Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
File: 7m9CHCUwligDR9wuksoQzDmME08.mft (raw, json)
Hash identifier: ci9vBEK7gLsLFN1cEplSHJp0VYqiFzTTP0mjr0FqIRM=
Subject key identifier: C2:29:D7:C4:41:FE:AD:AC:62:5C:9A:0D:65:36:2C:26:26:26:41:0E
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Certificate issuer: /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial: 01A0C70EACE5D5FA3B070DCCF90503B0E7E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
Manifest number: 1234
Signing time: Tue 22 Sep 2026 03:00:22 +0000
Manifest this update: Tue 22 Sep 2026 03:00:22 +0000
Manifest next update: Wed 23 Sep 2026 03:00:22 +0000
Files and hashes: 1: 7m9CHCUwligDR9wuksoQzDmME08.crl (hash: ENVFU3UGMOVPBINGEmUOOA7T3xeBCGYn8OkHqTote4g=)
2: GJC0hK61YfoTGiu4_BgSpKpEET8.roa (hash: WwyFHk/cwNc1twKhKndoqjGYh79zgc/kHaQHCW2vww4=)
3: XmgvodIVZlwmFpJZFx9OEb_S0YI.roa (hash: U77Nh8N61bX2SG2LWG51QmpxAadiZWSFMU1pOMYXXLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:ac:e5:d5:fa:3b:07:0d:cc:f9:05:03:b0:e7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
Validity
Not Before: Sep 22 03:00:22 2026 GMT
Not After : Sep 23 03:00:22 2026 GMT
Subject: CN=c229d7c441feadac625c9a0d65362c262626410e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ef:f9:a3:b4:d0:8e:51:06:14:44:42:50:fb:
97:59:2b:b9:29:8f:f1:e2:71:4d:a2:2f:c2:7c:b9:
9d:01:66:04:97:bf:d3:80:f5:c4:c7:81:3f:d8:df:
02:52:f9:c7:38:91:cd:e1:af:d7:a1:79:4e:0e:22:
7e:6e:c5:6f:1c:01:dd:33:9f:28:a5:2b:11:70:34:
e2:3a:38:37:75:56:46:8a:53:3d:9b:60:69:1e:2c:
a6:ee:1b:20:f6:80:99:a5:34:10:d5:b2:54:89:bb:
a1:bc:92:46:0f:94:b0:41:16:85:74:b6:51:f8:b7:
15:d9:00:19:93:62:c3:09:61:76:51:98:2b:56:71:
f8:23:6c:57:1a:b3:e1:37:72:3f:c5:39:63:01:51:
83:c7:21:3d:f7:09:44:c6:ac:46:01:75:46:da:ee:
25:77:6c:3e:bc:a6:d9:c3:f9:a2:e2:5c:9a:ca:de:
e8:35:7e:9a:06:65:c1:eb:b4:ab:33:d4:e9:e7:bb:
70:34:f0:80:5c:ba:53:25:66:44:c2:c3:5d:2a:32:
bd:01:90:42:4b:43:cc:11:68:bf:a6:9a:0c:9f:51:
5d:22:52:a5:01:6e:f1:d4:de:72:46:3d:66:b6:b4:
57:0d:35:c8:af:e1:47:50:42:02:e8:a1:91:43:23:
3c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:29:D7:C4:41:FE:AD:AC:62:5C:9A:0D:65:36:2C:26:26:26:41:0E
X509v3 Authority Key Identifier:
keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:30:7a:a8:6c:6f:41:ce:ca:c4:45:e4:76:86:ac:49:0a:0d:
bc:a0:96:99:cd:9c:e7:e4:21:0b:2e:b8:f5:16:6d:bd:71:f2:
f2:da:c0:dc:4c:9c:c6:3d:df:d9:e5:ed:a2:7e:96:f2:07:4c:
65:b2:20:3d:d3:3f:85:92:71:cc:67:ea:94:65:dd:20:94:86:
8c:9c:c1:2c:be:67:ec:40:41:a2:08:48:9a:e4:05:9a:62:66:
70:8a:e7:ea:ba:41:40:4e:2a:8b:7e:e1:1c:45:ca:2b:bd:f6:
6a:b8:87:fd:51:9b:01:e4:58:d8:88:6c:d0:09:9f:67:9e:09:
db:9e:e3:16:64:3e:f6:9b:f4:7f:57:13:a6:cd:ff:c3:23:f4:
3b:ae:58:b5:8e:21:2a:89:4d:ea:36:5d:8a:64:7b:db:6b:f9:
7e:7e:b4:e9:76:13:53:51:86:0c:c9:f5:c3:fc:f8:8a:69:45:
f7:1c:fd:8e:36:e8:ca:f6:69:1b:0c:94:47:1b:cc:ef:3e:19:
81:de:7a:50:72:b7:b2:57:da:e9:48:75:13:0c:c6:13:26:0e:
a5:a8:cc:be:6a:0a:d2:8f:a0:fa:7a:0a:80:1e:e9:62:c4:c7:
26:d7:4c:2c:0c:4f:b6:78:f4:b4:0d:fe:66:2e:a5:a7:49:42:
83:71:b3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:37:30 2026 by rpki-client