Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
File: 7m9CHCUwligDR9wuksoQzDmME08.mft (raw, json)
Hash identifier: Xkkb36Ms2EA5n2lTBObmJClqKa+RUWUobaaDiNcYow4=
Subject key identifier: 81:6F:5F:8E:CD:5E:65:E5:DB:BC:E4:0D:EB:7C:91:08:56:07:F7:9E
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Certificate issuer: /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial: 01A17100EE2B26D9CE4291EE7BCDCAF6081C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
Manifest number: 128C
Signing time: Sun 25 Oct 2026 03:00:48 +0000
Manifest this update: Sun 25 Oct 2026 03:00:48 +0000
Manifest next update: Mon 26 Oct 2026 03:00:48 +0000
Files and hashes: 1: 7m9CHCUwligDR9wuksoQzDmME08.crl (hash: VGr9rJs4IISe+xcwmxMWX6aZ4CCKAheXshhB4wvT/R0=)
2: GJC0hK61YfoTGiu4_BgSpKpEET8.roa (hash: WwyFHk/cwNc1twKhKndoqjGYh79zgc/kHaQHCW2vww4=)
3: XmgvodIVZlwmFpJZFx9OEb_S0YI.roa (hash: U77Nh8N61bX2SG2LWG51QmpxAadiZWSFMU1pOMYXXLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:00:ee:2b:26:d9:ce:42:91:ee:7b:cd:ca:f6:08:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
Validity
Not Before: Oct 25 03:00:48 2026 GMT
Not After : Oct 26 03:00:48 2026 GMT
Subject: CN=816f5f8ecd5e65e5dbbce40deb7c91085607f79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e9:6e:d0:95:24:7f:43:3e:d3:c7:9d:90:3d:
03:fb:b9:d6:da:9a:e3:46:ef:ad:92:c1:f7:15:03:
bc:9c:96:c9:78:83:ff:ec:04:fd:b0:25:d0:54:2a:
02:82:bf:35:e9:a2:dc:f6:c4:75:34:fa:61:c4:1a:
72:c5:15:e7:db:ea:42:be:a9:08:0b:3c:0a:3d:fe:
5f:23:53:c1:fe:5d:ec:49:2f:f0:b7:76:74:bc:13:
0e:e2:d7:59:19:73:03:ac:2e:db:51:c5:3d:e3:e0:
31:4a:ea:dd:55:1d:e0:45:1f:28:6e:5a:e1:b7:68:
dd:f6:f6:d5:58:1a:2c:77:4f:1c:f6:22:2f:34:2a:
29:19:30:48:b8:1b:a0:a7:24:5d:0b:7d:79:fa:4c:
d6:b6:fe:68:7a:2a:f5:96:c6:95:ae:2d:c1:b7:f9:
f0:4c:36:bc:45:4d:62:87:30:eb:75:46:22:75:03:
1b:d8:cc:c9:24:5e:da:e2:c3:e6:b3:5b:14:b3:ad:
bd:c2:7b:e3:85:8e:ef:fd:1d:05:2b:11:ae:da:cc:
dd:84:17:b8:76:58:ef:98:fd:50:c7:1e:65:dd:a7:
d6:81:1a:f1:8f:e5:50:c1:47:49:37:1a:64:92:b3:
1f:76:3c:42:77:d3:24:1f:53:ed:d1:33:46:2b:18:
c4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6F:5F:8E:CD:5E:65:E5:DB:BC:E4:0D:EB:7C:91:08:56:07:F7:9E
X509v3 Authority Key Identifier:
keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4b:bf:36:96:d1:b6:d4:cf:b5:21:aa:0d:70:91:e4:2c:70:
1e:c3:72:5f:ea:f3:48:b5:9c:f1:17:4c:d0:8f:16:8d:12:97:
53:74:f5:01:18:c5:85:c1:d4:77:35:0e:bc:04:6e:4d:10:6a:
fc:aa:c6:fc:4d:b0:18:bb:c5:9e:76:4d:4e:0f:64:3a:4a:8a:
17:da:a8:3b:e4:c7:26:67:a6:ab:a6:cb:e2:76:4f:d3:54:64:
c2:f5:3e:d9:e0:8e:cd:dc:a6:8f:b3:11:17:86:16:0a:c0:19:
e2:de:ff:6d:27:b3:48:83:70:55:19:a3:55:1f:00:c9:47:5e:
80:df:f8:88:2f:d1:26:48:f7:f9:51:e3:8a:2e:c0:fc:5c:4d:
ae:bb:ff:f7:3f:37:e8:55:35:13:ff:c6:5e:d0:88:57:7b:13:
8d:27:76:f8:18:22:5d:a5:e0:c0:84:cb:51:df:a6:9b:fb:bc:
55:77:c6:6c:b4:9a:0a:49:66:b5:35:8b:1e:25:22:69:d9:68:
2c:2c:17:3d:ef:bf:5d:a2:2a:46:7b:78:ca:16:29:e5:4e:e8:
cf:ca:0f:d7:63:9e:38:ec:5d:92:16:18:2b:fa:61:91:1f:22:
1d:23:6f:65:b1:ab:78:49:a2:79:a7:3a:4f:33:c5:f0:5e:e5:
41:5e:9c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:09:44 2026 by rpki-client