Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json)
Hash identifier: 9Sz6jDH5Ayh2x8rhe5xTV7rRhubt8LwK3GPmzKxMwjM=
Subject key identifier: C0:9A:B3:68:57:12:A4:32:02:08:CF:1C:24:EC:81:5E:FD:D7:C5:8B
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial: 01A148E0CBFBA1D3DA889325D9877AF9F328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
Manifest number: 127F
Signing time: Sat 17 Oct 2026 08:00:54 +0000
Manifest this update: Sat 17 Oct 2026 08:00:54 +0000
Manifest next update: Sun 18 Oct 2026 08:00:54 +0000
Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: rfdkr5zS7ixrlX1xcihJq3javlVrRgoLSZSJ5iX3Jhs=)
2: rlgDOpAXjc8Na_ifPOhQG4zbxtM.roa (hash: reSEL9M69wAKbL5gRtqeNyqy/DyxKPTT8rPI7JNy6Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:e0:cb:fb:a1:d3:da:88:93:25:d9:87:7a:f9:f3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Validity
Not Before: Oct 17 08:00:54 2026 GMT
Not After : Oct 18 08:00:54 2026 GMT
Subject: CN=c09ab3685712a4320208cf1c24ec815efdd7c58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:b6:6d:71:b3:0f:a8:23:04:d3:07:f4:42:
c3:14:3b:81:76:34:84:c1:0e:a4:fd:b3:27:50:d3:
89:eb:55:90:80:4e:98:b5:08:22:53:cc:b7:97:15:
36:e6:a6:e1:ce:ff:62:52:db:39:47:48:5d:73:c0:
48:87:0e:d3:05:cd:98:f6:0f:60:f2:01:d2:aa:16:
61:ae:e5:7b:1c:1a:b0:16:de:53:40:eb:34:81:39:
7f:d3:fd:7e:79:5f:a1:42:6a:d8:cb:20:19:35:c5:
5a:8b:92:28:e1:50:d7:2e:48:b4:9d:f3:97:fb:18:
2e:eb:fc:95:06:c8:01:3a:7e:7a:b9:97:5b:9e:bc:
98:e0:25:ce:dc:80:54:19:d6:a1:90:55:39:a0:9e:
11:f0:32:28:74:b4:ea:cd:b4:c9:ff:10:63:13:27:
0f:51:92:62:18:d8:34:62:36:17:09:27:48:c0:29:
67:4b:8a:de:d1:0e:8d:9b:fd:a3:65:30:14:4a:ea:
4b:0e:ed:78:e3:09:2b:4e:d3:2c:2a:84:d3:c7:00:
36:7e:0a:45:57:a8:60:52:ae:fd:0f:2f:5b:36:2a:
b6:7a:2c:d5:b1:7d:94:df:e0:1b:bd:4b:32:09:0c:
ed:65:ce:f4:bb:ac:37:a0:51:ef:c1:74:32:4a:db:
93:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9A:B3:68:57:12:A4:32:02:08:CF:1C:24:EC:81:5E:FD:D7:C5:8B
X509v3 Authority Key Identifier:
keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7e:fe:e4:54:90:46:e0:8b:dc:c9:c4:75:4f:f4:23:74:84:
07:06:13:0d:3a:65:08:81:5b:95:d6:e6:79:3c:1a:43:0c:ee:
ec:7a:6f:84:56:af:cf:69:52:f6:6e:17:d7:e5:b8:8e:1a:74:
86:7d:c4:ca:b7:2e:fb:ca:6a:a6:a7:71:dd:3b:8d:d0:11:8f:
86:77:0a:32:bf:21:b7:05:07:c5:10:3f:7f:7d:82:f0:41:4c:
05:8a:2e:b1:4d:c7:c1:52:d2:6d:fa:01:53:76:50:fd:5e:aa:
47:20:0e:cb:41:17:c6:c9:6a:73:e1:40:d3:09:cf:a4:24:51:
8e:d9:7f:08:5b:11:5c:d0:62:1a:b0:0e:18:4d:c3:87:ec:ff:
0c:28:83:8e:b5:84:fe:1d:1f:dd:d9:6b:cb:81:98:8c:1a:e8:
ab:34:93:6d:f0:ee:44:97:01:69:df:0a:55:50:5a:36:5f:cb:
6c:3c:ea:d3:6f:34:c5:3b:fa:06:3c:5e:49:70:9f:79:07:e8:
8c:85:4d:3d:a1:fc:b3:20:c8:c7:f0:fe:34:20:9f:5c:de:4c:
0c:63:f9:f4:c6:96:3e:26:26:57:78:9b:b6:a2:50:a6:6c:09:
b3:bc:ff:9c:3d:20:95:42:b2:d4:75:4f:98:19:64:9e:e7:39:
1e:99:a6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:27:58 2026 by rpki-client