Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
File: r7NIK47C52BYefhTpI26wGFF4bs.mft (raw, json)
Hash identifier: nnRRQu7TP1ubRm93GXc4iwtqR4DUssYXR07DLJRBVnA=
Subject key identifier: 83:C7:B1:BB:39:D2:15:1D:05:CC:7C:DB:B3:12:36:D4:BA:5B:0A:54
Authority key identifier: AF:B3:48:2B:8E:C2:E7:60:58:79:F8:53:A4:8D:BA:C0:61:45:E1:BB
Certificate issuer: /CN=afb3482b8ec2e7605879f853a48dbac06145e1bb
Certificate serial: 01A0D872D0491442C932F600BF01EEFA8D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
Manifest number: 010F
Signing time: Fri 25 Sep 2026 12:03:18 +0000
Manifest this update: Fri 25 Sep 2026 12:03:18 +0000
Manifest next update: Sat 26 Sep 2026 12:03:18 +0000
Files and hashes: 1: WBk7Na60wHxHk-VM6akyZtD9s1s.roa (hash: b2ttBqFw9+7/WWlQ+7GOBl/vDcoZ0Tf3cO+FRNRCiVU=)
2: r7NIK47C52BYefhTpI26wGFF4bs.crl (hash: jmE9scoPwsEor2nCG1B+lK17OrJ3PfIigysvVxdldaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 12:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:d0:49:14:42:c9:32:f6:00:bf:01:ee:fa:8d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb3482b8ec2e7605879f853a48dbac06145e1bb
Validity
Not Before: Sep 25 12:03:18 2026 GMT
Not After : Sep 26 12:03:18 2026 GMT
Subject: CN=83c7b1bb39d2151d05cc7cdbb31236d4ba5b0a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:c5:e1:ca:28:ae:ec:a9:a3:03:46:5a:02:
8f:be:dc:1a:37:41:2e:5c:aa:13:b2:a1:53:4b:5c:
c9:85:62:76:05:10:6c:42:28:a0:58:fa:b5:72:44:
9d:09:8d:58:99:6e:38:1f:38:c7:39:e8:41:5a:d7:
bf:8e:b6:d3:a9:d8:72:ae:a8:79:78:02:4f:20:5f:
73:e4:e8:c3:6c:a9:52:46:44:4b:08:dd:03:0f:a2:
a2:be:6d:f5:ac:34:9c:6e:82:b2:02:c4:cf:17:1e:
75:f2:14:63:fc:0b:03:aa:b6:d7:dd:d0:13:0c:76:
51:d3:15:63:48:de:1c:9d:c5:26:77:d1:f7:f6:9e:
19:d1:e6:45:29:66:e0:f9:4d:50:10:d5:85:c3:04:
2e:ea:02:85:a2:42:0b:57:89:85:1f:e7:01:b6:c9:
71:a6:40:55:77:07:54:c5:22:fe:c7:eb:72:31:32:
27:a0:dd:8e:ff:72:c2:96:af:64:10:07:f4:da:06:
36:b8:5c:73:f9:79:14:ed:76:24:2c:41:c3:22:3c:
08:2c:c6:c9:ac:aa:0f:96:d3:20:eb:8b:8e:66:10:
89:32:03:aa:88:fc:96:9b:eb:f2:13:1b:4d:e4:f8:
3c:cd:18:2c:f5:06:27:37:4e:e0:99:e0:cc:c4:67:
a4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C7:B1:BB:39:D2:15:1D:05:CC:7C:DB:B3:12:36:D4:BA:5B:0A:54
X509v3 Authority Key Identifier:
keyid:AF:B3:48:2B:8E:C2:E7:60:58:79:F8:53:A4:8D:BA:C0:61:45:E1:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f9:2f:3d:90:5d:89:56:05:c1:37:72:6b:f8:5f:41:6b:08:
50:11:f9:13:c6:b9:88:5e:1d:f9:fd:56:cc:f2:d0:5b:5c:a8:
6e:76:1b:e9:34:7f:09:d5:7b:7b:a3:68:3a:36:59:e6:a4:2e:
d4:8a:6b:e8:bc:21:3b:a8:d3:07:80:54:f1:76:6a:2b:98:32:
30:27:04:4e:0c:65:7e:0a:b7:f2:6a:e3:f2:41:51:9a:db:1d:
91:e8:9c:1b:5b:67:28:ff:26:5a:8c:64:02:c4:a4:e0:02:45:
cd:05:d5:e6:fa:66:0e:ef:90:fa:b5:3d:64:37:e7:06:81:e7:
37:61:c2:d8:79:d1:14:02:b2:51:b0:8d:c8:ca:15:40:70:3d:
68:cc:ee:6d:3d:b6:02:0a:aa:9a:4d:92:56:4c:68:d0:ea:ba:
2f:18:47:a7:52:1d:ec:58:57:bb:b1:27:95:23:3e:fe:09:37:
1c:ce:d6:15:46:d2:7e:e9:83:b3:be:4c:67:d0:9f:ed:fc:5a:
c6:7a:76:83:76:46:58:65:58:e9:b1:57:c0:8f:39:7e:76:91:
1d:f7:1e:a0:bd:57:1f:fa:d9:86:bf:64:fb:de:1c:6d:0e:6e:
3d:6e:ff:a1:95:5b:cd:72:e4:26:d6:43:ad:12:b8:49:3f:1c:
5c:11:84:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:43:24 2026 by rpki-client