Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
File: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json)
Hash identifier: jlXjwunmqiqFCnbe/i2XsMvSpLs8I2AoWe+txTyMD4s=
Subject key identifier: 80:20:71:D9:37:98:DF:CE:37:C8:B2:04:1B:95:83:8F:F8:76:F4:2F
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Certificate issuer: /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial: 01A0D3F065E2D6B94AA1D00A0969FDB22E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
Manifest number: 1A6B
Signing time: Thu 24 Sep 2026 15:02:22 +0000
Manifest this update: Thu 24 Sep 2026 15:02:22 +0000
Manifest next update: Fri 25 Sep 2026 15:02:22 +0000
Files and hashes: 1: 16IES9haatKMkP-HejVSazJdMkY.roa (hash: mQPtnV+K2FeabOm74g9Ubv3nHZo4wLPT4wK0cMDSkes=)
2: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: nFSHitNg+ocCyTUYhaA7+NoJQYYL6ERPq8oFYGe/vxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:65:e2:d6:b9:4a:a1:d0:0a:09:69:fd:b2:2e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Validity
Not Before: Sep 24 15:02:22 2026 GMT
Not After : Sep 25 15:02:22 2026 GMT
Subject: CN=802071d93798dfce37c8b2041b95838ff876f42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:01:6e:de:d0:40:e2:59:2b:68:15:d5:38:8b:
f5:d3:e4:4e:37:ff:a5:9d:0d:5b:b9:6d:dc:12:eb:
de:9d:8f:10:f6:6b:4e:a5:eb:3f:dd:f6:6c:67:88:
e2:5a:51:4b:fd:94:cb:18:7a:9b:f7:6b:f3:fa:4a:
cd:c3:49:06:b3:6d:b0:22:24:a1:53:9e:68:a2:de:
ba:3c:b3:95:dc:50:95:b3:4e:a3:6c:60:1e:9a:ae:
98:4c:d2:2c:ea:5b:2c:1b:e6:13:a2:db:f8:c4:70:
65:7c:51:ca:e0:bb:f6:4f:13:43:ef:32:ed:2b:2f:
2a:cd:c5:93:2d:2f:6f:be:7f:2e:1b:9c:17:26:bd:
55:63:9f:77:5c:70:4d:d6:3f:a0:14:52:57:d1:da:
47:98:01:22:99:c4:a2:53:16:a2:40:94:0d:79:ff:
0f:d0:2b:08:43:96:79:2d:7d:b9:e8:d9:d9:39:34:
17:aa:8e:82:8f:62:ce:e3:fa:d5:3f:26:32:f4:d7:
a1:3e:44:01:78:24:41:ee:92:be:79:bd:e6:26:a6:
5e:74:7c:12:86:94:d1:af:67:9d:53:3a:ff:64:fa:
a4:a9:21:ad:ab:62:3a:cd:3f:c5:02:98:63:19:93:
34:59:59:5c:e0:f8:7e:9c:b2:77:1f:4c:67:83:bc:
f2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:20:71:D9:37:98:DF:CE:37:C8:B2:04:1B:95:83:8F:F8:76:F4:2F
X509v3 Authority Key Identifier:
keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:cc:b4:91:5e:7c:00:af:8f:e1:91:98:4f:b8:6a:ad:2c:30:
a9:f9:4c:86:30:df:2b:c4:a0:3a:84:35:22:6a:0d:30:f6:c4:
c9:ed:56:77:65:c7:85:70:3b:94:91:cf:6d:d1:24:79:01:4a:
df:16:8c:8e:5a:d3:87:75:1e:ef:6d:44:53:65:fe:57:61:75:
fb:25:9b:e0:6f:9e:78:90:c3:7a:fc:e8:3d:55:85:1e:8c:45:
7b:e8:ab:84:8c:d2:44:49:47:f6:24:91:8d:4b:37:b0:87:10:
5b:80:95:34:ca:3d:8c:5e:8c:b9:39:cf:77:09:e6:53:d2:ce:
a9:c9:ce:91:f9:b7:d3:de:37:86:7c:fc:78:27:33:53:40:36:
a2:41:33:5b:64:bf:3a:65:46:86:09:c3:99:3e:4e:02:ff:01:
42:61:72:5a:de:d0:c3:74:8d:89:5c:0f:99:e3:7f:7f:7c:cb:
25:ac:6f:e5:49:84:58:5c:da:14:87:0c:fe:a8:9b:f0:4e:eb:
ec:85:26:41:91:50:09:4e:f6:1a:87:1d:d2:d0:65:90:10:52:
d8:0f:99:97:91:6c:3a:ca:43:63:93:9e:ad:1d:78:25:15:a2:
6c:ab:7f:a5:a3:1e:1c:12:14:06:a1:4d:24:24:d9:41:df:38:
1c:82:b9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:34:04 2026 by rpki-client