Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.mft
File: 7m9I_I5rX9kh3jgFehSgwJioJjs.mft (raw, json)
Hash identifier: ddxocEARlK2maM7oVqPIHhbbpcUHziMQeVT1L+lUQb4=
Subject key identifier: 5B:E1:10:78:49:6A:FD:86:4E:F8:BC:D1:15:FA:3E:36:13:56:1C:76
Authority key identifier: EE:6F:48:FC:8E:6B:5F:D9:21:DE:38:05:7A:14:A0:C0:98:A8:26:3B
Certificate issuer: /CN=ee6f48fc8e6b5fd921de38057a14a0c098a8263b
Certificate serial: 01A129FAE7A60CE19C047464D71E8F70B83B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9I_I5rX9kh3jgFehSgwJioJjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.mft
Manifest number: B2
Signing time: Sun 11 Oct 2026 08:01:11 +0000
Manifest this update: Sun 11 Oct 2026 08:01:11 +0000
Manifest next update: Mon 12 Oct 2026 08:01:11 +0000
Files and hashes: 1: 7m9I_I5rX9kh3jgFehSgwJioJjs.crl (hash: 8wLICf8GsE5MKKOJfB2TmHWWxOpLuX3pbCxRew8aXGw=)
2: 9wwtrRgapHggpmafOoIRakXKgWA.roa (hash: 9XxZ7od9E/OVY/WT96L7AW+I7c7a65w9SdFXeI4vrKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7m9I_I5rX9kh3jgFehSgwJioJjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:fa:e7:a6:0c:e1:9c:04:74:64:d7:1e:8f:70:b8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f48fc8e6b5fd921de38057a14a0c098a8263b
Validity
Not Before: Oct 11 08:01:11 2026 GMT
Not After : Oct 12 08:01:11 2026 GMT
Subject: CN=5be11078496afd864ef8bcd115fa3e3613561c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:df:67:f5:c8:21:f7:6f:b3:a5:c4:3e:3c:
0c:0b:cf:60:5e:2b:ff:31:1e:dd:22:bc:ed:4b:7e:
98:6c:11:e5:38:e1:2f:98:22:6c:92:ac:09:1f:a1:
61:0c:5f:2c:b7:d4:09:b4:54:39:62:a7:53:66:16:
a0:75:e0:74:f7:93:a7:de:71:87:2e:57:cb:3e:2c:
1c:36:5b:88:b6:78:b2:8c:cc:5c:89:1c:71:16:cf:
4f:3f:31:05:00:cc:bb:62:73:f3:6a:a6:ef:ec:9c:
31:52:c1:28:b9:e4:74:8f:6b:dc:a5:08:46:ee:a9:
3e:f9:0f:4f:26:01:48:ea:b5:a7:f8:f8:9e:18:09:
3f:1f:6f:b0:a0:66:f1:95:18:97:14:2e:af:63:3c:
b9:a9:1e:79:1c:06:7e:e2:60:f9:a1:a5:bb:99:0f:
a3:ef:e3:bc:92:0e:49:63:f9:2b:a6:68:73:46:58:
d4:68:0e:14:4b:04:2f:21:cb:15:6e:a9:a0:74:da:
f1:5d:03:83:aa:5c:35:a7:a2:86:67:4a:d0:86:a2:
13:29:54:8c:73:b8:7c:66:e1:96:8b:62:ca:c8:26:
4a:63:31:1e:2b:93:97:1b:ee:1c:77:e0:c2:dd:7e:
5e:ea:2c:16:a8:5d:6f:69:9c:5f:37:13:67:56:86:
b6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E1:10:78:49:6A:FD:86:4E:F8:BC:D1:15:FA:3E:36:13:56:1C:76
X509v3 Authority Key Identifier:
keyid:EE:6F:48:FC:8E:6B:5F:D9:21:DE:38:05:7A:14:A0:C0:98:A8:26:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9I_I5rX9kh3jgFehSgwJioJjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:64:a0:98:f3:0a:b8:9a:09:8e:8e:69:26:2b:48:b6:c6:69:
bf:53:f0:4c:4d:b0:49:d4:fb:dd:1c:a8:91:8e:b8:52:10:d1:
07:4e:a5:15:31:c8:31:0f:8f:41:cf:2b:14:ec:24:50:bc:5f:
44:7e:e4:ca:2c:28:13:a7:01:e2:4e:1e:a2:6c:15:f9:1f:44:
7f:77:50:9b:cb:1d:4c:7f:60:32:11:70:da:29:69:c6:19:7d:
8a:bb:9d:cf:91:dd:76:e4:d5:b2:0a:7c:24:d2:23:d3:d1:5f:
43:83:1a:97:e9:0c:88:b4:2e:a1:ce:c4:43:27:17:26:5c:d2:
07:01:b4:fd:d7:36:86:68:01:bd:b6:b7:ab:54:32:2b:b2:bc:
33:77:b1:97:05:39:39:3d:6c:e6:b4:d2:44:ae:59:1f:83:84:
b9:4b:5a:75:8c:75:14:fb:04:2f:ff:7f:01:79:21:a4:5c:93:
2a:09:f9:a7:59:86:ea:95:b6:ad:46:04:db:83:91:c5:1b:94:
f5:e7:34:33:d5:a3:91:f1:f8:a1:bd:a3:4e:9a:2c:7b:b0:48:
4b:78:91:31:5a:6f:82:6f:43:92:5f:6d:e7:d1:71:43:8b:d2:
d1:3b:da:ea:c2:ed:57:be:de:40:57:66:8d:a4:e8:c5:a1:c1:
a2:76:2e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:00:54 2026 by rpki-client