Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
File: 7149b2n6K0JReRHq5WlXMDB5kVY.mft (raw, json)
Hash identifier: e8JuHQAqBE+5uuw6crDDeIsr//5uXe7fH3t3at8uNIs=
Subject key identifier: B9:1E:81:E0:68:56:CE:49:4E:4D:55:79:16:16:0E:30:D9:35:52:D5
Authority key identifier: EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
Certificate issuer: /CN=ef5e3d6f69fa2b42517911eae569573030799156
Certificate serial: 01A0C5FC610A74D07CDA99B4CD452A8B7C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
Manifest number: 0FC1
Signing time: Mon 21 Sep 2026 22:00:46 +0000
Manifest this update: Mon 21 Sep 2026 22:00:46 +0000
Manifest next update: Tue 22 Sep 2026 22:00:46 +0000
Files and hashes: 1: 7149b2n6K0JReRHq5WlXMDB5kVY.crl (hash: Q7aEzLvDy+wjLoNEqdq7/A/O+kSNSm/e4iabKM40ALw=)
2: _bZKuF7AFVv9FOPtEDmaIyaLkgc.roa (hash: /OjfGerjj4MNTsCbNROwrp1Es3nNekhRr//F8a0HSXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:61:0a:74:d0:7c:da:99:b4:cd:45:2a:8b:7c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5e3d6f69fa2b42517911eae569573030799156
Validity
Not Before: Sep 21 22:00:46 2026 GMT
Not After : Sep 22 22:00:46 2026 GMT
Subject: CN=b91e81e06856ce494e4d557916160e30d93552d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5e:03:91:1c:98:31:9e:bf:7b:ed:7f:64:8e:
7f:fd:a5:a5:a8:ba:86:04:8c:c3:ae:55:38:19:41:
00:94:17:31:3c:6e:73:02:8b:c5:c0:2c:fb:81:35:
4f:b5:53:19:61:59:af:3a:c9:6a:e6:3c:4e:81:f4:
29:15:66:4e:64:b4:61:fe:07:63:e6:fe:ac:64:5b:
8b:37:7a:a6:7f:81:3c:53:ad:f9:f6:5b:88:8f:00:
97:29:9d:5f:78:3a:23:1e:ee:5b:9d:86:0a:d9:95:
7a:52:4e:01:8e:ee:27:7d:c0:cc:ab:7f:2f:aa:1f:
e2:a6:61:c6:52:2e:a0:01:d7:c6:b8:63:0d:7c:ab:
07:26:ce:d0:18:ab:40:d7:2b:10:6e:fe:c7:bc:2a:
65:8c:54:12:2d:d1:74:49:46:cf:e3:13:ba:9b:e8:
a7:23:73:12:af:c0:91:6b:75:0a:1b:23:eb:48:51:
bc:e2:24:c9:8b:a7:7f:60:4f:d4:04:a4:06:b9:9d:
41:08:db:fd:a1:c1:d1:8a:9d:b3:33:db:f6:96:aa:
1d:91:ee:fe:50:e8:50:32:d4:3b:d5:5f:69:26:23:
5e:e6:7b:a4:dd:eb:43:de:ad:00:db:7c:cf:c1:80:
6b:81:a1:21:e7:09:4e:a0:42:6c:d6:fd:d6:9b:6b:
87:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1E:81:E0:68:56:CE:49:4E:4D:55:79:16:16:0E:30:D9:35:52:D5
X509v3 Authority Key Identifier:
keyid:EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ad:c4:eb:7f:f9:be:30:97:8c:cf:fc:fe:08:fc:2e:e9:7e:
de:10:98:70:4a:e8:86:b1:ac:88:16:43:2f:ee:ae:e6:ec:32:
1b:63:51:56:14:cd:29:83:18:72:d4:e2:f1:8f:3e:e0:07:23:
ef:93:04:a5:b5:12:f0:6c:40:7d:21:20:74:6d:db:c1:33:f1:
1c:ee:95:5d:57:13:63:75:b8:db:05:06:f7:5c:38:63:f2:fa:
84:83:66:00:69:e7:65:9f:8d:8c:f7:c7:fc:bd:86:05:8c:b7:
f5:40:04:42:4a:c9:4e:98:9e:31:02:5a:26:f4:4e:f5:e2:29:
5c:8d:1d:b8:69:19:c0:51:96:30:bb:a0:92:bc:3f:cd:eb:e4:
eb:ad:56:32:1a:8e:73:65:48:30:da:42:94:f1:90:7f:b3:1e:
d4:e7:d5:68:d8:eb:df:c3:1f:7b:12:3a:12:7e:ae:b5:ad:5e:
ff:97:88:62:5e:83:12:b2:7a:df:8f:69:d5:f6:c3:c1:52:e1:
82:d5:ce:ad:bd:86:1a:30:48:98:bf:9e:a2:3a:ce:c5:3c:1a:
3c:5b:95:0d:08:44:0d:54:18:3d:87:f0:af:40:8e:49:ca:e6:
03:7a:84:43:b3:32:c3:cd:88:90:92:3a:f8:f3:be:78:5c:e7:
82:f5:62:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:41:10 2026 by rpki-client