Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
File: 7D09fly_GK9mt_W0peCsGezTmHY.mft (raw, json)
Hash identifier: hMDgwkpV6N+ZZQLGmhco3jssLoxtgyKoExl/iwrpXZ8=
Subject key identifier: 2F:46:1F:C3:31:14:DC:5D:BF:20:CA:92:4B:A9:D3:E8:0E:0C:4C:FA
Authority key identifier: EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
Certificate issuer: /CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Certificate serial: 01A13F39968CD84727F73833DFE3400E995A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 11:01:40 +0000
Manifest this update: Thu 15 Oct 2026 11:01:40 +0000
Manifest next update: Fri 16 Oct 2026 11:01:40 +0000
Files and hashes: 1: 7D09fly_GK9mt_W0peCsGezTmHY.crl (hash: BRkitWIiZd655dL/Fex9Dc0kEOgOdrtqi+wDfyq8Dx8=)
2: OnhrU_FmqJ9tXdThe7YMO5jiX-s.roa (hash: MTURoEl1oG7dRGj+napAw2uJQy3KqrIBQCy0hhsO/IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:96:8c:d8:47:27:f7:38:33:df:e3:40:0e:99:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Validity
Not Before: Oct 15 11:01:40 2026 GMT
Not After : Oct 16 11:01:40 2026 GMT
Subject: CN=2f461fc33114dc5dbf20ca924ba9d3e80e0c4cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:9e:c4:ce:00:0e:57:c7:38:16:31:26:c3:
5e:c3:0c:e9:ba:fb:92:cb:30:4d:4b:e3:82:e2:91:
dc:16:30:7d:d9:9c:69:60:5d:63:a5:16:36:32:56:
e1:cf:7b:6c:e5:0d:31:11:2e:a9:28:3e:29:c1:60:
35:1e:d1:52:0e:15:4b:c0:77:1d:cc:e5:e3:8d:2e:
91:4a:79:5d:31:fd:84:60:46:1f:ff:76:72:f9:7c:
f1:cb:a6:37:f4:4c:71:b8:78:bb:35:64:5b:ab:e6:
06:a3:15:eb:9c:d5:e8:66:12:fb:74:20:a0:e5:5b:
e1:90:70:0e:f2:48:d0:70:0e:d1:39:a4:06:36:52:
d4:75:6e:6a:e0:16:a2:17:d0:75:95:1f:df:c6:5c:
fb:98:fc:2e:70:e3:9c:cb:b0:8c:c1:fa:7b:34:49:
17:73:2c:3f:43:54:ad:4e:5a:14:1a:82:7f:84:64:
3d:7a:f2:65:bd:38:df:a6:72:5c:0b:8f:32:72:5c:
d9:eb:8d:34:fc:58:94:cb:a4:21:8a:ea:d6:1c:43:
d7:82:a6:1b:40:31:6e:b4:8b:50:c9:86:62:37:b2:
dd:8e:1f:af:ab:56:41:bf:0c:17:e0:21:5d:98:9c:
57:cb:57:70:0f:e3:93:cc:0f:77:e6:68:76:5b:c9:
a5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:46:1F:C3:31:14:DC:5D:BF:20:CA:92:4B:A9:D3:E8:0E:0C:4C:FA
X509v3 Authority Key Identifier:
keyid:EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:95:74:12:ac:42:8f:59:dd:06:8e:b2:1a:6d:0c:cc:b9:98:
ac:61:60:d6:56:3b:23:aa:81:6f:2f:a3:f5:d9:98:4e:8c:47:
20:30:cd:df:f4:ce:dd:81:0c:d1:43:4e:e4:fe:c2:ac:ca:c6:
97:d1:45:dd:cf:0e:35:80:06:31:73:3e:2d:ef:aa:74:00:00:
96:b6:6d:59:df:22:45:cd:3d:4e:e2:8d:ac:09:0e:3f:6d:b2:
5e:24:d1:10:11:37:32:eb:67:23:ea:f5:27:1d:2d:66:30:2b:
78:96:d5:fe:12:c4:a2:76:32:a4:41:3c:38:f1:82:4f:e3:02:
8c:68:39:f9:ea:02:55:cc:cc:a8:c4:c0:e0:df:12:96:2c:71:
ee:31:67:5f:8e:90:6b:7d:25:fb:26:c3:30:3b:f3:ee:12:6b:
69:0a:e7:4c:b8:79:2e:58:46:a0:3f:3b:6c:74:8f:e7:e6:dc:
aa:92:c0:af:fc:7c:5b:82:87:ce:7b:27:2c:a6:b8:cc:ca:2f:
4b:29:24:0b:72:95:c4:45:6f:95:77:f4:0a:4a:94:a6:7d:58:
0d:81:0c:93:4e:df:b6:48:3d:29:0b:ed:2c:3d:4e:e2:1a:6b:
f1:b6:43:2f:f7:9e:a5:d1:4f:4f:3b:3a:ea:36:27:7e:dc:87:
e8:f0:3d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:51:09 2026 by rpki-client