Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
File: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft (raw, json)
Hash identifier: 9oBoHxF5trwaKM442papNFY0ZHDw4TKzHSa2rAmRJlo=
Subject key identifier: DD:43:8C:88:70:A7:B8:E7:96:CD:E4:15:E4:16:0E:DC:2C:40:34:EE
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 01A17B4D9A1585EDFD5A928D6151D56DC450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
Manifest number: 14B6
Signing time: Tue 27 Oct 2026 03:00:45 +0000
Manifest this update: Tue 27 Oct 2026 03:00:45 +0000
Manifest next update: Wed 28 Oct 2026 03:00:45 +0000
Files and hashes: 1: 5z8L94SxohW89feZF-x7UUHOUGw.roa (hash: J9U9SwJZOAhHbw/+dwZT4u/bEO014TJ7Spfz6aawrAo=)
2: 60ZuDyr70onvZz7b_VP-SDmx33E.roa (hash: twz5MCkaRcivByRDA9QCyxItgQZO9OCdluDvL7eF7Ro=)
3: BlrqBtWblMfctvze6Z4e1h26Vg0.roa (hash: mrpfN/u4KNrOk9l0nXYVVF7vi+rRmvUj9lVXmfONvc8=)
4: NHjW7dPsyIq0Ra6kfJvb1FDPOrc.roa (hash: eNPkOFpshNdBId/GwxgDcZ/1OocRZllruwGL/l+cxaA=)
5: TmO2qs3CJ7nD3brN-Xezi1R7_Eo.roa (hash: r53OH2xwFa4qKn9FoyBvVY4gvGfnLfCBjSGuWq2Tb+U=)
6: e9W3bqM-9Cf9J8NK5NJYdPxtNqQ.roa (hash: fhBttHfpH+r5wDlnd1XHbP4VIUk5mx77G0HB40PrGrc=)
7: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl (hash: hTkih85Tbw/DPBdtA75Op8QKtnYxtBdV3/tBMW8x1L0=)
8: vLogJj6NuTRQtmEXSY4brF-qnBY.roa (hash: zohFkXr1VCR5q6x1R2Xx5enwasHpy8O1g/gJdKkByho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:9a:15:85:ed:fd:5a:92:8d:61:51:d5:6d:c4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Oct 27 03:00:45 2026 GMT
Not After : Oct 28 03:00:45 2026 GMT
Subject: CN=dd438c8870a7b8e796cde415e4160edc2c4034ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:51:da:4a:10:e5:c0:93:d4:0a:cd:c5:10:00:
c0:ee:6a:2d:cf:7a:e5:1a:c9:97:f0:fd:c2:da:ba:
99:f3:c9:4d:fc:6c:8f:e9:96:2e:7c:2e:9f:1e:43:
91:d2:c8:a2:02:64:51:3d:68:93:46:66:d4:82:78:
2d:7f:b6:cc:f4:1b:5f:f7:d6:f2:92:42:f5:1a:e8:
30:45:10:18:d8:9b:34:0c:19:fa:2b:8e:1e:43:87:
91:7b:b6:aa:a3:9c:60:0b:e5:25:8b:c4:e5:3d:4e:
c3:f9:81:55:97:30:0e:dd:10:a4:91:f3:52:96:d7:
df:92:b3:3d:da:ed:33:c8:97:74:03:8c:3a:95:3b:
46:81:82:6e:f1:20:72:43:17:e9:65:67:fc:91:d9:
59:6f:9a:07:5f:4e:5e:28:5f:d6:0a:48:5a:86:10:
e5:8c:bf:bb:32:c6:eb:83:ce:ba:ed:ad:89:b8:f4:
44:e7:5d:e0:07:40:40:40:cd:b6:1f:7b:87:62:f5:
29:b7:50:22:f4:a8:d3:73:9b:fc:fd:80:53:bb:1d:
72:df:01:00:f1:41:df:3d:fe:99:c8:22:2b:23:ef:
0a:56:6e:a6:43:52:eb:15:28:83:17:c3:56:3a:5b:
14:e4:b9:3d:8f:cd:bf:f5:89:76:5e:9b:4a:29:42:
22:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:43:8C:88:70:A7:B8:E7:96:CD:E4:15:E4:16:0E:DC:2C:40:34:EE
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d2:f8:2b:31:dd:14:13:0d:4c:d9:45:62:6e:0e:3a:5f:e8:
a1:a2:49:68:2a:1e:37:98:ec:36:07:8a:a9:28:24:54:66:d9:
2b:53:2f:60:8f:c8:eb:e4:f1:1f:15:58:0e:31:20:71:09:6d:
42:b6:3d:ab:2c:be:5d:83:c6:de:31:d3:ff:d1:62:08:13:a6:
03:ff:b1:86:cd:a4:8a:ec:05:90:b5:4e:da:5f:70:27:c1:2f:
c4:1b:4a:32:58:05:cd:d6:87:8a:5e:7d:c8:d4:91:21:33:f4:
bb:47:5a:4c:ef:a9:4a:be:a7:ec:58:1d:4c:4c:8f:7a:b9:5f:
b9:7f:33:df:b6:0c:09:be:62:f9:39:d2:ee:dc:1e:dc:8d:30:
98:c7:a3:34:bd:a4:74:16:d2:7d:1a:59:d3:11:22:3e:de:d0:
cc:8e:cc:8d:1c:be:81:3f:ae:f5:78:d1:87:a5:35:86:7f:be:
06:cb:6e:c1:17:39:c9:23:9d:ba:71:32:6d:e0:c4:da:b0:91:
8b:c9:d9:2c:43:2d:ec:0c:01:6b:1a:2e:65:8f:ef:3b:41:77:
d0:fa:b3:1d:73:55:59:f2:0e:6a:ce:d8:56:09:14:c1:27:ca:
5d:63:57:ce:be:cf:f5:44:6a:20:dc:ae:34:08:3d:1d:65:0a:
71:ee:7e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:59:06 2026 by rpki-client