Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
File: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft (raw, json)
Hash identifier: NpAGZvAiPkcFCqWZPTA+h1rY+Vi/29l6CGdpi/nsOOA=
Subject key identifier: 01:49:D5:57:22:D1:09:78:D9:88:32:A7:C3:85:A1:BB:82:AB:0F:D4
Authority key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
Certificate issuer: /CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Certificate serial: 01A13E945CF3E38BC9278A4FD36A196EDFA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
Manifest number: 14CC
Signing time: Thu 15 Oct 2026 08:01:12 +0000
Manifest this update: Thu 15 Oct 2026 08:01:12 +0000
Manifest next update: Fri 16 Oct 2026 08:01:12 +0000
Files and hashes: 1: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl (hash: Zpkhm67AbXocokWvepnYKHPjVVn9GzOJ6H/0vcyeHLU=)
2: Z-Nhf0GUm-eK6gBfuWRH4mBMDa8.roa (hash: j8yQFLI888ZXRlZcfp3XqLieyu9/rqxMNp1WWGddyFc=)
3: zQxCSJAybTKhMbu9tj9geo08EHM.roa (hash: vRuFfeMEunDY9UG2VQ5bdPd5mpRSySgDc592VktLEXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:5c:f3:e3:8b:c9:27:8a:4f:d3:6a:19:6e:df:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Validity
Not Before: Oct 15 08:01:12 2026 GMT
Not After : Oct 16 08:01:12 2026 GMT
Subject: CN=0149d55722d10978d98832a7c385a1bb82ab0fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:3c:09:8e:50:3c:57:f8:f1:12:b9:07:2c:
57:36:ef:0f:88:2b:7c:45:bc:63:19:08:e5:1b:fd:
b2:aa:e7:87:61:ab:9a:7b:40:8f:dc:ed:b1:2a:00:
65:64:2e:94:74:a1:d3:8e:bf:64:64:ac:5a:db:77:
85:ea:6a:8f:84:01:a1:1c:82:79:fb:2a:19:70:b8:
37:9a:70:86:6f:dd:e7:0e:f5:6f:87:95:48:46:4c:
c9:1b:14:d1:7d:b9:04:16:a5:0d:1e:67:17:09:d1:
8c:61:06:4a:61:6d:74:b4:1d:94:17:96:d8:90:52:
f0:63:fe:a3:8a:93:6c:80:72:d5:54:ad:c0:c4:1a:
9d:ad:86:0c:1f:fd:44:c5:c3:f5:e0:41:41:02:03:
ec:4b:0f:fe:3d:e4:89:8d:42:12:2a:84:1a:fa:ed:
c1:dc:3f:01:89:f3:42:22:b2:9d:9b:5e:90:e3:e9:
a4:ac:81:ac:b5:2f:be:f6:73:3a:ad:59:2d:c8:3b:
0f:90:11:78:4d:af:53:01:af:52:4b:5c:e9:ce:e6:
31:60:f4:26:89:8c:bb:81:1b:af:84:9f:53:ce:4d:
d3:8a:a1:fd:55:87:30:d9:bb:b8:1d:44:7a:b6:22:
e3:92:02:7f:22:5a:0d:d0:12:b0:07:80:15:67:ab:
e7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:49:D5:57:22:D1:09:78:D9:88:32:A7:C3:85:A1:BB:82:AB:0F:D4
X509v3 Authority Key Identifier:
keyid:EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:68:72:6d:8b:bc:35:5d:49:3e:dd:a3:bc:60:7c:8d:47:8c:
43:d2:91:76:8d:52:72:e1:b7:5a:0b:46:16:2c:a6:e0:e7:61:
d0:74:93:42:01:ab:eb:d0:9b:58:23:3f:7a:b0:90:00:39:57:
bd:08:87:02:7f:f0:d7:e7:a3:d3:bf:2d:a0:16:20:65:1d:db:
9d:d2:61:09:5f:6f:82:e2:08:66:cc:3f:81:ae:7c:f1:b0:a5:
9c:83:f2:22:38:b6:9c:ad:63:ab:88:eb:4c:08:e5:fc:7c:e4:
8c:80:54:62:0d:1d:7a:2b:e9:d0:43:f7:a5:a2:b1:2c:61:bb:
86:bf:97:90:6e:d9:9e:ef:14:21:2a:48:11:8e:7f:7d:55:23:
2f:d8:c9:a2:a8:33:1d:95:35:cb:e3:04:fe:b3:86:56:f0:5c:
49:fb:4a:e6:b5:b1:1d:07:1f:b7:06:1d:a6:b7:9d:cd:dc:06:
73:38:1a:28:fb:ef:10:5d:03:25:79:a5:09:c0:95:59:25:3c:
fe:fc:ff:0d:8b:35:fd:65:12:9e:30:d2:32:d4:e4:d5:0e:92:
30:8a:42:bc:4e:7c:a7:80:d5:9c:34:24:82:2f:9d:59:c7:8a:
93:d5:7b:82:2e:05:f7:1f:ed:93:73:24:ef:e0:96:09:95:64:
fd:1a:f1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:25 2026 by rpki-client