Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
File: _z7T1NR7joJfv9B5SC96DCHcke8.mft (raw, json)
Hash identifier: 3eGpO62tWyUTWt2rWG8bbSD1AUFnVECvm9cPNYNNp0A=
Subject key identifier: 28:AB:33:D8:DF:9C:47:C5:43:A8:61:4F:60:EC:13:7C:56:57:02:B3
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial: 01A087545AEB901F94D49EDDBFC5A14A4474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
Manifest number: 1A49
Signing time: Wed 09 Sep 2026 18:00:47 +0000
Manifest this update: Wed 09 Sep 2026 18:00:47 +0000
Manifest next update: Thu 10 Sep 2026 18:00:47 +0000
Files and hashes: 1: 69ezvJY8aZV8eEgrj-WQsC1gmeE.roa (hash: 2O4ZGW2UdJh7j7rNGC7PYb1zr3cjwg8+gzgKPe0rI+g=)
2: _z7T1NR7joJfv9B5SC96DCHcke8.crl (hash: Ibv8gXJ5YvfEhWNTcyTJuCejBuYweT7FiCglB7nSc4w=)
3: hoPMx8cKt2l3U6Uh7qXffDc38GI.roa (hash: cSBxnQp/0+IglLraeUk1nEXqdG208OR0aDWNNNv7dX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:54:5a:eb:90:1f:94:d4:9e:dd:bf:c5:a1:4a:44:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Validity
Not Before: Sep 9 18:00:47 2026 GMT
Not After : Sep 10 18:00:47 2026 GMT
Subject: CN=28ab33d8df9c47c543a8614f60ec137c565702b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6f:fb:3a:b7:ad:af:f4:a4:2f:e9:5a:a7:e1:
5e:15:f7:10:6e:02:1a:70:36:44:ff:37:f5:a4:5d:
d2:c6:42:d2:4a:f8:14:b9:2b:4e:45:2c:0f:89:31:
3f:b2:67:5c:80:0d:3c:8e:c5:36:9a:a2:ed:8b:fa:
5a:60:e9:65:53:93:d5:5b:1f:9d:bd:fa:a7:6a:76:
70:ad:2e:c4:af:90:ba:c6:98:32:4d:c4:dd:ee:7b:
dc:d0:f5:9c:16:3f:c9:3f:aa:62:55:ff:f4:13:34:
be:3a:73:fa:fa:19:78:7b:62:92:16:6c:6f:ed:d6:
57:86:18:77:d4:d7:a5:c5:83:0a:19:f4:ec:bc:e0:
7f:14:9e:b0:6d:81:26:fe:74:81:0d:5b:a0:4e:08:
3c:2f:70:b6:66:d6:9c:ed:61:b1:a8:73:b9:71:9a:
3e:4e:e4:3d:67:5d:56:4a:bd:e1:d6:2d:50:99:b7:
4b:e6:ae:b8:f2:59:39:24:c9:9c:ae:1e:14:92:cd:
34:7e:8b:8a:85:f2:10:73:d4:73:6c:d4:ba:3f:05:
4e:2b:38:76:aa:5e:78:0b:68:51:4b:85:99:df:6f:
fd:d7:27:d8:b6:8b:47:33:09:47:fd:d0:7b:de:70:
f4:e5:89:ff:1f:59:a9:a6:66:71:cd:88:7c:e0:6b:
68:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AB:33:D8:DF:9C:47:C5:43:A8:61:4F:60:EC:13:7C:56:57:02:B3
X509v3 Authority Key Identifier:
keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cb:65:87:7d:2d:aa:b7:6e:50:03:d5:62:08:b0:59:b7:b5:
10:f3:b1:56:b5:d7:3b:c2:82:11:5f:5c:40:aa:33:92:ec:b1:
62:92:4e:b0:72:49:7b:9a:cb:a1:64:65:3f:11:c1:36:ae:eb:
2d:e6:0e:08:e8:76:71:e5:33:66:e8:07:7c:38:56:9b:6a:8d:
b5:17:b2:59:26:79:d3:fd:24:46:1a:ae:be:a4:18:4f:94:5b:
7b:e7:9e:35:d3:b8:f5:ba:9a:f3:a3:94:ac:36:b0:76:39:40:
d2:41:f3:00:57:49:19:d5:2c:5b:51:d9:e5:ea:59:45:e0:3d:
7f:53:aa:79:be:b3:25:42:ae:e4:be:3a:ab:28:b3:6f:fa:16:
d8:fa:4f:1a:d6:33:0c:b2:4d:15:af:dc:30:96:69:1c:6e:90:
a4:44:5d:47:95:13:39:ec:10:43:50:b5:01:11:f2:62:5c:f3:
41:13:d4:1b:84:b6:93:76:89:4b:1d:96:46:2b:f6:e5:e0:97:
47:2d:4f:e8:d9:37:b3:07:6c:9a:09:d1:78:d0:9c:2d:9f:f8:
1a:63:67:00:66:5b:f8:8e:ef:ef:e5:34:22:d7:b8:ed:96:b1:
7a:5e:da:c5:5a:bf:fe:0b:bb:12:cd:d5:36:26:14:cb:f8:1b:
a1:9f:df:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 04:30:42 2026 by rpki-client