
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
File: rx7uIsUBU2MRinHSapRj3JN0uig.mft (raw, json)
Hash identifier: qZD4jajbpyqLuFLCcowjp290YdEeDN2m9b5vlrOqp7g=
Subject key identifier: F9:B4:9C:33:4D:38:17:58:A5:9F:9F:97:66:3B:8E:DF:F0:0F:64:F1
Authority key identifier: AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
Certificate issuer: /CN=af1eee22c5015363118a71d26a9463dc9374ba28
Certificate serial: 01A0C4B2CC91E027D6038A5260150149A43A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
Manifest number: 0E28
Signing time: Mon 21 Sep 2026 16:00:47 +0000
Manifest this update: Mon 21 Sep 2026 16:00:47 +0000
Manifest next update: Tue 22 Sep 2026 16:00:47 +0000
Files and hashes: 1: lLnIh6czm0KWIQr0ccsD4cdToLc.roa (hash: kVLAgXuMBEFIQbZq7gNbnr/z2Vz4LT7MCr2JgEg80uc=)
2: rx7uIsUBU2MRinHSapRj3JN0uig.crl (hash: MmennAYnpxr/MZYyBsdwRMyDcBuw7q2CSUZ3XYIBvf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:cc:91:e0:27:d6:03:8a:52:60:15:01:49:a4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1eee22c5015363118a71d26a9463dc9374ba28
Validity
Not Before: Sep 21 16:00:47 2026 GMT
Not After : Sep 22 16:00:47 2026 GMT
Subject: CN=f9b49c334d381758a59f9f97663b8edff00f64f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:77:a6:d1:2c:4e:61:9a:55:d5:b5:51:fc:
8e:f5:00:73:5b:2f:95:91:1e:5a:b7:91:9e:98:de:
e5:4d:b5:5d:7a:d4:eb:af:82:27:f6:2b:13:61:b7:
10:a5:08:89:4a:ad:0b:15:bb:3a:ed:d0:b5:58:64:
8b:93:ba:56:b7:09:50:32:f0:06:f7:58:31:84:70:
8c:71:7d:2d:2f:4f:16:54:ad:9e:b6:ca:f7:8e:51:
8b:1e:2d:05:4d:e8:b1:a7:0b:ce:b9:38:b9:f5:de:
74:78:85:81:32:34:9d:b7:39:bb:d8:20:60:50:1f:
23:ea:de:f9:04:15:cf:05:16:99:a9:3e:b1:35:64:
23:08:30:88:c5:76:74:e6:8a:b8:16:fe:e4:d3:2b:
c1:a2:a0:50:11:34:cc:e4:cc:27:55:f0:62:01:7a:
37:62:41:12:3e:8b:2d:3c:9d:c7:8a:76:14:0a:b7:
ee:fd:97:da:fe:32:07:53:d6:1e:cc:5f:bf:35:e1:
19:7f:f6:76:09:29:1d:22:bd:fa:63:8f:35:fa:79:
51:56:3a:7f:ba:16:c7:85:0d:61:13:18:3a:f7:d3:
b7:a1:03:17:a5:8e:ec:b6:e1:0e:ef:a3:3b:48:29:
b8:d6:84:bd:b0:89:4e:e0:49:28:f9:84:17:d8:06:
5a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B4:9C:33:4D:38:17:58:A5:9F:9F:97:66:3B:8E:DF:F0:0F:64:F1
X509v3 Authority Key Identifier:
keyid:AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:61:8d:ce:58:2d:64:75:c0:64:60:4f:7b:99:01:fe:eb:1a:
2d:79:9c:23:81:9e:38:e4:56:f0:d4:6b:8b:14:63:a3:5a:9f:
9a:35:fe:59:87:63:92:58:ec:01:9e:fa:06:22:4e:c2:51:94:
37:0f:4b:31:29:cf:4b:52:24:a4:b5:bf:08:ed:8f:03:83:91:
db:55:5f:3a:c8:51:c1:4e:66:38:1f:f4:2a:8f:02:89:70:68:
d1:81:d6:0e:d5:07:3c:85:1a:60:98:8c:7a:94:59:c7:9d:e1:
4e:c1:a0:5e:90:55:4d:fc:86:91:72:bd:2b:a2:d4:33:d8:a6:
22:6e:36:53:cb:87:73:47:40:ec:ac:ab:c6:9c:c8:bf:79:69:
1a:59:98:a1:a1:0e:db:da:1f:86:07:96:37:58:01:f9:95:b9:
0b:9a:a8:a9:2e:32:83:d0:4c:82:ee:70:c9:30:6f:ae:fa:c1:
37:0a:a3:92:6f:09:18:37:1d:72:d6:c1:2c:da:ba:90:71:45:
6e:45:12:90:d1:10:0a:b4:1c:a2:ac:c1:ac:17:1f:87:15:6b:
2b:3f:d9:14:09:52:b3:2b:21:f5:d9:b0:39:65:37:17:49:77:
92:cd:86:73:7d:51:cd:2b:af:07:30:8c:ab:ac:cd:6f:0f:71:
36:db:db:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:22:08 2026 by rpki-client