Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.mft
File: p7FZxNPVH1oAMpYhpGRg7Y7h43Y.mft (raw, json)
Hash identifier: gUFcRv780Y/nFLesopA0evuFusKz3OoK/n0pM68Cn9k=
Subject key identifier: EF:97:45:D7:49:92:46:4C:A7:F7:CF:CD:3F:47:4A:46:F1:F9:B1:EE
Authority key identifier: A7:B1:59:C4:D3:D5:1F:5A:00:32:96:21:A4:64:60:ED:8E:E1:E3:76
Certificate issuer: /CN=a7b159c4d3d51f5a00329621a46460ed8ee1e376
Certificate serial: 01A0C96B6320E9D0FEF7203AD3ED9E3956B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.mft
Manifest number: 44
Signing time: Tue 22 Sep 2026 14:00:53 +0000
Manifest this update: Tue 22 Sep 2026 14:00:53 +0000
Manifest next update: Wed 23 Sep 2026 14:00:53 +0000
Files and hashes: 1: 446iU2iUtSCpiCvxa6ntvEqHvJE.asa (hash: XNtxkVgkkNUJbPUnKEA9zgscIN6i8nLzHGlvaFwLLcg=)
2: UCnDSTgchyE1qeXLpPxJeB9D6a8.roa (hash: 9gREJPHHNeNj4a7K+bK2FHfoOR8Wo3wM4kVwG6ZeXw0=)
3: p7FZxNPVH1oAMpYhpGRg7Y7h43Y.crl (hash: P6vW0dDVk/UOFfsI9Ok0KrbGgI8bQGybc61udVp04Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:63:20:e9:d0:fe:f7:20:3a:d3:ed:9e:39:56:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b159c4d3d51f5a00329621a46460ed8ee1e376
Validity
Not Before: Sep 22 14:00:53 2026 GMT
Not After : Sep 23 14:00:53 2026 GMT
Subject: CN=ef9745d74992464ca7f7cfcd3f474a46f1f9b1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:e5:83:d5:5d:96:44:42:ec:b2:6f:65:e5:
be:3c:c8:ec:fd:e6:04:af:ad:74:75:f3:0e:21:6c:
a2:96:65:9c:bb:9d:fc:54:f2:62:18:b1:43:da:4e:
bc:06:56:0f:8c:6a:53:e1:8a:d5:63:eb:2e:f2:b0:
5d:1d:3b:6a:c9:b5:5d:63:00:cc:ff:03:0e:c9:27:
c5:dc:3c:a5:86:61:4a:f3:0d:c8:a7:69:47:0b:de:
41:92:84:56:e4:af:5b:57:06:71:bd:ff:b1:8d:9a:
6d:ec:70:9d:ae:70:6e:c1:b7:b6:9e:70:c3:13:ff:
69:b0:8d:cb:fb:29:89:a8:59:74:65:5e:2a:88:0b:
47:63:fa:7a:ae:f8:66:46:08:f3:16:cc:f6:74:6b:
02:17:7e:ff:8a:71:eb:30:39:82:a0:f7:5f:53:05:
d4:31:cc:dc:42:32:1c:e9:c6:1f:be:9c:5d:29:7a:
fc:24:a4:12:d2:c0:eb:ef:00:1b:dd:82:39:46:9b:
c2:82:15:c4:17:9f:67:48:e5:45:37:14:0f:5a:65:
4e:26:3d:29:03:d8:3f:1a:f3:a0:3f:50:cf:c7:18:
58:de:88:5c:6d:d5:3e:a5:e7:78:ea:3b:e2:65:4d:
a6:4b:cc:59:2c:3b:f5:8a:b5:e3:a6:b7:e0:42:97:
a3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:97:45:D7:49:92:46:4C:A7:F7:CF:CD:3F:47:4A:46:F1:F9:B1:EE
X509v3 Authority Key Identifier:
keyid:A7:B1:59:C4:D3:D5:1F:5A:00:32:96:21:A4:64:60:ED:8E:E1:E3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f6:a5:78:8b:1f:d8:ce:5f:e9:d3:5d:d5:9b:92:4d:43:38:
1d:1f:81:3f:ba:36:cc:29:52:5a:ad:59:16:4e:89:b7:44:27:
7b:d2:83:11:3b:58:71:f9:4d:c1:68:e6:08:ac:78:5c:31:c0:
40:e4:b9:ad:91:6e:36:9d:23:0f:37:97:9d:c0:35:31:79:b3:
71:5e:d6:00:cc:ed:39:4e:54:06:b4:bc:9e:6e:be:f4:ad:26:
d8:b6:cc:67:3c:fd:ad:7c:b0:a9:97:26:e5:3c:a0:db:68:02:
12:0c:a0:c8:ec:1b:ac:41:ff:9e:3a:20:cb:e6:42:97:6d:b5:
5e:df:2f:ef:81:16:2e:29:7e:aa:63:8e:ea:5f:fc:81:aa:a2:
73:ee:ef:aa:40:f8:07:cc:4a:94:25:af:4f:55:58:be:ee:95:
01:87:3b:dc:7d:cf:9f:77:0e:29:27:96:73:a3:4c:fb:1c:c2:
98:77:74:dd:7c:e8:e8:33:79:08:c7:85:01:d6:59:3c:1d:d1:
4f:74:00:0d:64:6d:92:c2:84:70:9a:6d:38:ec:2a:4b:46:1b:
f6:cc:be:a9:c4:cb:b5:33:d6:03:99:f1:e1:76:b4:95:8f:2d:
77:20:54:3d:fb:84:38:14:38:45:58:66:04:6e:f8:34:d8:8c:
8c:eb:18:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:06:52 2026 by rpki-client