Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
File: X7piVd7aoaG2sXy46pHgLUErhxg.mft (raw, json)
Hash identifier: PJu5++Q1Heh2VkbchhsRJspkWsai+AhX9r2OR++2c+U=
Subject key identifier: 36:45:D4:62:42:62:63:70:22:9C:97:A2:84:F6:95:10:1E:72:47:53
Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
Certificate issuer: /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Certificate serial: 01A17695BAAA653709FB076E5FEC4E5E8903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
Manifest number: 0FB7
Signing time: Mon 26 Oct 2026 05:01:26 +0000
Manifest this update: Mon 26 Oct 2026 05:01:26 +0000
Manifest next update: Tue 27 Oct 2026 05:01:26 +0000
Files and hashes: 1: X7piVd7aoaG2sXy46pHgLUErhxg.crl (hash: vqNJiswlGxpJxPyXlbU54PXGG7VfZTwo5Wnt7eQO3k4=)
2: at5a5rELRNEAw0rbmlFozDBKmf0.roa (hash: fph6BRKPR1DclmnZB61WzWIE1l0c6loKAE1iu+Pb6gg=)
3: fN1BCGt6X78bmo40K4mqUHAHyNE.roa (hash: 4u131ZUFsLjOVWZz34pEcO0mSEYVLQJpztQcoDh3/Iw=)
4: o__yenjb_byTDMgOBxUzVji8MJk.roa (hash: i3sG4QUVi7SpGaea2GgrwUuE6uMpXt1hzOEHLJcR4vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:95:ba:aa:65:37:09:fb:07:6e:5f:ec:4e:5e:89:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Validity
Not Before: Oct 26 05:01:26 2026 GMT
Not After : Oct 27 05:01:26 2026 GMT
Subject: CN=3645d46242626370229c97a284f695101e724753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:87:02:9b:69:93:fb:e9:9a:3e:4a:33:06:
d0:da:38:17:0c:f3:17:31:5e:41:d1:1b:b1:e3:5c:
a2:dd:b3:de:f5:f7:fb:c9:cc:25:4a:27:f2:51:18:
b9:66:84:5b:93:9c:75:a4:72:68:62:ff:2f:59:95:
1a:93:f3:24:da:6b:5e:ac:99:64:3b:66:22:e5:e1:
f2:de:a1:4c:a1:b1:1b:63:91:e1:a6:0a:98:94:b0:
1e:12:70:0a:4c:86:3f:83:28:1c:49:ea:b1:8b:6b:
70:72:21:a2:d1:fd:2b:1d:0c:bd:46:17:b9:19:29:
6c:b1:f9:58:b0:c4:b4:cf:f7:cf:15:0c:ba:6d:d9:
35:05:30:01:df:43:03:55:18:87:a6:8c:f1:b5:12:
8d:53:17:63:cb:2d:bf:c5:bb:98:95:7c:c6:04:bf:
85:f1:b8:09:77:18:cd:20:25:43:bf:fb:95:24:cb:
62:85:ee:cc:20:0f:db:77:dc:55:9d:2e:7b:60:5d:
9e:45:fb:f2:e5:7f:50:d3:93:d6:82:07:f1:cb:32:
ad:b6:bc:ac:ff:27:6a:d3:7e:b9:1a:0a:32:27:a5:
cc:31:46:24:1e:9d:a4:a6:cb:94:a8:a7:19:ae:22:
de:6c:51:ee:4e:2c:9e:54:95:0e:4f:bd:93:bc:31:
bf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:45:D4:62:42:62:63:70:22:9C:97:A2:84:F6:95:10:1E:72:47:53
X509v3 Authority Key Identifier:
keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ff:30:5c:57:41:4f:e0:31:c1:dd:e8:0b:e7:a1:1f:5a:a9:
0a:0e:bd:fe:98:78:89:5c:6b:76:86:6b:b8:ba:40:1e:51:62:
50:a3:cd:fc:30:fe:34:a0:e7:8b:c4:30:58:69:92:03:67:a6:
7a:cb:3e:08:e8:e5:0b:1e:c2:fd:89:68:c8:c5:7d:09:d5:7c:
96:9f:9c:18:78:77:bd:f5:2f:69:25:e9:a0:15:e1:c9:72:0a:
34:e6:51:32:19:e2:3d:3e:6e:75:5f:ff:c5:7f:78:98:9c:c7:
05:dc:60:c9:4c:82:82:e2:64:e2:1d:f8:d8:b3:97:d6:b3:7b:
22:f0:40:bb:15:1b:91:42:40:6c:5e:97:3b:24:3a:80:21:96:
af:ba:c5:0d:50:63:c5:72:48:12:b3:37:a4:23:f7:b3:45:31:
09:ff:63:9f:3f:ef:df:54:81:2c:bb:6c:3c:52:9c:c7:8a:08:
9a:a1:be:ba:fd:ab:49:1e:30:d6:0f:fb:54:4e:8a:39:ec:22:
64:05:00:ce:25:c6:b1:83:ef:a4:bd:68:10:7c:3a:47:f8:a7:
f9:8d:5f:79:14:4a:ca:50:55:5e:c0:9e:67:d6:36:a2:95:61:
e3:a0:3d:03:df:3f:29:9f:76:e6:6d:c6:78:d1:a7:2a:33:63:
87:c1:fe:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:42:36 2026 by rpki-client