Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/469ede-d1b0-475a-9483-ce603f554b38/1/7TgnbvJgDustyAwGvXFejwcItHg.mft
File: 7TgnbvJgDustyAwGvXFejwcItHg.mft (raw, json)
Hash identifier: yI734ZIFPNzYAmzvIwIrnZkoKECz5NABWX4Lpqty41s=
Subject key identifier: 56:9B:16:3B:4D:52:21:8B:92:E1:85:55:AC:16:6B:86:E2:37:22:E9
Authority key identifier: ED:38:27:6E:F2:60:0E:EB:2D:C8:0C:06:BD:71:5E:8F:07:08:B4:78
Certificate issuer: /CN=ed38276ef2600eeb2dc80c06bd715e8f0708b478
Certificate serial: 01A1DE02716A737AD11044DA28D3D60E3D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TgnbvJgDustyAwGvXFejwcItHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/469ede-d1b0-475a-9483-ce603f554b38/1/7TgnbvJgDustyAwGvXFejwcItHg.mft
Manifest number: 9F
Signing time: Sun 15 Nov 2026 07:01:04 +0000
Manifest this update: Sun 15 Nov 2026 07:01:04 +0000
Manifest next update: Mon 16 Nov 2026 07:01:04 +0000
Files and hashes: 1: 7TgnbvJgDustyAwGvXFejwcItHg.crl (hash: /m9PQHipCJNZMNc4I90AfrO1KwX6BOtA0uvVxzXeCQs=)
2: IUJZA7b5EFfPj2AuP6OvzE-kVN8.roa (hash: iEDPCNJtGGIgRvCxUPpd1kBhPeOc8HisaEWnJ+EyIDM=)
3: WcaEqokDUcCxjV-r4wArwvgzwG4.asa (hash: e7T4Gpeh43lW0lFdayBl+jdq1i9ss6pQiYVPvpEVpEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/469ede-d1b0-475a-9483-ce603f554b38/1/7TgnbvJgDustyAwGvXFejwcItHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/469ede-d1b0-475a-9483-ce603f554b38/1/7TgnbvJgDustyAwGvXFejwcItHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TgnbvJgDustyAwGvXFejwcItHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:71:6a:73:7a:d1:10:44:da:28:d3:d6:0e:3d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed38276ef2600eeb2dc80c06bd715e8f0708b478
Validity
Not Before: Nov 15 07:01:04 2026 GMT
Not After : Nov 16 07:01:04 2026 GMT
Subject: CN=569b163b4d52218b92e18555ac166b86e23722e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7a:5c:68:c5:31:1c:41:e1:43:a9:34:4b:f1:
af:4f:1f:b6:33:a6:80:19:19:67:84:cf:5d:58:47:
30:9c:fd:9d:dc:4d:43:8f:8f:e3:66:9e:f8:51:31:
6f:d7:2b:ac:d9:a9:b2:cd:c6:ab:ad:ee:33:78:70:
4d:76:86:bd:75:5c:5b:57:f0:82:72:cc:58:92:b9:
6d:dc:42:7e:5f:2b:e1:6e:75:30:cc:36:3c:26:82:
8c:af:f0:e9:00:66:bf:67:e6:d2:11:94:df:c9:e3:
4b:c5:9b:d6:64:16:93:e5:60:73:d2:d1:62:67:75:
e3:52:67:9d:aa:39:b1:d5:9d:05:d8:f7:4b:a5:97:
de:b2:fd:19:a7:62:ec:69:e9:78:f0:f6:98:26:67:
84:ec:56:cc:43:bc:c7:1a:f5:3c:95:24:4e:88:07:
8d:c9:55:66:d9:4b:f0:55:00:bd:c9:d7:9b:97:0a:
3f:b4:bc:f7:1a:5f:74:75:cd:eb:73:a2:dc:6d:b3:
b6:24:c5:70:02:cb:5b:b5:de:43:8d:53:e9:81:97:
24:17:7b:f3:b0:57:a6:c3:09:fb:28:ad:7a:0d:05:
0a:d6:ac:9b:4c:6c:2d:95:e8:61:23:b8:11:85:95:
c2:db:98:5b:69:6e:77:e8:4b:34:83:09:c8:c4:0b:
61:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9B:16:3B:4D:52:21:8B:92:E1:85:55:AC:16:6B:86:E2:37:22:E9
X509v3 Authority Key Identifier:
keyid:ED:38:27:6E:F2:60:0E:EB:2D:C8:0C:06:BD:71:5E:8F:07:08:B4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TgnbvJgDustyAwGvXFejwcItHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/469ede-d1b0-475a-9483-ce603f554b38/1/7TgnbvJgDustyAwGvXFejwcItHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/469ede-d1b0-475a-9483-ce603f554b38/1/7TgnbvJgDustyAwGvXFejwcItHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:fe:80:0a:ec:ba:1c:82:cb:6d:a5:2f:bc:49:13:6e:54:ae:
35:56:74:af:ab:d8:81:34:81:ea:96:95:55:ad:98:42:62:69:
26:5b:6b:a2:f7:82:09:6c:c8:ff:34:c4:bb:25:7a:8c:e0:bb:
0f:df:8e:96:8a:2a:bc:7c:35:59:bf:56:57:bd:fa:25:dc:c2:
08:24:20:62:e1:dd:25:08:57:0b:91:d8:d6:c4:1d:b3:9d:41:
bd:17:88:f4:fe:f3:32:ea:06:9d:8d:55:06:cc:df:84:26:ae:
9f:0b:b9:76:1e:f1:ae:19:40:89:e9:6a:c4:ee:b2:2d:20:28:
15:9f:69:17:6d:74:96:50:01:18:1c:b1:2b:e1:81:ee:8e:1f:
8f:b3:cc:8b:7f:d1:01:bd:53:da:4e:06:a9:3f:f3:37:28:14:
c2:d2:17:32:52:96:02:ed:54:81:7e:2b:78:89:a8:6d:c7:d4:
8d:a4:4b:b1:a5:26:ae:3a:25:2c:74:cd:dc:24:e7:1d:d0:c5:
88:91:e2:f8:8e:98:e6:de:6e:e1:14:fc:89:ad:b4:61:20:32:
4a:6b:86:27:7d:96:8f:97:f7:24:30:6a:9c:cf:be:77:67:8d:
52:15:d2:5d:89:c1:71:61:83:b1:58:a7:f9:2d:13:43:51:3d:
5e:b2:54:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:48:07 2026 by rpki-client