Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
File: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft (raw, json)
Hash identifier: jMGwij93OvOG4JykRD2MKoEYzZRZY3MQ3pPhidoWjZY=
Subject key identifier: 4F:E8:2D:2A:16:A2:FC:2E:36:04:9C:37:85:B1:CE:B2:91:F2:81:EC
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 01A08BD5E1EBA03ACB4B977A3A9A77C573CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
Manifest number: 143A
Signing time: Thu 10 Sep 2026 15:00:45 +0000
Manifest this update: Thu 10 Sep 2026 15:00:45 +0000
Manifest next update: Fri 11 Sep 2026 15:00:45 +0000
Files and hashes: 1: 5z8L94SxohW89feZF-x7UUHOUGw.roa (hash: J9U9SwJZOAhHbw/+dwZT4u/bEO014TJ7Spfz6aawrAo=)
2: 60ZuDyr70onvZz7b_VP-SDmx33E.roa (hash: twz5MCkaRcivByRDA9QCyxItgQZO9OCdluDvL7eF7Ro=)
3: BlrqBtWblMfctvze6Z4e1h26Vg0.roa (hash: mrpfN/u4KNrOk9l0nXYVVF7vi+rRmvUj9lVXmfONvc8=)
4: NHjW7dPsyIq0Ra6kfJvb1FDPOrc.roa (hash: eNPkOFpshNdBId/GwxgDcZ/1OocRZllruwGL/l+cxaA=)
5: TmO2qs3CJ7nD3brN-Xezi1R7_Eo.roa (hash: r53OH2xwFa4qKn9FoyBvVY4gvGfnLfCBjSGuWq2Tb+U=)
6: e9W3bqM-9Cf9J8NK5NJYdPxtNqQ.roa (hash: fhBttHfpH+r5wDlnd1XHbP4VIUk5mx77G0HB40PrGrc=)
7: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl (hash: EllfkH2G7+gZAs4lt/DTnwUFL69u4CI1HJwGQ9HEa04=)
8: vLogJj6NuTRQtmEXSY4brF-qnBY.roa (hash: zohFkXr1VCR5q6x1R2Xx5enwasHpy8O1g/gJdKkByho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:e1:eb:a0:3a:cb:4b:97:7a:3a:9a:77:c5:73:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Sep 10 15:00:45 2026 GMT
Not After : Sep 11 15:00:45 2026 GMT
Subject: CN=4fe82d2a16a2fc2e36049c3785b1ceb291f281ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:1b:2a:5f:dd:1f:1a:79:a9:6f:4e:a1:fa:
84:f7:d2:8c:99:59:5d:a9:11:7d:e2:6c:cf:59:a2:
1b:66:af:31:ff:83:60:f1:aa:09:06:ea:cb:90:02:
2a:ca:d2:31:8b:f8:6c:65:8c:aa:1d:c2:d0:fb:e1:
ea:f4:b5:2b:d0:34:2f:88:7b:86:da:e9:7f:3e:74:
ba:bb:d2:5f:93:79:a6:d9:f9:21:8f:c6:03:40:94:
bf:65:d0:b4:f7:3e:69:68:e7:39:b9:8a:20:2f:72:
4d:5e:0e:4c:0b:09:f7:61:06:49:ec:b6:d9:13:5e:
0c:f8:d1:52:69:b0:6f:fb:15:07:a6:9c:52:5a:c2:
38:6e:4b:8b:64:91:51:75:3b:db:9f:be:3a:57:9c:
44:a5:ca:0c:30:36:bb:f1:41:0c:6a:30:6e:d2:ee:
10:be:2a:5c:9f:37:94:bf:29:60:c1:9c:22:57:39:
f2:6d:36:59:26:ac:da:e9:02:35:48:1a:83:ab:1d:
94:71:1a:da:cc:69:e4:4b:ca:28:63:08:c5:73:e3:
28:13:ea:4b:72:f4:e6:f8:5f:99:94:11:fd:1f:a1:
be:53:e8:d2:82:e4:ad:3f:c3:f2:29:c2:c2:a4:21:
75:c4:a2:5a:cf:13:d1:4e:ee:55:cd:6c:3e:ea:74:
9f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E8:2D:2A:16:A2:FC:2E:36:04:9C:37:85:B1:CE:B2:91:F2:81:EC
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b7:34:68:f4:90:96:66:0c:fb:ff:34:80:57:00:79:2c:fc:
d4:87:9b:9b:3e:89:d3:bd:c8:e1:d9:5e:af:26:38:c2:f5:53:
62:01:0f:4b:90:d1:35:78:8a:ea:0c:9d:69:c6:2b:7e:0b:1f:
a1:7b:4f:c7:f0:af:45:68:bf:a3:cb:ce:2b:6c:73:8d:95:19:
d1:5a:06:5c:f2:b3:00:8e:60:64:bf:07:f1:44:2c:90:44:19:
ea:71:ec:cf:52:1f:32:4e:34:6b:1e:81:90:fd:f4:de:c6:4a:
d2:e0:75:b3:d7:17:bd:de:c6:e2:6c:bb:a7:32:a7:c0:40:30:
ec:f9:3b:84:47:19:cf:03:33:9c:70:d6:ab:cf:e9:e4:79:2f:
32:2c:3a:84:7e:52:48:21:59:fc:e5:b6:3f:90:60:7a:c5:11:
39:dd:ad:c2:7b:95:1a:89:e8:3f:98:97:c1:f0:17:35:0d:69:
b1:ee:a0:ef:cd:7c:c3:f0:90:dc:79:f7:bd:69:05:37:5b:a7:
d3:00:77:aa:57:74:ad:61:96:33:15:8e:69:f0:70:6b:d9:b5:
7b:cc:d2:2d:53:1f:10:7f:a2:6f:3a:af:0b:f5:ba:24:40:8b:
65:66:81:56:cd:67:66:b6:f4:0f:bc:bc:fb:9d:45:a9:fc:f6:
85:bb:1e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:48:47 2026 by rpki-client