Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
File: 7D09fly_GK9mt_W0peCsGezTmHY.mft (raw, json)
Hash identifier: X2AxDojSfqvQOqc3OouRPFzWdD3xELle31sBDvJKc2Q=
Subject key identifier: 87:EB:2F:0D:37:A2:A7:D4:78:BE:BD:8D:FD:F0:1B:B3:8A:C9:92:19
Authority key identifier: EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
Certificate issuer: /CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Certificate serial: 01A0D0EDDFA96FA4A98D8964A8415F10A18D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
Manifest number: 1A6A
Signing time: Thu 24 Sep 2026 01:00:45 +0000
Manifest this update: Thu 24 Sep 2026 01:00:45 +0000
Manifest next update: Fri 25 Sep 2026 01:00:45 +0000
Files and hashes: 1: 7D09fly_GK9mt_W0peCsGezTmHY.crl (hash: Q2su5/r9CNKMLAJwhQQ5ONzo04TH1dv4qPogctxGabc=)
2: nN1vJKXnh7cBHLy2sd7dD0QgOGI.roa (hash: 5guFUg6Oi5MmxQ+r87vyLbR34PherKnPHqG39PlmmF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:df:a9:6f:a4:a9:8d:89:64:a8:41:5f:10:a1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Validity
Not Before: Sep 24 01:00:45 2026 GMT
Not After : Sep 25 01:00:45 2026 GMT
Subject: CN=87eb2f0d37a2a7d478bebd8dfdf01bb38ac99219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:72:de:f8:34:49:61:22:91:48:a0:de:6a:ed:
b4:6d:af:50:ba:49:8d:30:c0:f8:7b:7b:a2:55:f3:
9a:18:e6:f2:9f:63:d4:25:be:6e:37:55:b0:16:14:
ba:cc:f5:bd:50:4b:81:8f:0a:de:70:82:96:e4:08:
03:e9:96:be:43:97:13:b2:21:bc:ca:f7:7b:b8:c9:
ef:22:ea:5e:d9:b5:09:2f:f7:12:4a:a0:a8:c0:2f:
1d:53:f7:77:26:0b:0e:ea:b5:87:be:a6:e1:ee:4f:
fa:22:1d:5a:b7:24:98:9f:9a:7a:00:56:cb:f2:a1:
7c:e2:55:aa:db:ba:bc:f5:39:5c:d4:c9:18:01:e8:
7a:aa:62:c1:2b:6c:0b:23:b2:64:7b:2a:cd:d2:ed:
a2:c0:e1:6a:57:0f:77:f5:f1:7f:69:55:54:0d:1e:
20:92:35:29:55:54:81:66:e6:22:31:de:5f:ab:b9:
49:90:1d:3a:9b:6b:64:47:33:3f:aa:c7:04:0b:ff:
5f:c7:42:48:1b:28:83:06:1f:48:30:b4:61:c0:44:
04:d2:aa:7e:6a:13:d8:ef:e6:84:c7:12:0f:3f:60:
a1:10:c5:e7:02:4f:31:83:a6:13:ac:a6:f1:18:0b:
a5:73:5c:97:82:33:1c:4e:66:86:43:ef:63:14:30:
61:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EB:2F:0D:37:A2:A7:D4:78:BE:BD:8D:FD:F0:1B:B3:8A:C9:92:19
X509v3 Authority Key Identifier:
keyid:EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:8d:44:25:b7:9f:6e:0f:b8:51:64:f1:fc:bc:7a:7b:60:97:
2f:12:69:44:43:c9:a2:90:d1:00:04:f9:80:4e:e2:d9:26:fb:
01:0a:02:d7:00:53:f2:01:73:de:2f:5a:8d:8e:a5:31:e1:02:
30:ec:7d:b0:80:42:e0:ac:97:bb:76:c2:27:0b:bc:cc:1f:f6:
5f:76:d6:4b:99:59:25:eb:18:65:e6:b0:fc:ac:62:33:4c:8f:
34:b7:40:05:20:a2:ec:2c:11:1e:ac:23:39:87:74:16:05:13:
5e:15:ec:9f:ed:0d:58:9c:52:69:89:a7:ae:9e:7e:f1:98:64:
d1:36:27:06:ae:de:cb:ce:8a:45:ff:c3:c8:e2:ca:93:15:21:
51:cf:9a:d9:6d:98:38:45:45:9f:d7:89:e4:af:1c:2c:3e:d9:
3a:8c:66:3d:00:98:68:3e:1e:61:9a:8a:55:f3:72:34:e5:bb:
ae:a4:88:62:56:15:54:67:53:d3:77:7d:04:13:d2:1c:bd:cb:
45:65:77:b6:4a:80:16:41:b8:0c:c8:9d:90:c1:03:99:25:0b:
ca:c2:a0:b7:f4:ad:eb:15:a0:25:6d:a3:2b:9d:de:1f:db:77:
a4:29:95:3d:0e:65:9b:da:f0:42:9d:6b:cc:37:b8:89:0a:a5:
57:5d:59:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:28:01 2026 by rpki-client