Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
File: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft (raw, json)
Hash identifier: F2oupfjHi3i93oDjMw3rhZq9g/0mnMFPPtHQq/EYvxM=
Subject key identifier: AD:29:94:70:9B:A2:CC:2B:F9:34:A9:13:8E:84:9F:46:06:B7:58:30
Authority key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
Certificate issuer: /CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Certificate serial: 01A0C4EA03EEE1E12F693FFDD9EF05296893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
Manifest number: 148D
Signing time: Mon 21 Sep 2026 17:01:05 +0000
Manifest this update: Mon 21 Sep 2026 17:01:05 +0000
Manifest next update: Tue 22 Sep 2026 17:01:05 +0000
Files and hashes: 1: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl (hash: zHl8CAx0M+enCmAzinXG3vumk9iPUQmic8Qa0TUPniQ=)
2: Z-Nhf0GUm-eK6gBfuWRH4mBMDa8.roa (hash: j8yQFLI888ZXRlZcfp3XqLieyu9/rqxMNp1WWGddyFc=)
3: zQxCSJAybTKhMbu9tj9geo08EHM.roa (hash: vRuFfeMEunDY9UG2VQ5bdPd5mpRSySgDc592VktLEXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:ea:03:ee:e1:e1:2f:69:3f:fd:d9:ef:05:29:68:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Validity
Not Before: Sep 21 17:01:05 2026 GMT
Not After : Sep 22 17:01:05 2026 GMT
Subject: CN=ad2994709ba2cc2bf934a9138e849f4606b75830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d0:3e:48:84:72:ec:ad:d6:54:03:e8:c3:99:
4d:9f:7c:df:6e:52:33:40:0b:24:2f:55:5d:48:d5:
a4:fc:54:62:9c:88:a4:ff:5e:be:a6:e6:8a:2d:e0:
e3:af:df:ab:ae:43:c7:b4:67:3c:b2:d1:d6:31:3d:
c2:60:35:5f:dc:67:eb:1d:82:09:18:48:d3:1f:4d:
f8:47:d1:a5:79:1a:48:dc:cd:4c:49:0f:33:ab:59:
e9:9a:49:63:b9:1b:dd:f7:ce:89:47:5d:b2:a4:e3:
f4:2f:dc:64:57:60:65:fe:6f:bd:7b:6e:48:99:52:
5f:96:44:f9:63:0d:1d:a2:e0:ae:ba:78:e6:53:2d:
2e:98:6e:50:88:f7:27:69:a7:34:72:ba:d4:b5:43:
39:fc:dd:d3:6a:31:cb:f4:a1:be:83:ba:a5:6f:a5:
9b:60:61:4b:90:20:9b:41:0d:85:fb:a3:4b:9a:c7:
c5:2e:1d:7e:0a:40:12:fb:d9:09:46:78:3a:03:7f:
83:1f:14:d2:d6:ac:c4:a1:41:77:80:a9:87:a1:5e:
05:58:bd:8e:1e:4b:92:a6:49:d6:ac:52:24:02:df:
98:11:d1:4a:45:d8:5d:67:be:b1:90:83:c7:26:e3:
62:3d:04:c7:b3:27:2d:9d:91:c5:11:03:32:8f:5f:
2b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:29:94:70:9B:A2:CC:2B:F9:34:A9:13:8E:84:9F:46:06:B7:58:30
X509v3 Authority Key Identifier:
keyid:EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:bb:60:9d:44:1f:69:71:2a:8f:d8:94:ef:76:38:07:fd:88:
c9:82:de:c8:b7:5c:f2:ec:d1:96:54:34:10:9c:01:24:03:20:
0c:10:85:44:64:56:40:2c:fe:87:43:cc:7f:38:ed:cd:3b:85:
90:39:5f:21:15:80:c2:a1:0b:ea:cc:8c:4e:3f:a7:cb:17:44:
15:a3:ce:fe:e4:ff:78:91:1f:3b:94:8f:78:a1:31:37:cb:fb:
bd:07:a4:1a:5c:05:05:d6:e3:16:89:2e:8d:bb:2f:8b:be:6e:
77:6e:04:b7:38:fd:fe:2a:63:8d:74:59:33:d6:cb:0f:7c:92:
32:a6:4f:88:a9:c2:0e:8d:c8:15:47:63:38:6b:76:14:3a:eb:
6d:49:15:6a:39:0f:0d:7c:1b:e7:02:d4:fc:b9:f4:f9:1d:eb:
06:b0:05:39:bc:7e:14:af:f5:17:ef:58:e1:a5:19:10:2c:e2:
4c:54:74:6d:2e:13:f6:c9:c0:84:56:87:43:1c:4e:a5:95:c5:
f5:77:a7:53:72:bf:6a:c4:e3:80:60:fd:0a:31:cf:f0:68:5b:
13:e1:b1:73:e7:10:12:c8:a6:a2:33:2c:c1:2c:3b:d7:78:a9:
d2:5d:f3:21:5f:db:7f:ab:1b:12:f9:57:ed:c6:51:84:0d:f9:
07:85:7f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:49:51 2026 by rpki-client