Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
File: 7X77CijxDLp1HJLMsL-_NXuaYl0.mft (raw, json)
Hash identifier: C5hD7QE1V4SLeW8B9sxV8Mww7uBzaj3DF6LZeIe0jOA=
Subject key identifier: 86:F7:F5:DB:CF:EA:19:04:0D:7C:F7:0A:9F:93:5B:4D:05:52:62:1A
Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
Certificate issuer: /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Certificate serial: 01A1189929CE71D94DEC0D045CF8FC00392D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
Manifest number: 1152
Signing time: Wed 07 Oct 2026 23:00:53 +0000
Manifest this update: Wed 07 Oct 2026 23:00:53 +0000
Manifest next update: Thu 08 Oct 2026 23:00:53 +0000
Files and hashes: 1: 7X77CijxDLp1HJLMsL-_NXuaYl0.crl (hash: NC2qItHY+Chf9v5bNfgK18DaxciJ9XjAAN5cGtVTqpA=)
2: P24w_jLhUQYot-hYm7zVBeSYmLE.roa (hash: PHPMkNKEzzvlTlm3p3Tx5ImcestRuod2cI9K8iRdJC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:99:29:ce:71:d9:4d:ec:0d:04:5c:f8:fc:00:39:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Validity
Not Before: Oct 7 23:00:53 2026 GMT
Not After : Oct 8 23:00:53 2026 GMT
Subject: CN=86f7f5dbcfea19040d7cf70a9f935b4d0552621a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:9c:3b:90:f0:90:0b:be:a2:b9:12:51:0a:
68:92:02:21:7b:3c:cb:c0:e9:6b:20:e9:4c:32:1e:
0b:a8:ba:d0:1f:25:98:74:be:9e:9c:05:ff:da:57:
f2:c5:4e:bc:e0:26:41:f8:1c:70:6b:0a:d6:5b:03:
2a:f7:c0:67:31:24:cd:42:d8:4a:75:78:e0:07:40:
69:3e:7a:9a:b9:86:69:d5:11:d8:51:a1:3a:a3:ec:
37:3c:0c:ab:20:23:06:7b:5f:a3:44:3c:2b:a6:84:
95:ec:f9:bc:9b:51:79:d8:ab:70:b0:51:c1:19:a5:
5c:24:4e:9c:30:a2:ae:55:31:65:53:56:a1:8b:c1:
3e:88:c6:16:f4:7b:49:b8:d7:a4:3d:28:df:14:04:
66:7d:52:5b:c5:d6:39:5f:32:fb:53:97:f6:67:5c:
68:85:41:66:ba:80:61:fd:3e:85:fe:57:ec:c2:e7:
0f:a2:44:53:67:49:17:f4:5a:64:d2:30:c9:88:57:
e0:8d:9f:7a:ca:c3:2c:9b:61:40:26:5a:bc:b4:e4:
69:c9:1c:68:b6:44:cc:98:73:c6:73:ba:b0:a2:4b:
5a:b4:ed:f6:e0:e6:f5:1c:98:54:72:0c:9f:d3:9e:
d8:27:62:b9:73:cc:f0:da:5c:97:af:0f:5d:de:d9:
25:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F7:F5:DB:CF:EA:19:04:0D:7C:F7:0A:9F:93:5B:4D:05:52:62:1A
X509v3 Authority Key Identifier:
keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f6:4d:26:7f:9b:52:6b:a3:a0:f8:12:f9:77:c8:ce:b2:76:
7e:b9:09:06:74:6e:4d:33:2a:0e:ca:ff:99:e2:02:11:4d:77:
df:36:40:1d:ee:5b:3f:10:7d:94:80:81:01:3e:e3:97:5d:d5:
5e:91:cd:f6:11:a1:7d:17:78:b4:aa:97:8b:00:7e:ea:3f:cc:
4a:0b:5e:22:b3:fe:f9:fd:a8:d2:21:ad:a7:45:12:f7:9c:3f:
8c:8b:bf:0d:71:91:8f:79:54:7a:cc:c3:01:10:48:f0:bb:3e:
98:63:7a:0f:3f:85:70:d2:a4:bf:f6:67:db:be:1b:9b:02:79:
de:15:9e:fb:1e:81:bb:e1:12:da:eb:d6:38:ed:c8:94:77:62:
db:f3:27:37:1d:8a:46:f7:fd:3a:f3:de:1d:93:43:94:7a:20:
0d:67:5a:be:9b:51:dc:a4:4f:be:ef:9f:0d:3f:43:a4:c5:ff:
9b:47:c8:3e:51:07:37:91:c2:17:e0:7a:4c:27:ba:12:c7:69:
21:57:23:06:4d:dc:3f:76:18:b8:81:4c:c1:d8:92:98:f2:97:
ad:f5:4f:5c:36:7c:aa:4f:66:6f:ec:78:ce:f4:95:6f:38:cf:
63:2b:a9:c8:b4:69:50:78:c2:d0:6f:e0:2d:94:d2:6f:c2:5e:
9c:ae:48:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:21:52 2026 by rpki-client