Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
File: c7vCE8b5C9jwBxOerm_gyvpDXs4.mft (raw, json)
Hash identifier: aXqXYYVvr3oEvhhN3Knw9XOPelu/EVqnqgKgjxjdMfY=
Subject key identifier: 2E:D9:A2:4C:29:34:FB:D2:91:4F:96:53:96:27:2B:63:97:A6:D5:FF
Authority key identifier: 73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
Certificate issuer: /CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Certificate serial: 01A0EE540075EBBB27A62830DB7E75DEDDF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
Manifest number: 0F2E
Signing time: Tue 29 Sep 2026 18:01:17 +0000
Manifest this update: Tue 29 Sep 2026 18:01:17 +0000
Manifest next update: Wed 30 Sep 2026 18:01:17 +0000
Files and hashes: 1: c7vCE8b5C9jwBxOerm_gyvpDXs4.crl (hash: STGzfjH514XoEZ7i9wUuJ4a8jAjTbr8n+1fK6EXi//Q=)
2: s7ALXCsQ6iydnmcMndLJwyBEVrA.roa (hash: 2KKTFrZRTTsfpxmpCTn5aGO1P1QcLn41Vrt2Tl7hzrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:54:00:75:eb:bb:27:a6:28:30:db:7e:75:de:dd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Validity
Not Before: Sep 29 18:01:17 2026 GMT
Not After : Sep 30 18:01:17 2026 GMT
Subject: CN=2ed9a24c2934fbd2914f965396272b6397a6d5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5f:db:cf:d4:7b:1f:21:c8:ad:81:0b:8e:38:
fc:32:8d:30:34:34:38:1a:fd:d2:60:f4:23:f6:f8:
8c:48:16:88:2e:29:07:95:8e:5a:68:66:3f:20:84:
b3:9c:5b:3d:05:a8:dc:17:57:58:c9:7a:a7:15:63:
f6:ef:35:82:dc:e1:9a:a1:90:d3:e0:38:9a:58:15:
29:f0:0c:7a:4e:c3:07:fa:e2:a5:c6:2b:8b:3d:4e:
3b:5d:3f:2a:ad:15:22:f6:11:98:8e:a9:9b:45:2e:
f3:7f:15:f6:a0:dc:24:90:bb:37:93:4a:fa:91:99:
f6:ee:59:da:f9:a2:d8:d0:0d:3d:01:8c:b5:e1:2b:
97:a8:ea:f7:98:4d:f4:b8:af:77:f7:ce:2b:fa:a3:
99:30:1d:cf:da:41:f8:c3:7b:f3:76:58:9b:bc:71:
bd:7b:04:c3:21:8b:1a:5a:b5:ec:6d:51:d8:c7:b3:
b0:07:f6:e3:2d:a2:ce:d5:df:a9:d4:73:04:c5:64:
4b:56:4d:b8:80:c6:f2:c9:90:db:8e:c9:38:ee:87:
9f:b8:ea:bd:af:55:d3:a2:22:bb:90:1b:89:51:7d:
d4:cf:22:d3:3e:1e:dd:25:ff:ec:89:b3:c2:9e:19:
5a:27:88:5d:b9:96:22:72:da:27:90:a0:b0:c8:0a:
a2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D9:A2:4C:29:34:FB:D2:91:4F:96:53:96:27:2B:63:97:A6:D5:FF
X509v3 Authority Key Identifier:
keyid:73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b2:74:32:74:8f:81:99:15:0a:ff:92:bb:14:b7:06:ee:d0:
50:3d:f6:29:b9:40:73:55:35:52:93:37:90:25:d2:62:bb:b8:
4b:f4:31:04:d1:17:c8:08:66:97:d8:39:e4:5b:c4:98:13:97:
ed:cc:65:a2:89:89:e8:d2:b7:f9:6e:d8:ed:61:03:d2:f4:ba:
6f:cb:42:f2:eb:e7:2d:cf:ba:5f:c0:09:6d:25:91:91:7f:fb:
30:bd:1c:be:06:b8:94:79:e8:89:48:f7:cb:d8:f0:f8:e9:f6:
e8:d9:18:38:2f:cc:9d:81:b8:8c:90:00:45:38:50:52:83:5d:
39:cb:c4:6a:9f:b2:a7:c9:a2:81:27:65:36:7c:49:94:4c:b3:
8b:a5:fc:b9:fe:45:dd:be:89:c0:80:c5:cd:47:bc:f5:8d:f5:
4b:c7:4f:7b:e5:85:d5:86:17:23:86:4d:ef:a5:f9:c3:eb:99:
1c:67:4a:6f:c6:f4:97:57:4c:26:16:e9:59:e8:fb:59:ed:f3:
97:ab:99:5c:f4:75:95:8a:b6:5b:d0:f9:5f:d2:f5:93:63:91:
4e:f5:a7:64:f4:d2:8a:e0:dd:76:e0:05:6e:13:81:b5:1e:e9:
be:b5:c1:89:26:31:3f:47:8c:96:00:63:d4:88:25:3b:cb:56:
c0:aa:81:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:59:04 2026 by rpki-client