Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
File: 7zGgVPyftLFH6KmL2n5xyBrwvP0.mft (raw, json)
Hash identifier: 8AuQvpYm7pdukvoiZhn/I0UugkJdWU2zQ5FJPXk2IqQ=
Subject key identifier: 76:DE:7D:60:5A:60:38:91:AF:BA:25:49:CF:44:82:AD:31:01:9B:30
Authority key identifier: EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
Certificate issuer: /CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Certificate serial: 01A1453AC69007090AB84EBB8C0673031CCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
Manifest number: 1AAB
Signing time: Fri 16 Oct 2026 15:00:42 +0000
Manifest this update: Fri 16 Oct 2026 15:00:42 +0000
Manifest next update: Sat 17 Oct 2026 15:00:42 +0000
Files and hashes: 1: 7zGgVPyftLFH6KmL2n5xyBrwvP0.crl (hash: OzcgBzohhCFSnZQ8DPjzhBD/I9dmlACtLxjbsZ1+OoI=)
2: RwU9zWthyfSOUWuvsWlsVhpMbmQ.roa (hash: 74TavDCjufR6GUNTwdp6AJnNFnxix31gx+8KWS5C2g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:3a:c6:90:07:09:0a:b8:4e:bb:8c:06:73:03:1c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Validity
Not Before: Oct 16 15:00:42 2026 GMT
Not After : Oct 17 15:00:42 2026 GMT
Subject: CN=76de7d605a603891afba2549cf4482ad31019b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:e6:e6:54:64:88:e7:27:ff:40:8b:61:b0:
c4:41:e8:99:9d:fe:c3:ab:c2:3f:7b:2f:20:33:d4:
9c:19:ce:77:28:65:07:aa:85:55:e7:5f:7a:0e:bd:
4b:2a:99:58:ad:4d:dc:4d:80:f2:e2:32:34:5c:47:
ff:4c:b5:12:93:de:7f:41:f3:06:1f:65:fb:28:e8:
60:7c:8c:1e:20:c7:94:ee:59:a0:4c:9c:e2:48:9f:
9f:02:77:c4:8f:01:9c:b5:ed:16:43:63:5c:9a:7d:
61:d5:56:3f:ec:7c:78:4f:7c:95:8d:9e:ba:b3:97:
98:af:16:c6:bf:49:59:7e:44:9f:e6:cd:0b:e0:73:
2b:3f:bb:b8:6f:ed:ea:5a:16:20:ae:52:77:a5:3d:
09:76:38:3f:4c:a9:d3:3d:c8:bf:79:85:8f:bf:28:
58:4b:93:ff:a2:a1:e3:b6:7b:b4:d1:28:da:51:13:
56:f7:07:79:a1:bf:06:b2:31:37:80:d8:62:05:04:
18:de:29:b5:12:1e:2a:bc:5a:ce:02:fc:6c:52:29:
b6:3f:79:2a:df:fc:3f:00:ab:2e:f1:5e:26:df:b7:
48:9b:f3:2b:55:ce:3c:2b:be:80:c4:fe:12:3f:a5:
b2:17:8c:77:96:35:e6:70:ba:f8:1e:58:4e:b8:37:
e3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DE:7D:60:5A:60:38:91:AF:BA:25:49:CF:44:82:AD:31:01:9B:30
X509v3 Authority Key Identifier:
keyid:EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f1:12:4a:8b:9e:53:1d:be:e4:7c:25:72:bd:1d:47:33:90:
cf:b7:79:ed:af:42:2e:bd:3b:d9:f7:c3:1a:8c:66:24:7f:67:
de:0b:dc:b0:fa:a0:d1:ec:eb:23:4d:c4:d4:1c:eb:83:97:23:
c0:4a:89:69:4f:99:cd:91:03:85:8a:34:0d:ad:d9:c8:c9:2b:
14:aa:11:6f:d0:74:66:80:6e:a9:07:1e:42:f3:05:66:94:c9:
6c:a5:7e:d8:b3:ad:e2:d8:92:75:64:28:ad:50:96:ea:15:ea:
0b:94:c2:a5:c8:c3:58:62:b4:10:ee:4d:9c:a2:ea:c0:5e:45:
63:9f:86:e8:d0:2b:92:02:32:68:e5:24:b8:be:3d:75:91:f6:
22:73:84:fa:b2:3a:52:7b:be:d6:23:64:b2:cf:03:13:98:73:
db:7e:6c:41:bd:fa:3e:f0:a6:d3:92:98:3b:88:fd:cb:8c:6e:
59:a0:42:a7:ae:b6:b9:99:68:f6:08:ad:eb:6e:e8:1f:31:87:
44:0e:34:7d:27:4e:f1:0c:4b:4a:eb:5e:6f:92:c2:74:23:8c:
50:da:37:fb:c6:67:95:19:a9:22:f9:09:de:5a:67:1a:b9:72:
20:1c:73:88:17:56:82:d8:73:6b:b9:c4:23:81:e6:af:0f:cd:
3f:cd:a7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 01:10:14 2026 by rpki-client