Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
File: 7PT52zCxnHXjWugDeT9OG0qqFIc.mft (raw, json)
Hash identifier: kTsvCMU7fTBmQjDrykLDdZRGHVpkwoKghjoOgH1E4bQ=
Subject key identifier: E0:36:F7:37:15:16:7D:48:E6:98:DA:19:10:D0:99:88:B2:D3:47:68
Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
Certificate issuer: /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Certificate serial: 01A08C7AC06181FE7E0271F08601207B3EC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
Manifest number: 17C9
Signing time: Thu 10 Sep 2026 18:00:49 +0000
Manifest this update: Thu 10 Sep 2026 18:00:49 +0000
Manifest next update: Fri 11 Sep 2026 18:00:49 +0000
Files and hashes: 1: 3wC4iAYIU6RjN3EGUKVhlIp3rko.roa (hash: r6BtCtLIRGTbjhqdmmeh1e+4MWSh7VLtqxWzoKISutU=)
2: 7PT52zCxnHXjWugDeT9OG0qqFIc.crl (hash: wNgW2rlD97Ki4uuLF+QRTVm4yEciy67mls8Ylv16u/M=)
3: H6GA7joAUfNPurokrgS1LJjNtfY.roa (hash: FKRThdMjAtwcwfUfR10ZtwzWVg2CFJr5Omg8dgAq7bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:c0:61:81:fe:7e:02:71:f0:86:01:20:7b:3e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Validity
Not Before: Sep 10 18:00:49 2026 GMT
Not After : Sep 11 18:00:49 2026 GMT
Subject: CN=e036f73715167d48e698da1910d09988b2d34768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:eb:24:ad:71:65:c5:82:95:fa:74:af:93:
d5:41:58:3b:71:61:6f:60:11:b9:9c:95:d1:ff:c4:
eb:79:13:b4:fb:ec:c7:f9:ba:14:5e:4c:f6:b9:30:
6d:a3:7f:4a:5b:aa:c0:78:ec:bd:62:69:d1:36:6b:
89:57:9a:18:6d:dc:26:80:ef:63:d0:60:69:e0:05:
25:3e:d9:9a:05:63:04:8a:e7:02:4d:01:a3:3f:0f:
f9:37:c8:f9:7b:2a:f7:ac:36:e3:70:b9:43:8e:5b:
66:1f:6d:3e:f7:00:ea:7a:39:08:53:93:81:c0:12:
55:e8:d7:43:bb:f6:4f:0c:62:b9:a0:e0:c3:74:b3:
1f:9c:16:db:97:eb:11:0e:0e:19:d0:67:12:8d:05:
d7:74:f7:b1:d9:d1:a2:3b:29:d6:ec:98:d2:4c:f5:
23:58:a1:e8:09:3d:22:7d:68:63:53:27:22:a4:19:
1b:87:09:0d:5f:bc:c1:3f:d7:2a:91:42:88:4f:d1:
7c:73:e9:a3:62:49:87:65:0d:b1:80:c5:14:72:6e:
34:8d:98:b6:9b:ba:7c:2a:44:4c:28:44:b4:65:7f:
08:57:4a:d6:75:e0:07:57:18:dd:a2:33:24:f3:fb:
46:9a:f0:56:14:43:40:19:30:91:de:57:81:0d:94:
cb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:36:F7:37:15:16:7D:48:E6:98:DA:19:10:D0:99:88:B2:D3:47:68
X509v3 Authority Key Identifier:
keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:95:32:38:05:6e:07:89:96:43:89:87:dc:6f:8f:bb:13:3e:
0f:e4:c8:57:dd:26:97:71:4c:57:98:94:a1:21:52:4b:c2:61:
72:c7:bb:35:95:5f:fb:26:a7:93:e2:e2:5e:09:38:fd:a0:ab:
80:f5:3b:7b:45:ae:3e:08:32:d3:d3:af:46:4d:5b:7e:f5:82:
16:a4:bb:ea:93:66:22:18:94:6e:fc:1f:56:75:83:b5:36:3a:
ce:9d:d9:4c:fd:45:86:c4:1a:2e:52:85:d3:e7:cd:ed:28:aa:
e6:5c:48:99:0f:43:1c:14:2f:f7:24:93:b2:e2:d6:9d:5e:bd:
7d:d3:2c:aa:85:9e:65:68:78:c4:75:c8:e3:cb:c1:18:2a:d8:
fd:29:69:50:4e:7e:a8:e4:61:0c:e5:7a:a8:8f:b5:ea:41:30:
79:56:c8:37:df:a0:f3:29:0e:db:9e:5a:ec:f1:14:43:00:00:
c9:57:83:3b:5a:d1:18:7e:fa:01:ab:30:64:51:2b:a2:32:ff:
54:70:8e:4c:3e:1b:14:f0:29:1f:16:27:cb:16:77:ea:e6:bd:
ea:9c:9a:97:4e:84:ec:56:eb:46:68:eb:aa:4d:3c:84:95:2d:
0f:a9:09:fd:90:b2:6f:25:07:6f:f1:d8:c4:77:65:53:0a:89:
25:6d:cf:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:19:44 2026 by rpki-client