Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
File: R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft (raw, json)
Hash identifier: 34uBvwKS0KNcvF4RfJq3Tr3qG7iWRKoyv0tQrf/sdWw=
Subject key identifier: AC:B7:DB:E2:E4:42:88:CD:84:F2:15:3F:A9:22:C9:92:55:0A:79:1B
Authority key identifier: 47:B7:C4:58:27:1E:C9:53:C9:F0:B8:9C:20:70:B8:45:9A:AA:6B:96
Certificate issuer: /CN=47b7c458271ec953c9f0b89c2070b8459aaa6b96
Certificate serial: 01A08F0E1316B87A63B78844C53D60308430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7fEWCceyVPJ8LicIHC4RZqqa5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
Manifest number: 022E
Signing time: Fri 11 Sep 2026 06:00:59 +0000
Manifest this update: Fri 11 Sep 2026 06:00:59 +0000
Manifest next update: Sat 12 Sep 2026 06:00:59 +0000
Files and hashes: 1: 1-TqiAazLK9RAar2iXroZHFof6YM.roa (hash: WVVq8CYPuWlLC3tvTr+h2SKeyS4SEjc0OCpY8ivnCV8=)
2: R7fEWCceyVPJ8LicIHC4RZqqa5Y.crl (hash: sTw50JE6UCEmnjTyGvcsjOlmV8mHlLlZ0I6NkI0joBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7fEWCceyVPJ8LicIHC4RZqqa5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:0e:13:16:b8:7a:63:b7:88:44:c5:3d:60:30:84:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b7c458271ec953c9f0b89c2070b8459aaa6b96
Validity
Not Before: Sep 11 06:00:59 2026 GMT
Not After : Sep 12 06:00:59 2026 GMT
Subject: CN=acb7dbe2e44288cd84f2153fa922c992550a791b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:4f:14:48:4e:01:10:eb:93:5a:a8:b0:4b:
a9:ef:91:bf:58:b4:ad:1e:34:a8:0f:ea:82:f5:e0:
48:ad:ed:b1:48:cb:84:68:35:c8:85:fa:31:da:be:
fa:f2:8a:0e:ce:e4:af:b3:49:d3:63:7a:7f:14:26:
4a:0e:a1:18:e2:22:99:a1:28:20:6c:e7:25:c8:6b:
50:80:4a:89:cd:48:b5:3c:f7:4c:32:45:18:87:49:
05:6c:a6:c0:1e:81:6f:d7:22:62:12:c2:c5:b3:71:
9a:4a:dd:e1:8d:b2:65:b4:64:b4:4e:73:1b:c0:d0:
a6:1e:1e:1f:4c:3e:e3:7b:7f:6e:7c:47:2a:ac:a5:
ac:76:56:b2:67:30:76:ad:b5:ec:80:5e:f6:06:63:
98:da:91:74:bc:c4:0f:30:34:bc:b9:e3:34:1e:3e:
77:f5:fd:06:d7:7b:b4:bb:38:9a:63:a1:4a:a2:2c:
3a:32:a9:6b:19:f8:3d:b2:a6:62:c7:a3:c5:21:85:
71:d4:8a:19:bf:5c:07:cf:0e:28:81:61:5f:91:80:
9a:50:37:1e:db:dd:c9:db:8a:c6:eb:84:ac:1c:e7:
e7:24:e0:fd:e5:f7:50:97:56:c8:1e:de:02:d6:a6:
ce:65:61:7b:dc:22:c6:6b:04:09:ee:6d:b7:d8:3e:
35:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B7:DB:E2:E4:42:88:CD:84:F2:15:3F:A9:22:C9:92:55:0A:79:1B
X509v3 Authority Key Identifier:
keyid:47:B7:C4:58:27:1E:C9:53:C9:F0:B8:9C:20:70:B8:45:9A:AA:6B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7fEWCceyVPJ8LicIHC4RZqqa5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9d:55:50:8e:6c:01:16:82:03:db:bd:73:d6:71:ab:46:d1:
ae:0f:61:64:c1:e9:06:13:da:a0:e9:4f:61:83:d3:0d:0f:d5:
32:06:ca:f7:13:3e:bc:42:37:3d:65:9f:ba:c5:b0:04:20:8f:
1c:6e:c2:b9:78:40:27:0f:5f:75:62:13:4c:b5:30:20:79:34:
1f:01:8f:09:28:66:32:88:f1:a1:91:86:59:e5:bd:23:4b:2b:
ff:8f:47:52:b7:bb:43:7f:5c:29:57:d7:86:ab:1c:ef:fb:92:
71:1a:f9:49:66:93:d1:43:34:1c:9c:0b:db:fa:dc:8e:ad:33:
07:c4:5e:3e:c7:28:ca:ee:4d:12:2c:7a:85:ae:fb:84:b1:44:
82:ca:19:28:41:de:68:e5:c1:7a:68:81:2b:3f:14:67:7d:76:
12:cc:4b:a5:04:77:1a:0e:90:ad:d8:6e:9a:51:f6:b6:dd:1e:
da:3b:fe:0b:59:6f:12:d9:19:18:3e:6f:86:dd:65:f2:8b:18:
4b:d2:49:14:5e:a6:87:5e:65:24:d0:e5:9c:08:d9:b9:88:14:
64:0c:a3:92:6e:bb:01:92:6c:64:02:6e:76:88:79:01:21:28:
23:5a:0d:40:1c:57:6e:0d:3e:88:4e:85:80:78:b3:76:ef:61:
8e:05:bd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:48:53 2026 by rpki-client