Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
File: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft (raw, json)
Hash identifier: kSdULa+Nqj7sZgm+eHzJ/gUS9o9Ywd8rJt7um9/CuyQ=
Subject key identifier: DF:62:B9:0A:21:E3:F6:C4:55:28:39:A9:7D:44:43:82:A3:71:9D:0C
Authority key identifier: EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
Certificate issuer: /CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Certificate serial: 01A19CFDB1C7998D751DFDA4B4E8CA4F9752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
Manifest number: 1942
Signing time: Mon 02 Nov 2026 16:00:34 +0000
Manifest this update: Mon 02 Nov 2026 16:00:34 +0000
Manifest next update: Tue 03 Nov 2026 16:00:34 +0000
Files and hashes: 1: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl (hash: M/tFmV2AC1LS6pUc8i5WhNyF99x4xiRXeSInsXhvrjo=)
2: JKtuYAZj6V_iBv09WZvX1K5boYU.roa (hash: cKfPg8sNS79bgJa5PrvUDPTVTEFYtl+oJ3wNQ/Dq8wg=)
3: VX56H6KkhijDbH5-98zo_odR-aU.roa (hash: XIQ9JA5wLRcJUVqmkaTCQIk12sWE4CMTFAbdKyptH2U=)
4: s2FRA5K-oVMp12eFy8Gf14s5CrU.asa (hash: gpXaZqsOMU6BKqvS5eSdbVeLI+GmNA53Jwwn3lZMfn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 14:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:fd:b1:c7:99:8d:75:1d:fd:a4:b4:e8:ca:4f:97:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Validity
Not Before: Nov 2 16:00:34 2026 GMT
Not After : Nov 3 16:00:34 2026 GMT
Subject: CN=df62b90a21e3f6c4552839a97d444382a3719d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8b:0f:86:cc:23:41:60:42:f3:e7:bf:41:bc:
e2:d0:54:5d:89:91:2d:10:6f:19:0c:05:24:c6:b5:
fb:0d:99:5c:f4:2f:d5:60:37:74:53:de:64:e7:62:
48:ff:bc:cf:c9:8d:3c:ba:e0:e5:27:a1:67:c2:f1:
97:90:8a:94:68:31:ce:bf:9b:50:e8:70:9e:f3:01:
31:aa:47:ef:cb:d3:7b:92:09:94:71:b2:3e:8a:9d:
07:15:ff:6d:12:ae:37:f6:cd:42:ca:d9:b7:19:0d:
21:c5:67:72:07:c3:e4:43:43:8e:dd:3d:0c:96:57:
ee:71:4d:f1:8b:84:f2:41:d0:86:39:90:79:28:b9:
0a:bc:8b:7c:73:cc:82:80:f4:cc:94:2d:9c:95:bb:
9b:4f:57:45:a2:8a:4e:11:58:85:f7:9a:f4:98:8b:
5b:7c:59:be:00:11:25:b8:18:08:8f:a0:7e:df:50:
d4:c5:91:e4:fe:1c:7b:b2:c5:e1:3c:fd:95:87:89:
42:1c:92:44:01:7b:89:28:a5:64:4c:90:73:76:91:
c6:91:20:f8:b0:69:8f:35:34:f2:00:ea:b7:f5:69:
64:a1:07:83:80:ad:f5:47:42:35:cb:69:54:fb:51:
cb:98:19:42:d6:03:24:af:15:4e:96:4b:51:45:1d:
cc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:62:B9:0A:21:E3:F6:C4:55:28:39:A9:7D:44:43:82:A3:71:9D:0C
X509v3 Authority Key Identifier:
keyid:EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d2:71:a1:8e:41:ff:02:79:67:78:e5:4b:67:1d:fb:65:84:
f3:b4:84:6a:29:b7:18:2a:d0:b5:8c:42:c3:64:21:f3:f8:4a:
f5:c4:a0:dd:01:e4:ff:5f:ab:dc:b2:6f:53:41:1e:75:db:f9:
76:86:d4:1b:af:4e:f3:68:f6:3b:3f:2e:37:57:ce:e6:5b:8c:
86:e7:1c:01:06:53:84:b3:72:89:74:19:48:4e:dd:3b:b7:04:
71:4d:88:3e:ce:bf:93:b5:8c:67:ae:70:49:aa:77:3b:c1:6d:
b8:90:f7:80:98:1d:fe:df:91:ac:c6:b2:5e:32:32:ed:da:ec:
76:0b:96:67:c6:97:8b:cf:ea:24:03:e9:b1:c6:7a:af:b4:51:
e0:93:8f:61:be:b4:a3:d7:96:54:d6:98:95:b7:00:7b:f2:b3:
e6:7e:c8:55:d8:b1:4f:29:bb:47:ef:8e:33:d6:bb:86:b8:37:
9b:51:7d:88:59:d4:e1:7e:c4:96:bd:3c:16:11:d8:25:25:65:
fe:99:83:b9:16:dc:5c:33:fc:9d:65:09:e1:21:c8:40:8d:3b:
6f:97:c8:86:c2:62:95:57:d2:0e:b0:2d:a1:a9:e5:fa:fa:06:
ad:1f:ed:63:ac:62:6f:16:99:85:12:6e:7d:e4:1c:19:d6:be:
1d:e2:fb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 19:23:05 2026 by rpki-client