Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
File: 7ixIe2tr3aIheQctkqjwHo5zZjQ.mft (raw, json)
Hash identifier: 0SI4BE42zKgg9nlcpPXTqJfwrO0+ECsP9ZATAIeJRu0=
Subject key identifier: 4F:53:0A:32:00:2D:3F:97:93:E6:0D:4C:9D:4E:9B:70:ED:60:68:57
Authority key identifier: EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
Certificate issuer: /CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Certificate serial: 01A0D26E3E0213333D01DCDBA86340D92DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 08:00:35 +0000
Manifest this update: Thu 24 Sep 2026 08:00:35 +0000
Manifest next update: Fri 25 Sep 2026 08:00:35 +0000
Files and hashes: 1: 7ixIe2tr3aIheQctkqjwHo5zZjQ.crl (hash: zcuMWoSv+CGhAwq0kmgQIicf0TuBhv9nkDtW8xFBtKQ=)
2: _osGDzZycVvwVO8jk7tST0-kMuc.roa (hash: V5At1uVjWkeBJy6WzVu631/zeJQGqErhpfeeQ5kY2uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:3e:02:13:33:3d:01:dc:db:a8:63:40:d9:2d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Validity
Not Before: Sep 24 08:00:35 2026 GMT
Not After : Sep 25 08:00:35 2026 GMT
Subject: CN=4f530a32002d3f9793e60d4c9d4e9b70ed606857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:da:ae:74:64:0e:1a:f0:32:89:da:21:78:
98:3e:35:8b:8c:5c:f4:9c:39:ab:6b:cc:7c:84:b3:
c2:8d:69:3f:10:ca:88:b2:74:34:29:7c:8d:0d:4e:
d3:bf:6d:b8:92:5a:7f:a1:a5:07:0e:5e:10:56:d6:
29:8a:b2:2b:2b:b5:f9:48:70:4d:af:47:20:41:d8:
69:9e:de:8a:79:e7:d6:2b:66:4f:b2:22:83:72:ad:
95:8e:80:20:a7:96:05:cb:46:e6:a3:ab:66:1f:fb:
62:b5:5b:de:c2:54:9d:45:df:61:b8:0e:a9:5b:0a:
79:54:b2:8e:cd:f5:be:22:13:bb:b5:1d:bf:3f:4c:
7a:ab:41:92:2b:65:4e:29:30:67:e4:df:c0:48:4a:
16:44:72:b2:31:fd:99:44:f3:07:09:d6:14:22:fe:
5b:12:da:52:08:49:39:ef:e1:2e:08:57:f1:c8:2f:
a5:bf:45:a0:a0:83:36:ba:75:c5:09:fd:10:e8:73:
0b:89:0d:26:81:09:9d:29:d8:21:8e:4f:af:7f:ff:
b8:9b:b1:13:6e:09:19:c2:32:88:4e:c0:da:d5:8a:
a3:a0:a8:c2:dc:2b:94:71:30:3d:72:06:27:02:75:
d2:b4:a6:5e:0c:88:ff:e1:6b:ca:a8:43:70:25:5d:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:53:0A:32:00:2D:3F:97:93:E6:0D:4C:9D:4E:9B:70:ED:60:68:57
X509v3 Authority Key Identifier:
keyid:EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:4e:0d:97:ec:32:57:7e:8d:a9:3b:96:49:04:4c:8a:21:b7:
33:36:63:d4:f6:bb:9c:9b:6b:41:8b:1e:6c:cf:b5:7e:25:f3:
ff:7b:50:af:9a:b2:ec:16:98:35:99:55:80:1b:92:ac:00:9f:
7b:50:ca:f5:3b:02:2b:fd:4e:cb:f0:d0:d3:99:46:5d:a4:16:
08:71:a5:64:1f:03:08:e9:02:30:d6:a3:ec:de:71:f3:79:0f:
b5:5f:cd:d0:0e:92:40:2c:c4:f9:63:4a:d0:96:35:71:c6:37:
14:ea:15:e2:c6:fd:a8:09:3f:9b:92:a1:6b:72:76:21:3e:29:
43:c1:e2:21:81:e9:d5:06:28:11:d9:1b:fc:5e:eb:93:85:ed:
aa:ef:d9:38:0f:d9:e8:61:38:8f:9f:2b:d0:47:a6:3a:ac:96:
38:d5:98:d7:27:fc:02:28:fb:12:64:8c:cd:5b:95:d4:a4:14:
ca:8f:8c:61:74:9a:65:0c:69:6b:24:9d:10:8e:47:58:64:c5:
e6:be:ba:74:a5:55:05:40:6e:4e:39:b5:5f:c7:2d:b9:f8:68:
0c:4e:b5:0e:41:a9:58:ec:1b:ad:e6:b9:b4:42:d0:d5:c8:21:
95:ef:e0:14:de:e2:63:5c:b7:55:8d:62:fa:5b:88:92:18:03:
22:16:e9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:01:46 2026 by rpki-client