Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.mft
File: p7FZxNPVH1oAMpYhpGRg7Y7h43Y.mft (raw, json)
Hash identifier: TNT+clfwWtgz2cETFEwkFhuGw2Q4CrV9MNvAl6CbOtI=
Subject key identifier: 9C:1B:EA:46:45:18:5D:53:B8:5A:D4:DE:B2:6A:4E:AB:39:00:BF:6C
Authority key identifier: A7:B1:59:C4:D3:D5:1F:5A:00:32:96:21:A4:64:60:ED:8E:E1:E3:76
Certificate issuer: /CN=a7b159c4d3d51f5a00329621a46460ed8ee1e376
Certificate serial: 01A0D8DF405E0C36BF429321425C2882D45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.mft
Manifest number: 4C
Signing time: Fri 25 Sep 2026 14:01:44 +0000
Manifest this update: Fri 25 Sep 2026 14:01:44 +0000
Manifest next update: Sat 26 Sep 2026 14:01:44 +0000
Files and hashes: 1: 446iU2iUtSCpiCvxa6ntvEqHvJE.asa (hash: XNtxkVgkkNUJbPUnKEA9zgscIN6i8nLzHGlvaFwLLcg=)
2: UCnDSTgchyE1qeXLpPxJeB9D6a8.roa (hash: 9gREJPHHNeNj4a7K+bK2FHfoOR8Wo3wM4kVwG6ZeXw0=)
3: p7FZxNPVH1oAMpYhpGRg7Y7h43Y.crl (hash: 1GsbkRzBVA8m7v3ag3vRHIre3tHlGqwTPrzJO2rGBao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:40:5e:0c:36:bf:42:93:21:42:5c:28:82:d4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b159c4d3d51f5a00329621a46460ed8ee1e376
Validity
Not Before: Sep 25 14:01:44 2026 GMT
Not After : Sep 26 14:01:44 2026 GMT
Subject: CN=9c1bea4645185d53b85ad4deb26a4eab3900bf6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:05:17:c0:ad:fa:e0:06:be:c4:a9:41:a9:58:
0c:30:15:1a:1a:4a:2b:d7:35:8a:24:4f:c2:1b:6f:
f5:a2:a4:e6:6a:00:87:d9:0d:62:51:5e:72:c3:70:
4c:1b:a2:dd:b5:35:11:16:da:9c:13:fa:bb:81:db:
7a:11:4b:24:d2:20:fe:d6:c0:dc:0a:a6:28:d8:10:
15:8b:46:b4:9c:4e:f0:e4:1d:c0:62:ef:7b:38:8c:
63:11:90:83:77:7d:17:c0:96:2e:a2:b4:c6:48:50:
46:35:55:07:7f:a6:14:a8:a2:df:41:07:1d:d3:ec:
8f:17:31:28:48:57:92:b7:b6:87:cb:2c:76:a3:52:
c6:78:81:45:b3:21:96:f2:a6:5a:17:0c:b7:e1:3c:
59:aa:d5:19:3f:8d:44:bc:c3:fb:f9:56:69:fa:b2:
80:59:2a:2c:c3:93:1e:52:09:0b:11:6c:c3:2b:25:
ee:69:d8:20:d5:59:41:b4:ce:08:dc:69:fa:56:fd:
b7:99:25:b7:85:c8:ed:3c:5f:dd:ff:23:36:b8:ac:
1c:e7:91:c0:75:56:70:ef:b0:77:11:5a:f5:9b:34:
fd:5b:57:5b:06:03:57:27:5d:fa:cb:96:d9:53:a8:
84:41:a3:16:ff:c9:b2:4e:1d:45:61:f3:af:4d:66:
37:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1B:EA:46:45:18:5D:53:B8:5A:D4:DE:B2:6A:4E:AB:39:00:BF:6C
X509v3 Authority Key Identifier:
keyid:A7:B1:59:C4:D3:D5:1F:5A:00:32:96:21:A4:64:60:ED:8E:E1:E3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8d:c0:7a:82:ff:e8:dd:74:f6:6b:87:1a:9e:5d:e3:93:f5:
38:32:db:f1:58:08:24:ea:f7:a3:1d:f8:39:84:b6:23:49:4e:
0b:87:ab:12:f2:c3:38:2a:17:b2:e9:f3:eb:e6:8e:35:e1:79:
2c:57:f0:9c:7d:2c:0c:02:ef:17:b0:b7:7d:e8:c6:a9:04:bc:
45:38:e6:34:ed:00:f4:89:42:7f:d1:4f:5d:9f:1d:74:e7:31:
f5:a4:4c:39:c9:2d:18:35:dc:1f:f6:35:f9:61:a5:f1:3d:07:
17:7e:31:7d:be:82:de:85:09:e9:0e:af:04:cd:e9:2b:2f:73:
f8:85:ec:3f:a1:5f:a7:a5:53:d0:df:e1:27:53:11:37:f1:dd:
1d:0b:78:5a:5b:60:ec:c2:48:95:bd:e0:8f:80:2b:01:7a:48:
9f:4c:eb:b6:27:6e:2e:12:3e:8b:77:a8:f9:e1:75:7d:63:7a:
9d:1c:0b:e4:b0:67:66:58:f8:6a:9f:70:4f:f0:5e:a0:a8:01:
57:7f:94:9d:73:17:62:95:d7:f6:5e:1b:e2:82:6a:a7:82:68:
2f:99:a4:f7:c9:81:8e:3a:cb:79:96:66:6d:59:5c:8a:2a:b6:
79:7d:87:54:a0:93:2d:70:7b:21:72:f8:e2:b6:57:32:52:99:
60:9b:7d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:20:17 2026 by rpki-client