Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
File: 7N86SgXzcFD3wDedNPT0gUvSCd8.mft (raw, json)
Hash identifier: 3gZW9yY3D11lhSUCYi2JTjjoV1vyK65l8UaWpQLwX4o=
Subject key identifier: D5:0F:77:5B:C3:AF:6E:F3:83:D5:DF:C0:55:7D:86:11:0D:93:9A:D3
Authority key identifier: EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF
Certificate issuer: /CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df
Certificate serial: 01A03F720D6B05DB769B0765FB9EC7D15544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
Manifest number: 057A
Signing time: Wed 26 Aug 2026 19:00:33 +0000
Manifest this update: Wed 26 Aug 2026 19:00:33 +0000
Manifest next update: Thu 27 Aug 2026 19:00:33 +0000
Files and hashes: 1: 7N86SgXzcFD3wDedNPT0gUvSCd8.crl (hash: zi4lMn0eh5E5hwbHgbuI8tMTK2YtemGfsg3M8s4DE7A=)
2: HRNjMQScROeFTp_2rmfTV1Pqr40.roa (hash: 66mHtRw/URStOe2xC3SxpwCWQ3KY1R/KgZMB+PrJKAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:72:0d:6b:05:db:76:9b:07:65:fb:9e:c7:d1:55:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df
Validity
Not Before: Aug 26 19:00:33 2026 GMT
Not After : Aug 27 19:00:33 2026 GMT
Subject: CN=d50f775bc3af6ef383d5dfc0557d86110d939ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:64:a2:c9:27:35:d5:9d:a5:b6:df:a2:4e:2f:
7e:da:a7:c2:96:81:66:b6:a3:6f:80:c7:2e:ce:2b:
64:07:7b:ae:53:fe:0d:e5:f0:a1:4b:a1:ee:2c:4b:
02:84:f1:d7:ce:2e:0a:46:7d:bf:14:e5:fc:e4:13:
f2:28:8a:5a:ba:94:a6:a5:8f:d0:a7:65:d0:f6:cb:
60:bc:e9:6c:e6:25:ae:e0:88:a9:34:d6:6d:2c:a0:
4f:19:dd:05:ea:ad:45:a2:a3:b6:d3:27:fe:55:f9:
49:8d:80:e0:7f:21:4c:78:67:ec:9e:88:f6:7d:7f:
bf:2d:31:e5:31:93:92:c1:b2:5d:1f:8c:c0:2c:58:
af:9a:76:0a:06:53:33:91:b6:ff:b5:7d:5f:26:bd:
4f:e1:ca:80:ed:55:21:3e:73:4c:06:a9:14:10:33:
72:d0:2e:4a:a6:66:f5:3c:c9:20:22:7b:01:64:7b:
5a:b6:47:ce:a0:72:84:ef:65:df:d2:98:fa:16:79:
df:ae:56:2c:92:20:01:d1:e9:0d:2c:a6:ed:ea:3d:
9f:72:04:27:bd:8b:5b:8e:db:46:0d:b7:bb:e5:c9:
5a:cb:26:5d:fd:68:f9:0b:96:59:ae:d5:e9:c5:2b:
b4:4f:5e:95:d3:81:53:f5:ad:9a:09:b6:b9:40:69:
a9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0F:77:5B:C3:AF:6E:F3:83:D5:DF:C0:55:7D:86:11:0D:93:9A:D3
X509v3 Authority Key Identifier:
keyid:EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4e:ce:b1:c7:28:52:73:84:8e:32:a5:7a:83:30:62:1e:27:
90:86:be:9e:ac:83:25:22:38:15:0a:66:40:d1:dd:51:84:24:
14:d0:a9:81:49:d6:c4:c1:b7:b2:6b:10:38:b7:06:4c:e8:1a:
06:80:da:41:27:d3:a2:50:39:71:5d:3c:49:cf:57:30:41:86:
96:df:01:84:5b:ed:8e:79:6a:62:84:61:ec:17:1b:d9:79:ed:
a9:ea:4e:96:d0:e2:34:d8:dd:bc:72:3d:04:5e:d4:0f:f0:19:
70:6c:8d:70:c2:f8:9d:98:08:79:3e:40:25:1b:8d:23:72:2d:
c7:f1:9c:43:f6:8a:36:a9:9d:a2:2e:34:e3:f9:ba:53:b3:40:
2e:93:d2:22:d1:bf:73:63:11:e5:0d:0f:bc:38:06:ee:f5:9b:
2e:37:bc:80:80:a7:3a:c0:67:ee:df:77:4b:5c:24:3a:91:64:
19:60:a0:49:f9:5f:a1:71:a0:99:55:64:a6:dc:7b:2b:6b:71:
f1:21:42:f3:cb:14:f5:0d:30:fb:17:d4:a0:08:3e:e2:5d:37:
b5:dd:25:7c:fe:31:a8:88:ad:d5:04:fe:38:e7:be:39:38:16:
c3:72:5d:be:f2:65:d1:83:19:62:5e:f2:58:2c:56:b3:c6:fd:
4f:b3:0f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:35:34 2026 by rpki-client