Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json)
Hash identifier: a2p243GsCf62vh6fhUOKlGecd6sY+7ry9xzaEHAQvBQ=
Subject key identifier: C5:28:EB:CD:85:C0:79:AF:38:1B:BB:BF:34:B6:32:23:B4:69:47:A4
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial: 01A0C96B0D4CB8B7BE419607E12E120059C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
Manifest number: 123D
Signing time: Tue 22 Sep 2026 14:00:31 +0000
Manifest this update: Tue 22 Sep 2026 14:00:31 +0000
Manifest next update: Wed 23 Sep 2026 14:00:31 +0000
Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: BrQX/ezKzr9YsroATQIkh5GuyN+0viM4kwGz22tAUJc=)
2: rlgDOpAXjc8Na_ifPOhQG4zbxtM.roa (hash: reSEL9M69wAKbL5gRtqeNyqy/DyxKPTT8rPI7JNy6Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:0d:4c:b8:b7:be:41:96:07:e1:2e:12:00:59:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Validity
Not Before: Sep 22 14:00:31 2026 GMT
Not After : Sep 23 14:00:31 2026 GMT
Subject: CN=c528ebcd85c079af381bbbbf34b63223b46947a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:6d:30:c0:d3:54:8b:af:ae:e2:d0:4b:45:
67:f1:9f:f5:44:f6:81:15:ca:3b:99:f1:dd:df:38:
21:f1:9a:0a:0c:61:f8:ec:2f:e0:5f:49:bc:fc:be:
27:8e:8f:fc:30:13:ca:07:28:ef:cc:7d:4a:cc:18:
be:86:37:92:ea:c8:10:ea:d0:09:02:90:10:ee:3e:
7f:86:fa:c4:1e:d9:3e:52:25:ec:76:5b:d3:64:2d:
17:09:1e:78:3f:9a:79:90:04:e4:07:16:85:47:17:
75:df:c5:b3:91:54:21:af:be:31:20:9e:17:3e:ab:
98:bc:c8:d9:25:86:e8:d5:a8:1e:57:09:90:32:66:
7a:e7:d8:6b:fd:23:36:bc:dc:1a:cf:62:bc:94:bb:
ba:6f:d0:d3:00:cd:f0:b2:3e:ba:e8:2b:80:c9:9d:
47:cc:67:c6:a0:a0:b7:64:72:88:dc:6a:da:cf:7f:
4c:d5:0d:dd:f3:59:8b:f3:5f:e5:86:e8:54:5b:63:
54:25:66:f7:c0:9d:49:20:92:9c:4b:82:4e:e8:58:
23:32:4d:a4:94:8e:84:c7:49:57:b2:22:8f:50:4d:
b0:4c:e3:c4:ba:a7:2c:17:58:26:2a:2b:2f:ba:a5:
72:50:2a:71:e9:22:a7:97:57:0b:8f:fe:ba:3c:67:
99:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:28:EB:CD:85:C0:79:AF:38:1B:BB:BF:34:B6:32:23:B4:69:47:A4
X509v3 Authority Key Identifier:
keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:cd:ff:76:32:de:a8:77:89:b8:9e:9c:f5:63:2c:53:f0:27:
c5:53:35:96:51:4c:8e:ac:78:3d:20:43:00:16:8a:06:9f:4f:
5e:74:0b:7b:dc:ba:ad:86:b1:c8:b2:b9:6b:77:17:0d:b9:b8:
2a:54:f9:fc:44:fc:3f:de:9f:a0:df:91:9b:8c:95:ed:11:5c:
96:a7:7d:b9:2c:97:6b:c1:7a:d8:8e:6e:fc:d5:c3:ab:e1:f6:
42:5b:ea:7a:df:bb:bf:97:65:c5:b6:5d:fa:5a:70:44:92:14:
8a:58:65:b3:f5:0b:6e:dc:50:72:72:b2:5a:a9:ef:79:7a:fc:
cb:40:98:3c:77:b7:d4:f8:62:1c:41:51:6e:ec:99:2e:d4:02:
1d:0f:e3:85:8b:71:b3:4e:88:f6:4a:a4:8b:d1:59:8e:64:94:
b2:0c:fe:37:e2:53:37:b3:a0:7f:df:a9:54:4e:e5:cd:84:76:
5b:8f:f1:bf:53:cd:41:f3:06:23:6e:de:01:eb:1a:dd:06:37:
99:f2:a1:e6:ee:41:85:df:a4:ef:40:86:e2:54:26:5d:77:95:
11:8c:4c:b3:e7:80:4b:9e:d1:b5:b6:98:bd:a1:78:75:09:b5:
74:75:06:9c:a1:22:02:d4:1b:6b:48:cb:46:cb:ef:4a:93:87:
a8:7c:01:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:27:04 2026 by rpki-client