Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
File: 7N86SgXzcFD3wDedNPT0gUvSCd8.mft (raw, json)
Hash identifier: zP+0MJMdZjozlFD0KHMbsi4Douyr+z9jMY8U+XIWzis=
Subject key identifier: 5D:6D:7C:E1:3F:CB:C1:B2:D7:E7:78:53:25:19:B8:64:3E:7A:19:B7
Authority key identifier: EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF
Certificate issuer: /CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df
Certificate serial: 01A0CC6BEF42DC0BBC3C2A200E226C5F8AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
Manifest number: 05C3
Signing time: Wed 23 Sep 2026 04:00:20 +0000
Manifest this update: Wed 23 Sep 2026 04:00:20 +0000
Manifest next update: Thu 24 Sep 2026 04:00:20 +0000
Files and hashes: 1: 7N86SgXzcFD3wDedNPT0gUvSCd8.crl (hash: tZcNsN1n+5nzUQzKMB5kRcUrIgGm9q1b4RCrFHEn4KY=)
2: HRNjMQScROeFTp_2rmfTV1Pqr40.roa (hash: 66mHtRw/URStOe2xC3SxpwCWQ3KY1R/KgZMB+PrJKAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6b:ef:42:dc:0b:bc:3c:2a:20:0e:22:6c:5f:8a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df
Validity
Not Before: Sep 23 04:00:20 2026 GMT
Not After : Sep 24 04:00:20 2026 GMT
Subject: CN=5d6d7ce13fcbc1b2d7e778532519b8643e7a19b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ee:86:a6:5a:85:35:d2:cb:0e:13:2e:e4:4d:
e5:8e:87:ce:e7:83:78:9d:d9:fa:e4:1b:af:59:65:
df:84:0a:be:b4:60:98:c4:f1:d8:08:be:68:a2:8f:
92:c3:c8:b8:f6:51:b9:96:9e:41:7a:22:77:9a:59:
61:72:fa:26:f0:d9:a3:54:f2:77:1d:a5:dd:8d:66:
83:0a:a9:31:19:06:2f:10:aa:0d:77:50:fa:29:49:
54:79:22:bf:81:06:87:e4:a3:60:a0:16:10:10:95:
7a:ea:a1:db:5c:67:8e:3c:44:90:69:c4:ef:be:34:
c4:56:b5:a6:9a:79:c6:a7:bd:f9:67:7e:06:cd:1f:
66:ee:a9:a9:bd:78:e9:4e:fe:c5:86:19:d7:28:d7:
15:3b:5c:85:16:96:20:4f:1b:3b:0a:c4:84:cc:fc:
29:d1:61:0f:7e:62:fc:9d:89:93:2d:06:3d:38:e7:
35:25:4c:76:85:33:dc:fe:42:12:15:10:f7:fd:04:
85:b2:f4:06:0c:79:15:5e:58:e6:11:67:dc:58:cd:
84:e9:aa:cc:51:49:27:9a:40:95:c1:7b:9e:ab:e6:
50:26:ca:af:7d:39:80:23:32:3c:68:f5:63:3b:ef:
1a:9e:84:b2:0c:12:32:f3:77:4b:b4:d1:35:af:ae:
bf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6D:7C:E1:3F:CB:C1:B2:D7:E7:78:53:25:19:B8:64:3E:7A:19:B7
X509v3 Authority Key Identifier:
keyid:EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c0:d8:08:a6:38:0e:35:c6:0f:df:cd:82:4c:75:1a:5d:21:
14:f5:30:2b:a3:2d:8c:ec:c4:59:2f:8c:09:72:57:73:59:59:
8a:ee:22:d5:9b:31:0e:33:76:47:cb:4f:35:25:14:7a:74:65:
05:65:28:3b:0b:ed:b3:b6:13:15:06:1b:e2:ba:17:ce:2c:68:
97:a0:a9:99:1c:c7:4d:86:e0:da:a2:17:e9:6b:47:ca:bf:da:
3b:17:50:d4:b8:20:96:19:34:dc:84:49:0f:0a:83:7e:1f:92:
af:1f:a5:e0:42:7e:6e:2c:bd:d6:8b:0d:e4:00:e2:97:f2:cd:
d7:78:0f:9b:35:8e:6b:18:7a:e6:3e:34:1b:c0:0c:9c:f7:fa:
c9:e4:79:16:0c:2c:17:e8:54:1e:6f:99:66:a9:56:42:6f:85:
7f:f9:3a:97:e9:68:9a:20:61:b9:5f:02:d1:77:a3:8d:6d:c3:
d4:ab:2c:aa:6d:95:61:df:fa:97:35:ad:ea:20:9f:05:37:82:
76:27:92:f5:77:67:bf:d8:9d:bb:26:32:ea:51:58:c9:62:d0:
47:de:cf:12:22:8a:c4:9f:d8:a1:aa:ad:1b:a4:ad:89:e4:c0:
88:89:3f:44:42:fe:36:0b:b0:f6:62:61:a6:1b:f9:5b:28:74:
97:4a:2d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:24:06 2026 by rpki-client