Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json)
Hash identifier: Goe1Z/j4wsxL3uew02aHcdaccp/+g76pDGpnuZpxBDM=
Subject key identifier: EF:9A:17:D3:04:2A:0C:A6:EB:FC:A1:F6:DF:C2:94:15:AD:31:C5:9C
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial: 01A0D5020F5A34A5D02B68799499751C767D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
Manifest number: 1243
Signing time: Thu 24 Sep 2026 20:01:17 +0000
Manifest this update: Thu 24 Sep 2026 20:01:17 +0000
Manifest next update: Fri 25 Sep 2026 20:01:17 +0000
Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: lDzypzP0SMwktmiQZjPyqHfFpmEImrFBx4ClejtAXg4=)
2: rlgDOpAXjc8Na_ifPOhQG4zbxtM.roa (hash: reSEL9M69wAKbL5gRtqeNyqy/DyxKPTT8rPI7JNy6Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:0f:5a:34:a5:d0:2b:68:79:94:99:75:1c:76:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Validity
Not Before: Sep 24 20:01:17 2026 GMT
Not After : Sep 25 20:01:17 2026 GMT
Subject: CN=ef9a17d3042a0ca6ebfca1f6dfc29415ad31c59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:6d:c6:3e:c1:de:99:9a:1e:39:b5:b0:9f:
1f:cc:75:1c:a7:d9:e1:ed:37:04:90:5e:1f:b6:fa:
67:c2:93:af:62:64:e9:2e:40:f7:08:63:ad:e6:ef:
5a:f9:26:d5:bb:7a:db:71:e3:33:c6:f1:75:ed:32:
b0:58:d2:bd:a1:c3:8e:fa:e2:f3:df:4b:61:eb:90:
7f:8b:0e:2f:a1:a8:c6:3f:f6:c5:1c:86:67:64:64:
2e:68:16:3f:79:df:b6:45:34:40:a0:78:c4:6c:3d:
ed:b9:92:ea:7e:0f:fb:83:8b:08:8b:fe:25:ac:85:
15:80:41:f7:77:5e:6c:26:82:18:74:8c:89:80:36:
4a:bb:3d:3e:2d:8d:bd:b6:32:4c:88:8f:a4:64:d6:
58:43:6f:a5:2d:5d:5a:c7:e8:a9:3d:4a:cb:53:ca:
de:2b:bb:0c:56:02:d1:69:43:bb:ec:02:3f:4e:bd:
74:0b:a0:9c:58:c3:ba:06:d9:dd:15:57:6e:80:c4:
8c:c4:fd:94:9e:ca:13:e2:29:b8:b6:c3:84:d5:ae:
d3:91:dd:18:f1:61:dd:29:6a:76:23:8a:10:b0:a9:
a0:d1:5b:bb:75:29:ed:0d:db:ad:0e:89:26:e2:28:
41:27:3d:67:a0:eb:db:d8:b1:31:6c:67:fc:af:21:
e9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9A:17:D3:04:2A:0C:A6:EB:FC:A1:F6:DF:C2:94:15:AD:31:C5:9C
X509v3 Authority Key Identifier:
keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:78:1d:72:40:f1:ef:5c:9c:d8:45:f9:e9:6a:66:a1:ff:16:
66:fc:4c:bb:3a:fd:31:f0:d0:8d:5c:eb:c6:13:47:6e:1e:cb:
67:9a:cb:92:6f:1f:f5:c6:e9:ad:12:f8:22:b8:2f:d4:08:39:
5f:b5:9f:22:4d:0a:75:9b:9f:d8:43:ab:d2:90:2d:28:c2:b5:
ef:96:14:09:0b:98:d3:ee:d0:89:e9:df:d5:52:ea:12:6b:0a:
17:fd:ef:c1:57:5f:1b:60:ae:e4:4b:8b:1f:b9:cb:ff:d2:33:
e3:41:c9:57:6f:28:e9:00:dc:5e:3d:38:29:b0:68:61:54:91:
17:95:79:44:d5:85:f5:76:31:7a:73:1e:b7:51:5d:30:af:55:
6f:00:95:b0:0c:8c:84:ce:bb:2c:9b:80:94:c8:a6:4f:7b:b8:
41:7a:d0:72:bc:ae:83:56:77:52:ad:2e:88:be:50:25:b0:fd:
9a:f4:18:3d:09:f9:9d:c5:e3:f8:e5:86:05:3e:4e:c3:81:ad:
c4:fd:8a:a2:e0:cb:c3:42:00:61:06:0e:9e:14:ef:6d:b5:46:
0a:81:13:20:c4:36:f9:c7:c3:3e:47:4d:fe:df:83:d8:d0:ee:
f2:1f:a6:73:b5:44:99:f3:2b:4a:92:7f:13:28:ea:3a:a5:b3:
c6:b6:a6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:31:59 2026 by rpki-client