Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/f3f16e-e767-445c-a72d-df6380bfe397/1/7HVYhFTxsSN7eIOtois0_FB7VWg.mft
File: 7HVYhFTxsSN7eIOtois0_FB7VWg.mft (raw, json)
Hash identifier: VUwiSXNcpieZnJ4a6I9DS7KwAXdAML+MwutdRdCnbek=
Subject key identifier: 42:BE:C0:77:0A:99:F8:CF:66:07:1D:B1:87:84:55:18:B7:E7:8B:7A
Authority key identifier: EC:75:58:84:54:F1:B1:23:7B:78:83:AD:A2:2B:34:FC:50:7B:55:68
Certificate issuer: /CN=ec75588454f1b1237b7883ada22b34fc507b5568
Certificate serial: 01A0D0B6795B21EFA166183DAD0384AB32E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HVYhFTxsSN7eIOtois0_FB7VWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f3f16e-e767-445c-a72d-df6380bfe397/1/7HVYhFTxsSN7eIOtois0_FB7VWg.mft
Manifest number: 5B
Signing time: Thu 24 Sep 2026 00:00:14 +0000
Manifest this update: Thu 24 Sep 2026 00:00:14 +0000
Manifest next update: Fri 25 Sep 2026 00:00:14 +0000
Files and hashes: 1: 1Ml07Zoq9xFydN___PIY9YbRimI.asa (hash: c2k42ZaNNMj7J31daXN1IPm9OoMw/5ub5F9Xmj4q030=)
2: 7HVYhFTxsSN7eIOtois0_FB7VWg.crl (hash: 2l8ThLcr/ZlJg5MzorGxiKClwYTIq5HuBkZj6hAD4jQ=)
3: PFdNG59hViBuTeuoCVBzzNT9hdQ.roa (hash: Hx8oG/Q221sL5UYo+YmyawYwdY2esddKYwNfw416Y5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f3f16e-e767-445c-a72d-df6380bfe397/1/7HVYhFTxsSN7eIOtois0_FB7VWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f3f16e-e767-445c-a72d-df6380bfe397/1/7HVYhFTxsSN7eIOtois0_FB7VWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HVYhFTxsSN7eIOtois0_FB7VWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:79:5b:21:ef:a1:66:18:3d:ad:03:84:ab:32:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec75588454f1b1237b7883ada22b34fc507b5568
Validity
Not Before: Sep 24 00:00:14 2026 GMT
Not After : Sep 25 00:00:14 2026 GMT
Subject: CN=42bec0770a99f8cf66071db187845518b7e78b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b8:e8:12:20:16:a8:51:52:c5:86:ba:fa:97:
ad:92:70:bf:37:7f:52:08:b7:0c:c2:5e:52:fd:69:
8c:7d:2d:34:56:82:1f:9c:0f:91:aa:9a:85:be:c5:
47:1c:e5:c9:9e:8b:ec:a1:9e:c2:b0:78:7b:b7:06:
f2:45:20:af:cb:1f:53:8f:9b:15:59:1a:be:29:74:
4d:a2:67:48:d4:f9:0c:c0:43:3f:ed:68:18:62:5f:
22:f2:c9:10:75:d6:4e:7a:e1:e1:27:76:e4:fa:aa:
cc:92:e8:4a:7a:ad:3d:c3:1d:7c:17:8e:02:b1:dd:
7d:6b:15:12:a6:9d:f3:34:22:b8:88:1b:1d:2b:46:
9d:fc:82:4d:34:5e:9d:40:d0:39:b5:ec:b9:0c:d1:
23:8f:37:bf:fe:de:7a:3c:9f:ed:eb:98:95:c0:53:
eb:af:03:eb:2f:ed:b8:94:82:00:83:66:72:30:eb:
2a:ff:e9:d1:fd:a9:e1:c4:fe:22:8e:60:83:23:87:
0a:32:48:be:df:93:9b:a0:0b:bf:ff:1b:6c:78:de:
7e:9a:cf:31:1e:78:58:a4:08:7b:68:69:49:f4:b5:
1d:20:c8:e6:89:39:b6:54:3a:d4:85:49:a5:fb:f0:
fb:1f:5f:04:21:74:ce:8d:8d:77:68:5f:28:f7:83:
10:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BE:C0:77:0A:99:F8:CF:66:07:1D:B1:87:84:55:18:B7:E7:8B:7A
X509v3 Authority Key Identifier:
keyid:EC:75:58:84:54:F1:B1:23:7B:78:83:AD:A2:2B:34:FC:50:7B:55:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HVYhFTxsSN7eIOtois0_FB7VWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f3f16e-e767-445c-a72d-df6380bfe397/1/7HVYhFTxsSN7eIOtois0_FB7VWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f3f16e-e767-445c-a72d-df6380bfe397/1/7HVYhFTxsSN7eIOtois0_FB7VWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e7:30:f4:ff:c3:5b:7a:5e:54:69:51:b2:3c:1d:97:b1:c7:
40:70:e5:59:77:6a:fb:c6:bf:45:8b:e8:44:cd:4f:23:d7:f9:
b6:a4:92:0a:03:f1:ea:1e:7f:52:b1:e9:ea:c1:49:74:75:ec:
45:b9:a4:02:38:79:2a:1e:13:26:6a:f7:c1:b1:41:59:6a:6d:
83:91:4c:71:bf:5a:ca:17:bf:50:60:8f:20:e5:aa:d3:96:57:
22:c1:d1:4a:42:37:00:dc:0a:b7:a3:c8:83:fb:67:bb:7a:f5:
2c:33:06:e5:1a:79:f7:06:94:9d:a9:f5:f3:01:4c:37:0f:f2:
dc:95:1d:80:0d:1d:15:1e:63:7f:61:5e:33:32:e2:ef:97:8a:
17:d9:06:8c:92:20:c9:9b:ed:98:b2:df:fb:48:07:68:cc:66:
61:ee:9f:73:75:6e:8c:ff:dd:86:ff:86:8e:2f:d8:be:ae:65:
fb:3d:e7:84:f3:08:64:14:0c:4f:f9:fd:13:81:21:5f:53:82:
9b:e0:48:79:13:43:7f:68:96:41:c3:b3:49:cc:55:51:da:d0:
75:e0:3d:ff:a9:84:10:3b:bf:e9:a2:65:86:4e:1c:ea:eb:8b:
88:70:bb:a0:2e:af:d2:dd:fa:8a:64:e2:84:b9:7b:c4:65:c5:
36:59:91:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:01:14 2026 by rpki-client