Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/1-dopV_MERPAaS-ef1ex7kke3pCU.mft
File: 1-dopV_MERPAaS-ef1ex7kke3pCU.mft (raw, json)
Hash identifier: folv6qpIza1l9foubWKQAIK0MaauEO21ftS+YRVN9VU=
Subject key identifier: BA:3D:5A:9F:B0:A3:32:D2:4C:20:3D:A8:73:A6:7F:57:9D:03:0F:E0
Authority key identifier: F9:DA:29:57:F3:04:44:F0:1A:4B:E7:9F:D5:EC:7B:92:47:B7:A4:25
Certificate issuer: /CN=f9da2957f30444f01a4be79fd5ec7b9247b7a425
Certificate serial: 01A0EEF9746DBBEFCDB925EB0B73B06D06AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-dopV_MERPAaS-ef1ex7kke3pCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/1-dopV_MERPAaS-ef1ex7kke3pCU.mft
Manifest number: F5
Signing time: Tue 29 Sep 2026 21:02:00 +0000
Manifest this update: Tue 29 Sep 2026 21:02:00 +0000
Manifest next update: Wed 30 Sep 2026 21:02:00 +0000
Files and hashes: 1: 1-dopV_MERPAaS-ef1ex7kke3pCU.crl (hash: ctVa9P6rVdSWvx+bL2E51S1EKdLRICfVN/1lVKWNwUU=)
2: juXMUNSkgVRHC-QWuh1lWh6LqUQ.roa (hash: G2J2/mfpur3sKwCS1/C2FhNoDBroP3jXOvZUErd5avQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/1-dopV_MERPAaS-ef1ex7kke3pCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/1-dopV_MERPAaS-ef1ex7kke3pCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-dopV_MERPAaS-ef1ex7kke3pCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 21:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:f9:74:6d:bb:ef:cd:b9:25:eb:0b:73:b0:6d:06:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9da2957f30444f01a4be79fd5ec7b9247b7a425
Validity
Not Before: Sep 29 21:02:00 2026 GMT
Not After : Sep 30 21:02:00 2026 GMT
Subject: CN=ba3d5a9fb0a332d24c203da873a67f579d030fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:40:5a:85:d7:87:b8:8e:fd:62:01:31:86:
b4:fa:57:fe:72:b0:74:26:55:04:8c:2d:2d:84:d9:
11:c9:d9:d3:da:a6:e7:22:5a:cb:60:de:9a:14:7a:
8b:7d:35:ee:86:49:28:14:90:7d:2c:c8:fa:23:5c:
ec:73:6e:68:5a:33:c8:43:c8:e5:67:e1:e8:18:ed:
4e:b4:20:d9:00:71:1d:fd:53:c1:60:84:67:e5:37:
91:c5:f4:60:20:56:1c:8a:a6:4a:37:ac:0b:16:58:
d3:7d:a5:68:43:f4:11:3f:99:de:c8:b3:6c:22:ef:
14:6a:6d:21:d3:d1:13:d7:a3:d2:b3:78:b7:5a:a1:
8e:85:84:27:9c:c9:57:58:c0:c0:b2:94:d2:85:aa:
53:ef:a6:b5:eb:97:ee:fb:af:a8:da:c1:68:42:15:
dd:77:4f:0a:ad:f8:9d:49:54:2b:b6:90:02:ae:2d:
6b:4d:c8:41:f5:19:61:e0:54:74:65:7f:ab:7d:37:
44:8e:10:2a:bd:32:57:77:a1:3f:b4:4b:1e:89:00:
00:40:55:08:a3:cd:09:ad:9f:41:fe:d6:3f:7a:bd:
67:c2:a4:b8:75:be:1c:ab:5b:05:59:9c:09:e5:c0:
a9:f6:b0:ba:a6:6c:08:78:1b:d7:89:95:fb:ee:b7:
0a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3D:5A:9F:B0:A3:32:D2:4C:20:3D:A8:73:A6:7F:57:9D:03:0F:E0
X509v3 Authority Key Identifier:
keyid:F9:DA:29:57:F3:04:44:F0:1A:4B:E7:9F:D5:EC:7B:92:47:B7:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-dopV_MERPAaS-ef1ex7kke3pCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/1-dopV_MERPAaS-ef1ex7kke3pCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/1-dopV_MERPAaS-ef1ex7kke3pCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3d:d7:9f:d0:36:fd:71:89:74:ec:26:83:f9:59:02:85:af:
5b:db:6f:a1:69:78:f1:24:44:33:d1:c3:d0:58:b6:ca:02:1f:
ac:ec:7a:35:0a:63:b6:e4:51:45:f8:2e:f8:9a:19:47:c2:ee:
e1:26:6a:19:a0:8a:19:a5:f1:f9:d4:35:e1:f1:4f:3f:50:8c:
60:00:b4:ac:a4:93:03:04:ca:7e:3f:b4:4e:ad:04:e0:1b:b2:
b1:51:85:da:c5:a8:bb:44:63:9b:aa:57:1b:99:b8:cc:1a:e2:
e8:76:48:8e:7a:ce:fa:17:de:8d:a1:ef:64:35:19:aa:2c:1f:
aa:c9:3d:5f:95:83:4a:93:7e:3d:ef:e4:d6:3d:6b:75:9a:39:
e9:5b:f1:5c:97:ea:8d:91:e5:e5:86:c9:83:b5:86:6f:61:3d:
5b:79:59:08:46:58:9e:88:14:91:16:6d:d9:43:b4:74:e3:c0:
24:25:ab:a5:ac:ac:e3:4f:49:16:9a:70:84:eb:ae:1b:4f:98:
33:81:5e:35:1f:84:a1:a8:71:73:e5:7b:d1:e9:09:49:bd:19:
80:64:b2:ad:a9:f0:45:89:d0:48:33:72:3b:87:95:93:fa:9b:
3f:07:3e:05:06:aa:a2:f1:71:5e:14:8e:83:a5:56:f4:c2:aa:
db:b9:b5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 07:33:08 2026 by rpki-client