Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
File: m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json)
Hash identifier: O4NnoFERspb6vNTfO71w8vnAlFKKDWlZuIz9XqwtMTs=
Subject key identifier: DF:BD:3E:8B:F8:2E:BF:1E:BC:FC:9B:10:51:FA:8A:D0:4D:EE:77:3C
Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
Certificate issuer: /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Certificate serial: 01A0DF85E2160E4C3D6A01B79CA4A7DD8569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 21:01:28 +0000
Manifest this update: Sat 26 Sep 2026 21:01:28 +0000
Manifest next update: Sun 27 Sep 2026 21:01:28 +0000
Files and hashes: 1: SKpYBqwn6udQHU20Uf2pG2NVjSc.roa (hash: 0Drji27vy2Cr4dvgFBfhAgVdOvdDdCwXZsDdSfaarcA=)
2: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: 3SVozZX9wwlIAU1v1nJOx8bS4oa/W4dRDDUzNknKGWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:85:e2:16:0e:4c:3d:6a:01:b7:9c:a4:a7:dd:85:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Validity
Not Before: Sep 26 21:01:28 2026 GMT
Not After : Sep 27 21:01:28 2026 GMT
Subject: CN=dfbd3e8bf82ebf1ebcfc9b1051fa8ad04dee773c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b4:2e:7f:09:64:c1:15:c5:4a:9a:e8:94:fb:
44:2a:6b:b1:99:6f:6f:5c:c3:06:a6:77:d4:00:64:
f5:e0:37:b1:c5:d9:2e:db:d3:53:fc:08:c5:ec:00:
6e:41:40:eb:1d:3f:1b:ef:c1:74:5b:e2:f1:4b:e2:
f5:fe:c5:bc:10:c1:20:2c:47:d9:46:0b:7e:49:69:
dd:a5:b9:5b:3f:21:eb:f6:c9:6c:17:d1:df:16:dc:
4b:f6:a4:d2:50:b3:ab:a1:06:d6:f5:2b:17:dc:ad:
5e:c4:b6:1f:fb:5c:c6:a1:e7:f6:e2:62:f0:a2:ef:
c9:86:c0:2b:12:bd:cc:c2:a1:be:57:50:1a:11:59:
8c:ed:6d:10:61:26:4b:7f:91:29:17:4c:fb:66:46:
3b:5e:e9:83:b6:51:30:46:b3:79:ff:2d:b1:5e:a2:
77:7f:9b:69:e1:28:91:40:38:ea:16:a2:e3:1e:02:
2c:04:f0:54:e4:3f:4f:0e:e3:5f:d8:b5:7f:95:5b:
57:46:3c:24:e9:25:3e:1d:e8:69:1f:cb:be:b9:39:
b9:12:fc:c0:dc:d3:28:b3:19:cc:1f:e7:51:0b:dc:
df:ee:03:2e:18:dc:e5:2d:2d:6e:57:f8:a1:1c:ee:
dd:f9:17:e9:95:44:ed:a3:a6:55:af:e4:90:15:df:
4e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BD:3E:8B:F8:2E:BF:1E:BC:FC:9B:10:51:FA:8A:D0:4D:EE:77:3C
X509v3 Authority Key Identifier:
keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e1:35:f8:f4:a9:5c:e3:31:48:3c:2f:fd:2d:b5:7f:15:03:
46:a5:a4:5a:d9:3b:8f:05:ef:25:6a:0a:a9:fe:c2:f4:c0:36:
58:f0:d6:ba:1f:e5:60:06:b1:c3:2c:9b:ef:af:d7:a2:22:72:
f2:82:13:78:f0:ee:d5:73:2c:06:1f:10:6f:f3:89:1e:a7:f7:
ae:1c:07:5a:2c:f8:21:0d:54:65:69:26:e2:01:b8:44:48:a8:
6f:91:bd:fb:47:50:48:2d:44:d2:d6:3b:2d:16:c2:6b:cf:f5:
ff:db:b4:b0:3c:fa:7b:8f:39:58:b8:66:3b:76:1a:2b:f9:0c:
f2:72:d9:23:fe:ae:f0:90:9f:a0:fa:93:87:8c:79:a5:6a:6c:
bf:4b:9a:1f:8f:11:f7:38:34:61:e5:a2:88:e4:86:6e:6a:de:
ff:58:2e:50:51:bd:72:68:ca:d2:de:f1:f4:f8:94:09:4d:6a:
45:38:cb:75:c3:4e:1a:ea:e4:9a:b2:e4:52:a2:b2:20:fa:39:
eb:e1:88:f3:42:bd:bf:fa:e6:67:6b:ef:08:42:49:6b:57:7e:
b1:c9:f2:08:a9:9c:c9:3c:18:89:84:66:42:90:7b:81:91:f1:
8d:89:84:61:0e:10:9a:31:cb:93:13:00:36:58:ed:e0:46:95:
96:68:55:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:57:06 2026 by rpki-client