Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.mft
File: 7m9I_I5rX9kh3jgFehSgwJioJjs.mft (raw, json)
Hash identifier: XrnGqAxmvEjJ/XdDlG7BpGDNws/SB+B0QoFYRS9qov4=
Subject key identifier: 14:FB:E6:65:81:FA:B0:3C:8B:64:CC:6B:E5:DB:2E:27:11:08:BD:1F
Authority key identifier: EE:6F:48:FC:8E:6B:5F:D9:21:DE:38:05:7A:14:A0:C0:98:A8:26:3B
Certificate issuer: /CN=ee6f48fc8e6b5fd921de38057a14a0c098a8263b
Certificate serial: 01A0404E47ADA1D945D2741FDEBBDE37169E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9I_I5rX9kh3jgFehSgwJioJjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.mft
Manifest number: 39
Signing time: Wed 26 Aug 2026 23:01:07 +0000
Manifest this update: Wed 26 Aug 2026 23:01:07 +0000
Manifest next update: Thu 27 Aug 2026 23:01:07 +0000
Files and hashes: 1: 7m9I_I5rX9kh3jgFehSgwJioJjs.crl (hash: MIAD7ESfU4HzvjoSpQcIYDBgiD37tHvl9LGvI2wbk1w=)
2: 9wwtrRgapHggpmafOoIRakXKgWA.roa (hash: 9XxZ7od9E/OVY/WT96L7AW+I7c7a65w9SdFXeI4vrKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7m9I_I5rX9kh3jgFehSgwJioJjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:47:ad:a1:d9:45:d2:74:1f:de:bb:de:37:16:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f48fc8e6b5fd921de38057a14a0c098a8263b
Validity
Not Before: Aug 26 23:01:07 2026 GMT
Not After : Aug 27 23:01:07 2026 GMT
Subject: CN=14fbe66581fab03c8b64cc6be5db2e271108bd1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0f:bf:3f:f3:7f:ad:ed:1a:ca:0a:42:61:54:
d3:a5:66:98:2b:28:95:cd:a8:fc:47:bf:e9:d6:b6:
e2:a5:fa:8b:a6:46:de:ef:1e:6d:bc:81:de:a4:6b:
b9:2e:97:94:14:4d:bd:59:c8:a4:00:8c:a5:50:ac:
af:31:85:f6:31:da:96:a4:b4:bd:17:cd:5f:e9:04:
39:5a:6e:e0:6b:ee:a3:aa:1f:d4:9c:ed:11:ce:cb:
e9:fb:fd:d4:d1:13:b2:c8:35:1d:ae:1d:49:50:6a:
64:46:fc:1c:8c:ab:d8:52:d8:63:8b:ec:f6:1a:fb:
e5:3f:47:e4:c1:17:f9:9c:85:5c:0e:03:3a:58:d5:
b9:34:16:16:50:93:73:6d:bd:72:d0:c4:5d:e3:92:
78:c7:c8:46:f7:76:c4:1f:6e:2d:62:ee:9d:02:9d:
96:6f:72:0f:f5:70:a6:b7:21:a1:8b:56:cc:f4:ee:
47:50:05:f2:89:e5:a3:c3:9c:ec:7a:9e:a8:7f:17:
a3:1b:75:18:7a:3e:3b:0f:e3:33:1b:14:1e:44:d0:
32:0b:a5:94:26:08:60:eb:47:25:cc:6f:e6:f1:24:
6c:8e:bd:42:17:a4:88:9b:80:8a:ae:79:ef:fb:e0:
cd:a5:72:50:45:c9:7c:38:27:16:6a:4f:68:1f:ab:
ba:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FB:E6:65:81:FA:B0:3C:8B:64:CC:6B:E5:DB:2E:27:11:08:BD:1F
X509v3 Authority Key Identifier:
keyid:EE:6F:48:FC:8E:6B:5F:D9:21:DE:38:05:7A:14:A0:C0:98:A8:26:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9I_I5rX9kh3jgFehSgwJioJjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c8:ee:b9:27:a1:d5:80:3c:db:44:74:73:38:65:88:59:e2:
1a:20:86:f3:6c:86:74:09:1b:18:6f:46:1b:cb:b6:c0:7c:51:
c5:bb:b5:5e:6e:f2:1a:02:89:7f:c5:ed:f9:c9:0d:bb:6a:01:
93:e6:94:55:f7:71:a1:a6:51:cc:e7:87:74:f8:cf:da:1d:b6:
64:1d:2b:4d:74:95:96:90:4a:f7:1f:2e:20:8c:2b:62:b5:ba:
65:8f:d8:55:1b:a1:d2:2f:e5:f1:08:80:7f:73:14:02:a3:8e:
b4:fc:90:82:2a:0e:25:a8:6d:5e:2e:e8:e3:d4:8f:4e:eb:50:
3c:52:06:0f:d8:e7:ed:cf:0f:01:ac:a4:e0:c9:d5:ef:d4:9c:
94:50:7c:9c:ab:de:e6:ad:00:13:17:91:c9:58:27:1e:39:39:
91:95:18:ed:b1:e3:62:58:ca:a1:e9:1f:ba:0f:16:d2:57:49:
5d:b0:33:fa:75:db:ce:2d:ef:b8:6f:aa:44:17:99:9f:46:da:
0e:f5:12:98:c6:de:9d:d3:07:af:8f:57:eb:05:64:87:01:7e:
87:e4:dc:45:dc:88:b9:2b:57:52:25:ea:34:55:1d:a7:28:3f:
f7:ad:af:64:20:82:b0:e4:ba:42:ca:a0:ed:92:b4:fb:db:11:
0a:86:36:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:06:51 2026 by rpki-client