Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/m7pRyuell0rHz4V0NLcfil9mSwc.mft
File: m7pRyuell0rHz4V0NLcfil9mSwc.mft (raw, json)
Hash identifier: y1cITKTt33dC6z+XP4zdDwsUMYm6fSGQBpofwHHLpOs=
Subject key identifier: D3:F3:04:41:31:86:79:69:81:67:6E:36:1B:7E:41:97:52:9C:41:6D
Authority key identifier: 9B:BA:51:CA:E7:A5:97:4A:C7:CF:85:74:34:B7:1F:8A:5F:66:4B:07
Certificate issuer: /CN=9bba51cae7a5974ac7cf857434b71f8a5f664b07
Certificate serial: 01A0EB1CC2C32647091AB58591A83C165DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7pRyuell0rHz4V0NLcfil9mSwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/m7pRyuell0rHz4V0NLcfil9mSwc.mft
Manifest number: F5
Signing time: Tue 29 Sep 2026 03:02:05 +0000
Manifest this update: Tue 29 Sep 2026 03:02:05 +0000
Manifest next update: Wed 30 Sep 2026 03:02:05 +0000
Files and hashes: 1: AUt5aEe9I9r-_yYGhcti899JX80.asa (hash: W9/s7qsjqgi329110nptyxROIVauh37lCo9hMcGLc8E=)
2: m7pRyuell0rHz4V0NLcfil9mSwc.crl (hash: I3B7uQbC5WW9EjO5cjtQs+rF9IfTwwGZWQH8gA5KdT4=)
3: nT0adKrHOXX76zlKbeIetM2fImw.roa (hash: mcJKLegTxunUDPkoN6855luXrU9XjcS8d14LoXoBwZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/m7pRyuell0rHz4V0NLcfil9mSwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/m7pRyuell0rHz4V0NLcfil9mSwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7pRyuell0rHz4V0NLcfil9mSwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 03:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1c:c2:c3:26:47:09:1a:b5:85:91:a8:3c:16:5d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bba51cae7a5974ac7cf857434b71f8a5f664b07
Validity
Not Before: Sep 29 03:02:05 2026 GMT
Not After : Sep 30 03:02:05 2026 GMT
Subject: CN=d3f304413186796981676e361b7e4197529c416d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:1c:49:58:27:a8:14:fe:43:3c:05:a0:b4:
c6:14:d5:11:01:3c:62:b4:9b:ce:04:03:71:08:74:
f4:84:76:4d:73:34:cd:6c:83:4d:ab:c4:e5:fe:54:
b7:6f:dd:6b:b1:68:48:ef:66:e5:e4:55:5c:5d:66:
57:a8:08:12:12:d9:2a:a0:4e:91:e5:b9:20:07:e9:
0a:85:6e:b0:de:14:19:44:b5:f1:8c:5f:b4:46:2c:
97:d7:69:15:e7:59:19:b5:68:58:70:e5:8c:31:3e:
cc:ee:14:99:2e:de:2e:12:9e:ac:1b:df:7f:04:26:
20:ad:69:1d:bd:91:49:94:1d:58:c2:47:16:f3:d4:
0c:ba:d9:58:fa:fe:74:54:ed:64:93:5f:1e:9f:94:
b8:4a:b5:69:4c:fc:b3:9a:f9:76:44:c6:42:43:47:
a8:f2:0a:97:05:4b:86:19:57:e5:e6:30:37:a6:8c:
d3:d5:77:20:54:82:2f:73:47:e6:df:4a:83:6d:c4:
2c:ed:7c:03:bc:4d:48:a1:da:33:b7:7e:55:98:1c:
05:56:e6:08:ec:ad:a2:c8:9a:53:74:fa:8c:cb:bd:
bd:df:e7:fb:c8:cb:7e:86:07:7d:11:ae:a8:d3:ff:
93:af:d5:b7:d5:06:3f:06:0a:d3:4c:ad:de:30:26:
c2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F3:04:41:31:86:79:69:81:67:6E:36:1B:7E:41:97:52:9C:41:6D
X509v3 Authority Key Identifier:
keyid:9B:BA:51:CA:E7:A5:97:4A:C7:CF:85:74:34:B7:1F:8A:5F:66:4B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7pRyuell0rHz4V0NLcfil9mSwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/m7pRyuell0rHz4V0NLcfil9mSwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/m7pRyuell0rHz4V0NLcfil9mSwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:71:4b:d7:18:b6:96:a6:a1:e9:7e:f6:40:1b:73:7f:8a:dc:
ff:08:e6:e2:71:69:f8:6d:97:61:12:c7:b4:8d:bd:d9:b1:47:
2b:d8:88:2e:b4:36:8c:79:91:bb:4c:c0:8c:32:80:0c:07:64:
4f:64:ed:bb:3e:5c:f5:b4:6d:02:c1:a3:4d:aa:12:18:5b:18:
c5:b5:fc:88:b0:8d:0f:98:ad:9e:8b:8e:1c:de:ad:bb:52:58:
3d:fb:fa:d5:74:c3:78:07:25:2a:83:ae:bf:47:6f:6b:0b:6d:
a7:c7:48:b1:57:a3:eb:67:c5:bb:55:38:85:83:f4:69:9e:3a:
0b:19:a3:fe:25:2c:3d:35:ef:ac:1d:88:ac:cd:91:35:6e:e4:
4f:28:d7:74:39:1e:32:d9:ae:1a:ab:e0:cd:cb:5a:f7:ca:33:
f4:13:6f:64:4d:e5:b8:d6:9d:ae:1c:ec:2a:eb:32:c0:86:7a:
2c:2c:e1:40:cd:bf:a2:d7:a2:99:5d:ef:10:d2:8e:01:48:10:
7e:d0:07:e7:af:39:92:a1:e6:de:ed:df:3b:11:46:c2:fc:12:
05:18:40:26:15:be:a4:74:17:64:f7:99:e0:82:b1:5d:da:63:
89:e0:de:bd:e1:5e:3b:66:80:90:fe:9b:04:a3:86:aa:1d:94:
da:38:dc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:18:21 2026 by rpki-client