Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
File: 7zGgVPyftLFH6KmL2n5xyBrwvP0.mft (raw, json)
Hash identifier: Fj0llXZeaR6H5oQ+ht+AMroFXnMo/6Ot2MNUywp1Xv4=
Subject key identifier: 17:59:31:39:4F:1E:88:E6:11:49:AD:83:9F:30:5D:05:12:57:23:B9
Authority key identifier: EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
Certificate issuer: /CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Certificate serial: 01A131EB4D0835C8831734A908D3684557C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
Manifest number: 1AA1
Signing time: Mon 12 Oct 2026 21:01:06 +0000
Manifest this update: Mon 12 Oct 2026 21:01:06 +0000
Manifest next update: Tue 13 Oct 2026 21:01:06 +0000
Files and hashes: 1: 7zGgVPyftLFH6KmL2n5xyBrwvP0.crl (hash: d3DvM0eLv8QOAclAHNhreQOiBBjlWMYvnv6h2IYAvoM=)
2: RwU9zWthyfSOUWuvsWlsVhpMbmQ.roa (hash: 74TavDCjufR6GUNTwdp6AJnNFnxix31gx+8KWS5C2g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:eb:4d:08:35:c8:83:17:34:a9:08:d3:68:45:57:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Validity
Not Before: Oct 12 21:01:06 2026 GMT
Not After : Oct 13 21:01:06 2026 GMT
Subject: CN=175931394f1e88e61149ad839f305d05125723b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:1c:95:df:8a:cb:55:59:b5:0e:9e:6c:39:
15:b3:3e:34:47:9e:99:3f:c0:b3:94:f0:79:53:ad:
52:d3:9e:6d:50:f0:1d:3c:52:ff:52:94:25:d7:7a:
92:36:b8:b4:85:83:2e:d9:db:2b:8a:8c:25:47:b7:
da:7d:ce:21:9f:99:d8:9e:2e:1d:5d:4d:9c:b3:6c:
47:3d:da:20:71:db:3b:05:7f:bd:60:6e:24:76:39:
c0:d8:14:a5:03:ec:59:2d:2b:28:78:69:ef:05:0e:
e7:31:eb:b3:31:49:2d:f7:c3:6d:d4:e6:2c:77:d3:
b2:7f:3b:b4:1f:0b:e8:4b:d5:be:c7:36:0b:d5:fb:
6c:82:f8:ff:43:08:d0:dc:b5:d2:f0:61:44:40:8d:
05:85:eb:c4:98:dc:31:d5:a6:00:ff:74:9d:e0:3f:
bd:55:02:b9:2c:68:08:c2:7b:a8:10:b8:ec:55:b8:
25:51:8e:77:30:37:e6:04:05:bb:c1:cd:06:19:03:
4f:83:4a:9a:0f:11:b6:fc:94:ac:aa:70:2e:ac:94:
21:3a:5c:f3:a6:e8:e6:b5:c3:dd:f6:2d:e3:60:09:
0b:41:f9:ff:d7:37:2c:0c:61:a7:af:2e:c2:d9:f0:
92:f1:20:39:8e:13:75:55:7d:92:03:9c:e1:03:60:
e6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:59:31:39:4F:1E:88:E6:11:49:AD:83:9F:30:5D:05:12:57:23:B9
X509v3 Authority Key Identifier:
keyid:EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:6f:41:72:28:1e:fb:8b:7a:fd:04:74:3d:d2:f1:6d:d1:a8:
e4:c6:e5:38:a9:7d:04:e9:66:86:40:49:6f:1d:78:91:3e:49:
78:8d:19:75:9d:1d:e8:4f:11:c4:91:f3:f2:4b:87:a3:20:21:
b8:ee:e8:4b:e8:f7:23:0c:6d:58:4f:ba:33:f4:1c:b6:5f:ad:
a3:c9:a0:9c:12:8d:c4:a4:c4:a1:10:26:f4:ea:20:11:5e:8f:
57:8d:83:00:ed:7f:dc:2d:d1:79:fd:c4:ba:aa:9f:59:5a:60:
12:71:86:63:8b:dc:d8:10:a9:8f:d5:c1:7f:43:1b:c8:3b:51:
0f:76:2f:36:2a:98:03:67:16:e1:28:97:3c:f4:95:4a:ca:84:
fc:89:ad:be:d5:6d:52:cc:5c:9c:08:90:2c:ab:ae:d4:70:3e:
a8:d0:e1:0a:8a:a9:dd:6a:eb:7c:6c:ae:b5:03:e7:e0:19:14:
1d:60:5b:46:3c:d3:98:c9:18:37:bd:05:ea:a1:a7:f0:ad:e8:
d4:54:65:35:99:ca:d8:32:cc:6c:18:76:b5:fc:5c:0e:50:52:
62:e0:84:99:db:11:b2:92:f8:94:15:8d:7a:55:32:41:eb:13:
e7:c8:c1:95:fe:4c:06:4e:06:95:50:d9:68:1f:98:63:04:b6:
a0:ed:6e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:26:11 2026 by rpki-client