Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
File: 7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft (raw, json)
Hash identifier: 32EfC98HAcLCpHBz7wlhKzGuSk91+jvwVAckX1R0slM=
Subject key identifier: 27:55:6C:CE:F1:36:6D:FE:E9:B3:97:61:DC:15:27:3C:8F:85:9E:62
Authority key identifier: EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25
Certificate issuer: /CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25
Certificate serial: 01A0E1AB2DE1DC74EB4DD93ABEED70CCC7A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
Manifest number: 0DFE
Signing time: Sun 27 Sep 2026 07:01:26 +0000
Manifest this update: Sun 27 Sep 2026 07:01:26 +0000
Manifest next update: Mon 28 Sep 2026 07:01:26 +0000
Files and hashes: 1: 7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl (hash: OCiXZdPMATfvY3VSi8BtE9XiPo4tpUH6M6b9lRUaM0Q=)
2: 7LE1DEYT1ICWfMHoKNZXPCeUJQo.roa (hash: 6GDVwV7rQonMcBZu/ABynfjZj1iMGkNFh4pVQikYnrw=)
3: QxJ6dEmDHiw3lmS5PxMFumYPnck.roa (hash: aqxNNZjWenyXEE3qtSl1nU9WOF/JQO83RlkjXS7clZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:ab:2d:e1:dc:74:eb:4d:d9:3a:be:ed:70:cc:c7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25
Validity
Not Before: Sep 27 07:01:26 2026 GMT
Not After : Sep 28 07:01:26 2026 GMT
Subject: CN=27556ccef1366dfee9b39761dc15273c8f859e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:02:e0:13:33:96:83:87:3e:6c:52:6a:ab:ef:
93:48:48:58:fa:38:1c:f6:ae:e4:88:06:df:9b:70:
c3:5f:db:93:26:03:b3:7e:7f:8f:a9:b1:6b:ba:ca:
1d:74:87:ed:49:8c:2c:8f:cd:cd:64:be:77:79:eb:
5d:a6:15:2b:f2:7c:a2:cf:47:6d:36:c0:db:69:a8:
4a:50:dc:c5:49:7e:67:33:6f:6f:9c:50:f4:3f:5b:
63:c1:27:96:72:72:eb:f2:36:f4:e5:17:05:82:25:
5e:28:dc:3c:04:dd:e9:dc:34:29:af:b0:d9:fb:73:
73:6e:4b:a4:c2:17:ce:67:a4:12:73:00:06:0e:06:
52:db:6b:10:c0:66:51:98:3f:d1:fb:f6:62:45:a3:
55:6f:7d:c5:0e:3e:0f:7b:aa:eb:e7:9c:1a:65:39:
5d:27:d9:1b:4d:36:c4:cf:cc:72:e4:bd:e1:8c:08:
3c:76:0d:d0:60:bc:84:35:37:da:dd:ff:a8:10:eb:
3e:aa:51:70:2d:e7:12:ff:17:92:bf:bc:21:35:c4:
b7:b6:ff:09:37:8e:a4:cc:1a:0c:6e:cd:8d:ab:9c:
17:19:2c:5a:54:77:ec:71:b9:0f:8b:98:26:41:30:
1a:fa:ea:72:31:8b:c0:2f:07:a7:bc:2b:69:c4:6f:
79:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:55:6C:CE:F1:36:6D:FE:E9:B3:97:61:DC:15:27:3C:8F:85:9E:62
X509v3 Authority Key Identifier:
keyid:EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a6:23:08:02:d8:1f:57:2b:36:c9:aa:58:0d:6a:70:2a:18:
27:9e:46:10:d4:6f:1a:8b:f7:25:5f:cf:08:17:56:9c:5b:e0:
41:ab:4b:d3:2e:ca:f6:62:ac:db:d6:dc:c9:c3:40:fd:c3:8b:
b3:fc:8c:3f:69:34:5d:db:58:68:4b:fb:8a:45:18:57:50:9b:
d7:ba:4b:bb:b4:ed:c6:ce:2b:cf:ea:14:1e:fc:42:18:a4:19:
0b:e2:89:4d:66:7b:cc:b5:24:19:83:fd:41:e5:5e:9a:a9:02:
e5:cc:68:28:36:34:b3:94:3d:ba:a1:7d:f7:1d:c6:95:93:f4:
09:91:4b:7d:ab:fc:72:69:03:02:d5:c2:a1:db:7a:b8:0b:39:
91:54:08:92:6e:c6:d4:38:0f:d5:64:e6:7c:c8:ef:56:82:1b:
6c:81:a4:d2:b8:34:05:d2:18:38:f9:1d:45:0c:e6:90:26:37:
ae:94:80:af:11:46:e8:2f:0f:22:cf:8c:c8:ab:39:34:22:db:
b1:57:72:a5:c5:86:41:1a:26:4e:59:dc:7d:b6:f9:13:0f:f7:
3c:d6:2d:f3:ed:31:76:e1:80:5f:b3:a8:25:f9:dd:d5:1c:96:
ce:da:a8:76:1b:f5:9e:bb:80:2e:6b:77:3b:cf:ba:64:74:c7:
dc:dc:b0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:35:34 2026 by rpki-client