Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
File: 7FNfTIaAzg26SgPZXmZck8yZzrk.mft (raw, json)
Hash identifier: iWDS2pswSVUp1kGEAgprUKx7LtYMJ2jh1Q8bo9ZpmNg=
Subject key identifier: 8B:9F:01:9B:A9:12:BD:00:7D:03:4E:F2:42:47:CB:91:E9:96:4F:FE
Authority key identifier: EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
Certificate issuer: /CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Certificate serial: 01A0DB71F41B8B0C0C59F65C6F7AB09CFE4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
Manifest number: 05E6
Signing time: Sat 26 Sep 2026 02:01:13 +0000
Manifest this update: Sat 26 Sep 2026 02:01:13 +0000
Manifest next update: Sun 27 Sep 2026 02:01:13 +0000
Files and hashes: 1: 7FNfTIaAzg26SgPZXmZck8yZzrk.crl (hash: C1yub/7hLNo0A2oSiK0YnNnj/v4Q2rDuZY15VfYjGEU=)
2: bHM7HWlokuLAKGZUYW39_tqn2Fk.roa (hash: k5ZFTQBnrO/pZ+ljvAJJsNDjRf0esZ6TDnbCraHVTUQ=)
3: nnVHZXt9DivgToJiSfHRWDPCX58.asa (hash: /8k8/1a46VaQnelGrFv4w1ybQa3EbefqWYHF9uEGkc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:71:f4:1b:8b:0c:0c:59:f6:5c:6f:7a:b0:9c:fe:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Validity
Not Before: Sep 26 02:01:13 2026 GMT
Not After : Sep 27 02:01:13 2026 GMT
Subject: CN=8b9f019ba912bd007d034ef24247cb91e9964ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:81:62:6d:01:e6:4a:9e:a2:61:8d:f8:1e:ac:
3e:53:a2:49:32:5e:87:18:d9:0e:27:9d:c6:85:d3:
39:2d:da:68:77:ba:b1:53:69:54:08:08:93:6d:61:
93:d3:1e:2a:5a:90:e6:14:7e:59:98:fa:71:24:ad:
8a:67:72:3e:d5:64:8a:2d:bb:3b:1f:77:67:13:3a:
7f:03:94:4f:11:51:d4:bc:c6:78:4e:67:db:9b:d1:
1f:7b:24:85:c6:4c:08:b6:34:e2:ea:64:c2:fc:f4:
90:61:b1:46:20:24:c5:83:f3:6c:de:cf:5f:58:b2:
f2:ca:fb:d3:a6:c4:8f:c5:51:5d:91:d7:44:d6:d7:
cf:77:ae:f5:41:a7:be:46:40:de:c5:ce:0d:b2:26:
c4:7a:d0:96:f0:01:7e:b5:07:8f:33:7d:f3:3e:62:
f0:4d:dc:e8:72:7c:b4:11:96:28:ce:07:cc:93:cb:
53:10:e9:43:60:45:25:f7:fd:8b:53:b9:1a:f2:15:
95:00:ae:cf:0f:58:b7:6c:90:8c:b2:ac:0b:e9:65:
fa:f8:01:c7:ce:c2:8e:11:46:3e:f6:e2:0d:82:d9:
7d:51:21:5a:31:9c:2e:24:82:95:07:12:b5:9b:6f:
a6:09:01:79:2a:8c:2b:07:78:11:e2:f5:f7:bf:7b:
ac:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9F:01:9B:A9:12:BD:00:7D:03:4E:F2:42:47:CB:91:E9:96:4F:FE
X509v3 Authority Key Identifier:
keyid:EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2e:1f:5c:f6:65:d3:7c:7c:62:97:0d:88:65:34:66:20:06:
21:33:4a:f6:35:41:96:3e:94:db:28:81:e4:ae:99:2a:e7:b2:
1e:e6:45:23:e5:ea:c1:9a:25:f5:ee:33:81:a1:66:a7:5f:b6:
e9:38:f1:67:d4:5f:da:08:66:b1:8b:1a:fd:97:34:cb:20:1b:
6b:1f:1d:cd:d2:48:5e:7e:fc:8c:57:ac:0c:61:71:7a:c5:24:
6d:2a:d6:0d:d3:76:15:4f:8b:5f:84:3a:16:49:cf:99:ae:4f:
40:00:7c:e0:ad:4a:b3:13:47:e9:c0:b5:6a:5c:c5:bd:bb:6d:
05:b8:8a:16:a7:f0:3a:ec:67:a7:f1:82:c1:42:2c:4b:e7:62:
35:44:96:97:bc:45:82:e5:9b:6b:d2:f6:ee:23:bb:ee:f5:c1:
73:b3:7b:82:01:10:d5:e0:5d:ec:e6:5a:8d:da:f5:4f:ff:b9:
9c:fe:a6:a5:ed:ca:16:eb:40:e7:97:63:26:47:59:1c:4e:91:
cb:ff:93:c0:f6:6d:a3:4d:52:b7:9b:0e:67:ba:78:5f:b6:98:
01:27:f5:d6:98:05:da:e7:1c:a1:d2:00:8b:b5:39:37:9d:0c:
70:80:e1:93:30:79:96:e0:7b:9e:17:ec:fe:a7:70:26:e2:75:
bc:f3:41:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:26:32 2026 by rpki-client