Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
File: 7giC55F0FC1OVM0R9xwVum45chM.mft (raw, json)
Hash identifier: ur+c7uvbLECB5KfiYF4gsj+3rKkMQBM9O1tSwgvZDEk=
Subject key identifier: DF:F4:40:A5:41:6C:3C:D7:32:B1:C1:4F:74:A3:6C:CA:EE:94:3A:08
Authority key identifier: EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
Certificate issuer: /CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Certificate serial: 01A0D200E26835E2D55DF3B311C39BF767A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
Manifest number: 1139
Signing time: Thu 24 Sep 2026 06:01:08 +0000
Manifest this update: Thu 24 Sep 2026 06:01:08 +0000
Manifest next update: Fri 25 Sep 2026 06:01:08 +0000
Files and hashes: 1: 7giC55F0FC1OVM0R9xwVum45chM.crl (hash: e+zk110WGOUC4EC31d5YQea83vrRYTunv4iYU0oDZaU=)
2: rkOQVmNrUrdY7_BGJo06hjnXKUQ.roa (hash: KQFoNA+jPIAj7lXy7/IWWZc0S9NISU/38W2iXUYI9HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:e2:68:35:e2:d5:5d:f3:b3:11:c3:9b:f7:67:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Validity
Not Before: Sep 24 06:01:08 2026 GMT
Not After : Sep 25 06:01:08 2026 GMT
Subject: CN=dff440a5416c3cd732b1c14f74a36ccaee943a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:ed:65:67:75:ab:54:57:8b:1f:14:93:be:
c9:b4:51:fd:f5:8e:b5:a4:fa:60:3c:ed:d4:c2:2a:
0b:57:e3:f1:a2:62:f5:79:f4:69:8d:b1:3a:c3:e9:
66:e2:42:25:10:46:0d:86:b0:41:2a:93:bf:43:4d:
1f:f4:d0:9d:de:75:d1:ae:2a:98:40:fe:72:9d:c0:
fb:5f:e4:df:87:ce:d2:26:f2:2f:07:dc:f8:10:cd:
e3:92:08:5e:07:48:ed:10:f3:81:6b:e2:c2:16:5e:
63:b1:79:1b:e9:9c:49:eb:28:11:07:95:ea:3f:8a:
ac:3a:09:c6:47:ed:3e:a9:46:0e:62:76:82:9d:af:
14:46:b4:79:fb:04:6d:dc:67:70:93:09:fa:d0:41:
c5:35:90:20:4b:4d:d7:69:73:49:02:3f:8c:f6:ea:
8d:40:0e:00:df:b4:32:a6:4d:14:58:83:39:a8:17:
02:2b:64:d4:ff:b4:d2:97:98:a6:f0:89:46:36:66:
b6:1c:17:7e:cf:eb:b9:fd:9f:28:d1:1a:51:90:51:
96:50:20:af:a9:54:61:36:3c:e0:6e:a5:9e:1d:a1:
d9:5d:cd:8e:06:26:d4:fd:36:de:5b:2c:de:79:46:
0a:22:9f:b1:8c:f8:9c:3d:a6:d2:3b:e4:c0:a7:6e:
46:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F4:40:A5:41:6C:3C:D7:32:B1:C1:4F:74:A3:6C:CA:EE:94:3A:08
X509v3 Authority Key Identifier:
keyid:EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fc:91:81:b7:f3:e8:77:20:50:37:3a:f2:a5:c3:75:fa:a2:
01:dd:80:16:39:57:18:06:a2:e3:9e:a1:19:4f:e2:a9:69:e2:
52:9b:3d:bf:ef:75:2a:c7:df:14:c0:93:4f:39:74:91:7f:1d:
13:e3:36:ea:0d:37:d8:4e:f0:f3:fe:d9:fd:5a:57:76:7d:a8:
f4:4a:e5:99:04:aa:39:80:9d:75:32:29:a9:f6:37:fa:54:5d:
80:6d:79:0b:c7:7a:b6:d8:e3:ed:43:15:cc:37:bb:a3:38:a2:
35:97:d3:94:a4:20:16:0d:d4:ed:e0:c9:aa:38:6f:30:ff:72:
51:7d:0a:56:20:d5:1c:79:90:3b:f0:27:0f:42:b0:53:36:d0:
df:ff:50:f5:21:0e:fb:3c:2a:c3:a4:6c:4b:c9:54:88:68:c7:
7a:13:66:f6:41:6b:8c:ba:5d:5d:2e:6c:05:ea:77:49:c2:55:
6f:b7:c1:2a:7a:3b:b2:a1:0f:1f:ca:ce:fc:ee:f0:2d:0d:8f:
19:f0:f6:82:30:b1:b2:27:e5:d5:13:6a:1e:a8:4b:ce:f4:60:
1e:4b:28:d4:d7:0b:74:ba:93:33:e3:ca:87:ec:f7:f1:e0:98:
b8:2a:40:21:c9:59:b8:d6:9a:c3:24:d6:1d:93:d9:08:ec:c3:
d3:a6:f1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:01:11 2026 by rpki-client