Authority key identifier: 7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
Certificate issuer: /CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Certificate serial: 01A0D4CB1BDCBB081FC04F10E50179C8B770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
Manifest number: 1A75
Signing time: Thu 24 Sep 2026 19:01:15 +0000
Manifest this update: Thu 24 Sep 2026 19:01:15 +0000
Manifest next update: Fri 25 Sep 2026 19:01:15 +0000
Files and hashes: 1: WVSje2-V9hlvx2DHrLYafa4VndI.asa (hash: HgSXxrRDl778gx/DZsMfwInNr0fsVx40+FI5RHCVI9I=)
2: fZ4KWRzFKRTMcA44de11qR7JjCg.crl (hash: mUPwUJbUpz9RvH/WeyLojBpQGQ+IoOj2EkheL7PzUJ0=)
3: uGvI-YJiBZm_CX_Mfcpj7BMd7qY.roa (hash: hudIU2XaMQ5FOKPriX4aD5JP7Gpmax5hlY7F7k4okbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:1b:dc:bb:08:1f:c0:4f:10:e5:01:79:c8:b7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Validity
Not Before: Sep 24 19:01:15 2026 GMT
Not After : Sep 25 19:01:15 2026 GMT
Subject: CN=377d583e4c92d06e2f37e40970cc645906500817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:30:3c:5f:e0:ba:a3:55:57:b5:6b:5e:26:
14:69:c6:d7:83:f8:d5:1d:7d:33:8c:11:c8:ec:8e:
1a:5f:e3:ae:27:cd:c6:a0:e0:c4:50:a6:99:cc:04:
a6:18:62:38:09:ca:75:3b:7e:f2:f2:48:fc:d6:47:
a2:4a:77:f0:81:8a:cc:1b:39:28:16:15:c9:3a:90:
0c:10:f1:a0:53:8c:6b:44:12:1b:39:56:3e:30:06:
34:18:1a:10:70:9d:da:d7:5d:fe:7b:54:a6:3a:79:
98:ba:4f:66:20:d2:01:96:1c:95:8e:dd:8c:c7:f6:
b7:e8:b3:c5:5c:9a:2f:35:5a:96:9b:d6:a6:6d:e0:
11:fe:91:db:13:25:b9:9d:80:3f:9d:78:d8:b3:46:
3c:57:6d:fb:c6:7c:d6:3a:d0:af:df:77:63:23:ca:
4b:e9:b1:e7:d0:2c:b4:f2:75:4f:f8:94:d3:09:eb:
23:bd:c3:27:0e:5e:56:2b:7e:10:1e:26:e9:1e:64:
58:20:5d:5c:4e:70:dd:b3:1a:cb:34:0e:ab:76:e3:
2c:28:d8:ef:3b:42:03:d0:82:74:43:65:03:49:90:
cc:97:fc:e9:25:15:47:16:4a:3f:43:62:24:17:6a:
6f:48:36:c0:09:a0:63:56:de:92:d7:09:97:e4:83:
de:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7D:58:3E:4C:92:D0:6E:2F:37:E4:09:70:CC:64:59:06:50:08:17
X509v3 Authority Key Identifier:
keyid:7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:79:bf:fa:5e:21:0b:7b:97:c8:84:1c:21:bc:f3:6c:af:47:
de:1d:c9:df:da:3c:de:24:00:1d:f1:2f:c8:29:39:3f:00:6a:
3c:bc:58:6e:bf:d7:e1:89:4c:74:79:94:0e:bd:df:22:f5:68:
66:0e:85:e8:33:81:c3:20:4c:49:03:e8:58:b3:56:cb:db:50:
ce:e0:af:d4:bd:01:e9:fe:bb:36:2f:08:59:62:14:12:de:04:
01:33:e9:5b:9f:1e:82:31:ad:8b:95:b5:c7:dd:9b:cd:aa:3b:
e8:42:c5:59:e9:ef:a2:c0:f5:87:3f:df:5b:90:76:82:aa:4c:
30:96:cf:c4:59:a5:42:e1:1e:a2:d3:80:a6:26:a5:06:fe:7a:
21:48:1e:f4:58:d5:ec:7a:ed:41:06:3c:a8:14:2c:db:ab:86:
5e:fe:f6:e9:16:c6:d2:28:d8:80:76:c3:19:af:22:d9:5b:7b:
2c:a6:d4:84:11:16:e3:8b:28:9c:ef:90:59:55:d3:1e:83:b6:
51:86:ea:18:06:b0:d3:f0:b6:b4:de:f7:fb:3c:af:f7:88:c8:
5b:1c:7c:37:8f:bb:96:ec:85:e3:bb:b1:ad:10:5e:67:03:64:
ba:bb:aa:9c:31:01:05:a9:ed:ad:7d:f3:41:7e:e5:e5:fd:b8:
19:3e:85:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:59:56 2026 by rpki-client