Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/m7pRyuell0rHz4V0NLcfil9mSwc.mft
File: m7pRyuell0rHz4V0NLcfil9mSwc.mft (raw, json)
Hash identifier: WeUqDRzjkclWQwIiAufdYPD7MxHjErmRBibcu5hLp7E=
Subject key identifier: 49:AF:98:45:ED:68:CF:A9:C9:FE:22:64:16:87:E5:93:0E:2D:54:69
Authority key identifier: 9B:BA:51:CA:E7:A5:97:4A:C7:CF:85:74:34:B7:1F:8A:5F:66:4B:07
Certificate issuer: /CN=9bba51cae7a5974ac7cf857434b71f8a5f664b07
Certificate serial: 01A0BCC2C852956925946EDFCC420C205B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7pRyuell0rHz4V0NLcfil9mSwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/m7pRyuell0rHz4V0NLcfil9mSwc.mft
Manifest number: DD
Signing time: Sun 20 Sep 2026 03:01:16 +0000
Manifest this update: Sun 20 Sep 2026 03:01:16 +0000
Manifest next update: Mon 21 Sep 2026 03:01:16 +0000
Files and hashes: 1: AUt5aEe9I9r-_yYGhcti899JX80.asa (hash: W9/s7qsjqgi329110nptyxROIVauh37lCo9hMcGLc8E=)
2: m7pRyuell0rHz4V0NLcfil9mSwc.crl (hash: aelTP8DW6QC49EzdlDYfOliVTJh0aq4vz81HElYy2lc=)
3: nT0adKrHOXX76zlKbeIetM2fImw.roa (hash: mcJKLegTxunUDPkoN6855luXrU9XjcS8d14LoXoBwZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/m7pRyuell0rHz4V0NLcfil9mSwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/m7pRyuell0rHz4V0NLcfil9mSwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7pRyuell0rHz4V0NLcfil9mSwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:c2:c8:52:95:69:25:94:6e:df:cc:42:0c:20:5b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bba51cae7a5974ac7cf857434b71f8a5f664b07
Validity
Not Before: Sep 20 03:01:16 2026 GMT
Not After : Sep 21 03:01:16 2026 GMT
Subject: CN=49af9845ed68cfa9c9fe22641687e5930e2d5469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:49:ce:10:3c:50:09:ad:ff:b9:7b:d0:dc:
ac:c8:2e:84:7b:4b:4f:75:0b:89:19:da:e6:7b:7c:
be:3d:fe:a7:88:3d:a1:e2:9b:84:59:80:c3:5e:72:
54:a3:9b:94:3c:30:8a:e2:9e:30:0d:af:cf:e4:46:
81:d4:73:18:98:12:5c:7e:ab:75:32:ef:32:c5:e6:
59:a4:b3:d8:b9:16:61:7b:de:f2:cd:87:ef:da:99:
8b:ed:ca:ab:ed:b8:a5:3b:55:3d:f5:bb:76:7c:71:
51:ea:a2:13:41:7c:50:93:03:ec:40:eb:24:cf:eb:
be:63:83:e5:5a:f5:c1:9f:73:f2:aa:92:42:5a:41:
5f:1e:63:78:96:1f:68:3e:2f:91:c6:2f:f5:37:9d:
28:52:fa:75:a4:12:5d:e0:3f:62:3f:07:b1:60:84:
34:1d:2e:06:39:32:d2:ca:53:44:e6:f6:48:4d:27:
4b:25:08:d6:75:72:14:df:3a:e4:5a:98:1c:f7:b9:
21:d0:20:9b:91:c0:9a:6a:02:6e:d6:30:9c:81:23:
99:19:19:3e:24:24:76:87:7a:44:ce:11:43:06:d0:
60:d2:1e:97:ce:11:30:62:24:2a:9a:a5:bd:cd:32:
f8:d8:4d:c3:3c:50:3d:e2:fd:82:ad:61:10:78:e4:
25:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AF:98:45:ED:68:CF:A9:C9:FE:22:64:16:87:E5:93:0E:2D:54:69
X509v3 Authority Key Identifier:
keyid:9B:BA:51:CA:E7:A5:97:4A:C7:CF:85:74:34:B7:1F:8A:5F:66:4B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7pRyuell0rHz4V0NLcfil9mSwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/m7pRyuell0rHz4V0NLcfil9mSwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/m7pRyuell0rHz4V0NLcfil9mSwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:47:ef:89:1d:e7:26:54:5c:cb:38:83:9b:b9:de:34:81:c2:
ea:68:ae:81:cc:2b:f8:ac:91:66:e1:f9:b6:dd:39:a6:1c:de:
5c:2a:77:c8:f3:22:0a:1a:ca:87:6d:05:2d:59:49:30:2a:e9:
6b:a4:36:e4:be:d2:0a:97:17:e1:92:e0:8a:f3:52:1d:a0:01:
1e:66:88:d6:41:aa:09:a4:9f:37:0b:5d:92:81:bf:be:5f:50:
30:18:70:67:f1:7c:f5:f4:f8:af:a8:13:af:58:58:29:d0:67:
11:a9:e6:3e:58:bc:5a:39:34:c2:61:66:7d:96:f1:0a:96:bb:
1e:29:02:a6:53:a1:03:19:39:c2:4a:fb:2a:d2:ad:ac:3c:d2:
98:f7:53:03:84:d4:37:b3:84:42:c0:89:32:cb:31:44:84:e1:
80:68:c4:f2:8f:13:f9:4c:e5:63:23:62:e1:9c:fd:5e:68:89:
d2:8f:34:20:a8:de:a0:32:0d:ea:91:44:46:31:b2:da:e1:51:
0d:d9:8b:c9:f3:23:68:2e:08:2b:f7:e5:8a:79:7f:b8:d0:43:
59:ce:dd:76:a2:f2:58:49:c0:cb:d9:59:9e:2c:9f:fc:83:36:
49:5e:17:d1:13:53:e0:a1:8a:71:19:d7:2c:1c:88:bc:d1:42:
d9:65:23:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:48:15 2026 by rpki-client