Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
File: _7ml8yjMMGUnzExHS9xLE6dGoag.mft (raw, json)
Hash identifier: /iBUi+9NeSKc9LYxBnaFpoJZh/bEVL1cVbuEBNaYRvg=
Subject key identifier: 21:26:30:AA:6D:71:1A:63:55:91:CB:A1:B0:C3:C6:A0:62:5F:E6:21
Authority key identifier: FF:B9:A5:F3:28:CC:30:65:27:CC:4C:47:4B:DC:4B:13:A7:46:A1:A8
Certificate issuer: /CN=ffb9a5f328cc306527cc4c474bdc4b13a746a1a8
Certificate serial: 01A10D70BADCCBA4A184DEF6D7B8BF5E288A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
Manifest number: 0290
Signing time: Mon 05 Oct 2026 19:00:53 +0000
Manifest this update: Mon 05 Oct 2026 19:00:53 +0000
Manifest next update: Tue 06 Oct 2026 19:00:53 +0000
Files and hashes: 1: TjUAHrNX6D8KKFwZiePYTV0m3bk.roa (hash: 61/mGPF5yOHT2ppU4Jvr6b/vuT6FmCh4sw4OsDecTfo=)
2: _7ml8yjMMGUnzExHS9xLE6dGoag.crl (hash: 0ON+CIyJ8SFjJdEOzwqcl3Bj2dR0UzwpPi6MEWBgv2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:70:ba:dc:cb:a4:a1:84:de:f6:d7:b8:bf:5e:28:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb9a5f328cc306527cc4c474bdc4b13a746a1a8
Validity
Not Before: Oct 5 19:00:53 2026 GMT
Not After : Oct 6 19:00:53 2026 GMT
Subject: CN=212630aa6d711a635591cba1b0c3c6a0625fe621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ad:e6:8a:bc:af:16:1b:ab:a3:d7:ee:60:56:
14:03:34:64:10:93:7f:39:67:f5:b5:ba:6c:92:3c:
7d:85:a9:78:24:a0:bc:48:a0:b8:3c:0b:ca:6d:89:
39:e4:72:53:89:57:7a:2a:c2:05:5a:63:22:67:31:
81:b9:5c:90:65:80:ef:7a:6b:4a:80:a1:ba:c0:03:
22:bd:fa:9c:6e:b7:25:0a:41:ef:88:61:03:26:79:
31:76:66:6f:5d:84:68:b6:e7:c9:d5:60:45:dc:8e:
40:79:5c:11:a1:ba:de:d9:c1:31:3c:c0:3e:6c:59:
55:6d:e6:6d:25:3f:f8:f9:b3:b9:a1:7b:b5:2a:12:
cf:9c:62:7f:42:a0:a3:14:5f:31:ab:ed:e5:c2:a4:
63:e1:b9:7c:54:10:59:c2:b7:a9:7c:91:09:4a:61:
5f:02:3d:24:66:0b:73:16:ba:75:14:23:b4:ec:7a:
6d:6c:b6:8d:8d:03:77:fe:50:12:90:18:a2:1c:f2:
74:36:8d:b2:f9:3a:fb:da:99:ba:60:9f:25:bf:94:
e6:2b:67:d0:8e:87:d6:31:3d:3b:9e:d6:2d:26:79:
34:f2:02:a2:d3:71:2c:57:b3:bb:2b:e7:bf:23:f8:
0a:11:d5:6c:f1:34:71:fe:4e:aa:d7:51:03:c1:b9:
ae:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:26:30:AA:6D:71:1A:63:55:91:CB:A1:B0:C3:C6:A0:62:5F:E6:21
X509v3 Authority Key Identifier:
keyid:FF:B9:A5:F3:28:CC:30:65:27:CC:4C:47:4B:DC:4B:13:A7:46:A1:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:63:a5:d1:56:7b:dc:ba:a1:26:fd:bd:88:9a:08:16:0f:fd:
24:e2:5e:1a:90:02:73:21:a0:6e:1a:48:e7:a0:32:ee:d5:c5:
f9:db:35:10:d6:5c:9f:bb:72:e4:f1:c9:9b:6a:82:ad:c8:bc:
14:26:e0:a9:a8:39:95:e5:19:3d:bc:c3:9c:9a:9f:82:4f:cd:
31:01:f8:bc:e4:bb:46:c6:34:78:b7:8f:c0:cf:ee:a5:b4:25:
60:bc:c0:bb:8e:4a:a2:f8:cc:a5:d9:e6:cd:88:7a:b1:9a:57:
53:2f:e9:41:87:bc:2a:b4:ba:4e:7e:bd:07:ec:9f:84:e2:d7:
d5:74:50:1f:a0:50:2d:64:9a:04:52:ee:2b:89:2c:82:e8:91:
0a:e3:c1:44:d3:16:12:2c:55:6b:4e:fd:ec:aa:8c:67:42:ea:
97:8d:96:8f:0f:24:8b:af:5a:9b:f4:8d:ba:eb:ea:86:c8:c4:
19:49:35:09:6f:b9:4a:31:b8:ee:66:54:5f:c7:73:9c:5f:31:
71:8b:ac:18:18:3f:47:99:a8:85:20:8d:81:84:0f:c5:ac:62:
7e:3b:cc:d7:cb:56:59:9e:e9:9f:2d:93:11:49:dd:8e:49:d0:
9e:3f:f2:19:24:a1:27:df:95:4d:1c:51:83:ed:07:5c:43:f3:
b8:89:d0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 06:26:47 2026 by rpki-client