Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
File: fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json)
Hash identifier: pmey7vOAsKArR27AHMxI121ZRBek8y77BTiGpe+yV+w=
Subject key identifier: 76:04:26:C4:C7:B7:27:66:A1:A6:72:6A:41:3A:E7:C3:D3:1C:3D:0E
Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Certificate serial: 01A08B9F007FD77ADBF0D5C3CB61F374B80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
Manifest number: 1130
Signing time: Thu 10 Sep 2026 14:00:48 +0000
Manifest this update: Thu 10 Sep 2026 14:00:48 +0000
Manifest next update: Fri 11 Sep 2026 14:00:48 +0000
Files and hashes: 1: 3g6ILoE9ejngNxt1ax6rYM1LQ60.roa (hash: LEUisAJ5IBxkUseMOfjHAnJQfW3VdAcMs8IPdC6dNso=)
2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: r4lj/gxsXhgBzSftIOsZfjejWbCwiJ2GDEdSbq10wWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:00:7f:d7:7a:db:f0:d5:c3:cb:61:f3:74:b8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Validity
Not Before: Sep 10 14:00:48 2026 GMT
Not After : Sep 11 14:00:48 2026 GMT
Subject: CN=760426c4c7b72766a1a6726a413ae7c3d31c3d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:15:87:15:4d:98:1f:69:1b:ba:7f:d7:8b:
58:c5:69:60:71:76:fb:b7:5a:0f:78:91:82:dc:c2:
15:0c:39:57:50:43:f7:81:71:4a:6e:d2:7d:c6:6c:
a4:24:3a:23:d1:6d:c9:04:63:b8:d6:c0:eb:4c:d5:
e1:69:7f:e5:48:e7:ac:fd:c0:c7:c5:2c:59:c7:01:
c4:37:e2:01:ad:9b:55:49:00:f3:bf:9e:20:f3:dd:
92:a5:ba:28:15:06:35:7b:de:2c:b1:19:4c:b3:42:
98:74:ee:6a:6f:fb:23:cd:71:1f:d5:db:fe:30:56:
dd:d3:96:e9:ae:17:5d:69:29:3a:1f:aa:35:db:06:
62:a6:f2:17:d0:8a:8c:3d:85:e4:cd:8a:ff:46:fe:
b7:00:6e:33:79:90:a2:af:ee:92:e2:4d:eb:b4:ae:
1d:59:d2:fe:4a:92:a4:62:ca:7e:53:d8:84:5e:c8:
97:1d:25:b4:a3:8f:40:74:2d:58:c3:8a:64:cd:1d:
e1:03:b8:71:d6:0d:cf:07:d5:ab:c1:46:56:8d:3b:
90:03:40:d0:5f:5c:fa:94:8d:8d:ba:33:4f:44:56:
b2:b4:0f:2d:75:75:84:ed:af:4b:99:f5:17:60:64:
49:84:e1:2f:eb:18:e1:4b:0d:3e:90:df:de:56:3e:
a0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:04:26:C4:C7:B7:27:66:A1:A6:72:6A:41:3A:E7:C3:D3:1C:3D:0E
X509v3 Authority Key Identifier:
keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9b:63:c5:99:c8:08:7c:f1:47:5e:e4:bf:2a:59:18:6e:c7:
8c:b9:98:15:4f:2d:66:d8:19:be:29:5e:ed:f9:41:96:a0:17:
df:f6:28:50:39:b1:84:56:3d:93:1a:7a:ef:b4:28:4e:18:12:
0a:10:7b:ce:6c:41:3d:bd:67:f1:32:b3:e9:ed:fe:b0:02:92:
04:c2:70:14:d2:00:92:e1:0d:fb:a9:50:83:d2:c2:09:09:72:
e9:71:b2:ba:1b:83:5d:81:c0:84:50:98:de:98:4d:56:33:39:
4b:ba:c2:a8:b1:e2:d2:d8:61:0f:89:eb:94:41:07:34:61:f0:
57:46:b2:13:ec:d5:52:30:48:60:43:09:40:b1:c6:b0:ac:c9:
3b:6d:42:bf:aa:92:1e:db:df:a8:99:2b:3c:d4:0f:a0:f0:be:
ad:42:bb:1e:2b:7a:c5:e8:1a:93:96:01:4e:ed:d4:0c:cb:3f:
c5:9c:d8:b4:a6:c9:3b:79:eb:6a:19:73:57:09:cb:2d:be:78:
70:35:ed:ed:27:28:b3:80:bc:d5:ec:9b:06:dd:34:90:4b:34:
30:86:89:ae:08:21:bd:ec:25:3e:35:df:e6:86:da:26:27:34:
5d:fc:45:e1:3b:c3:28:19:34:28:07:65:2b:29:b8:16:92:0b:
e1:ef:0b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:14:59 2026 by rpki-client