Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.mft
File: p7FZxNPVH1oAMpYhpGRg7Y7h43Y.mft (raw, json)
Hash identifier: Xrczji4FdkcBWhPxCyWNAnTlOIMidzSOaIbLVQlKdQU=
Subject key identifier: D5:25:36:B7:48:2B:F8:AB:D2:FE:7B:B9:66:D6:81:75:CB:D1:59:6D
Authority key identifier: A7:B1:59:C4:D3:D5:1F:5A:00:32:96:21:A4:64:60:ED:8E:E1:E3:76
Certificate issuer: /CN=a7b159c4d3d51f5a00329621a46460ed8ee1e376
Certificate serial: 01A0F9B3D88E07C75EDF8FC0DEDB78294989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.mft
Manifest number: 5D
Signing time: Thu 01 Oct 2026 23:01:48 +0000
Manifest this update: Thu 01 Oct 2026 23:01:48 +0000
Manifest next update: Fri 02 Oct 2026 23:01:48 +0000
Files and hashes: 1: 446iU2iUtSCpiCvxa6ntvEqHvJE.asa (hash: XNtxkVgkkNUJbPUnKEA9zgscIN6i8nLzHGlvaFwLLcg=)
2: UCnDSTgchyE1qeXLpPxJeB9D6a8.roa (hash: 9gREJPHHNeNj4a7K+bK2FHfoOR8Wo3wM4kVwG6ZeXw0=)
3: p7FZxNPVH1oAMpYhpGRg7Y7h43Y.crl (hash: QB4wpt/0VB+PU5rgqDWD1y5o/rBpj/EhE0jm8rbUA4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:b3:d8:8e:07:c7:5e:df:8f:c0:de:db:78:29:49:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b159c4d3d51f5a00329621a46460ed8ee1e376
Validity
Not Before: Oct 1 23:01:48 2026 GMT
Not After : Oct 2 23:01:48 2026 GMT
Subject: CN=d52536b7482bf8abd2fe7bb966d68175cbd1596d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:2f:53:bf:ef:39:37:1d:e9:14:76:e5:fe:
6b:59:a0:99:60:51:40:c2:3e:3d:47:92:75:29:f4:
12:22:35:1d:52:38:92:5f:fb:07:fd:e1:0a:8e:09:
02:69:d3:55:92:64:89:53:4c:67:7a:37:14:34:93:
54:38:e3:a3:0a:6b:1d:c7:95:3a:2c:a3:ea:58:c2:
ed:bf:d1:75:8b:aa:8d:9d:12:31:7e:34:99:79:15:
53:c7:b5:63:5d:5a:a1:4f:69:db:83:f9:cd:e0:c7:
4c:3b:88:af:30:77:e3:af:04:5b:98:20:98:65:33:
72:61:e3:80:a7:a7:f8:8f:69:00:06:cf:e0:b0:de:
f9:07:8c:58:84:a1:f4:cc:b4:96:18:2b:d1:4b:07:
80:be:22:e3:7e:1e:ac:45:4c:42:71:e3:40:27:69:
c0:a8:78:0d:f4:2c:d4:57:e3:76:b7:91:89:6a:05:
68:af:38:9e:99:fd:ac:1a:d8:7a:8d:22:76:09:fb:
86:b5:1b:64:78:a7:dd:ca:92:03:75:00:14:da:5e:
0b:a4:cb:f0:68:96:8b:12:33:88:83:a0:24:83:48:
d5:5b:35:76:1b:01:ab:40:02:bf:7d:a5:93:dc:e5:
69:1d:c1:98:71:f4:ed:35:ed:ca:8d:02:74:06:bf:
46:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:25:36:B7:48:2B:F8:AB:D2:FE:7B:B9:66:D6:81:75:CB:D1:59:6D
X509v3 Authority Key Identifier:
keyid:A7:B1:59:C4:D3:D5:1F:5A:00:32:96:21:A4:64:60:ED:8E:E1:E3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ad:80:12:ae:ab:f7:1f:c0:28:48:82:6e:75:17:33:75:2b:
ea:d4:ba:48:4c:c7:20:89:14:3e:75:5b:59:00:38:45:7f:a9:
88:96:81:1e:54:e0:41:38:04:bb:98:a4:2f:56:55:f9:d8:72:
0d:59:de:1e:13:b9:18:71:43:72:29:ee:5d:d9:f4:ec:6e:d7:
4f:19:bc:88:cc:91:24:33:a6:9e:a5:d2:d5:a3:24:df:6f:4a:
94:f2:4d:fb:7e:c8:f5:57:76:6a:04:cb:31:7f:cd:32:18:e2:
1c:99:c9:ff:70:43:f2:d3:c6:5f:44:67:2c:c3:55:e1:79:f0:
f7:b5:3c:02:ff:3e:2b:c2:a8:34:85:db:e2:99:2a:27:7d:4e:
6e:fa:1a:f4:99:31:2f:dd:66:33:7b:4f:53:5e:7a:f1:07:51:
29:a0:ca:9f:68:98:fb:af:be:f0:78:d3:35:77:d1:60:f3:e7:
ec:ea:39:83:8d:4d:01:03:c0:8c:93:61:f4:8f:8a:c5:8a:64:
32:22:37:70:ca:8b:cc:55:b7:86:78:f6:1f:48:9a:0f:93:19:
18:9b:fc:fc:ab:b3:3a:08:0c:e0:89:cf:03:ba:de:7d:fb:40:
3f:d3:37:04:71:dc:25:81:fa:69:15:23:f0:17:75:c5:e5:e1:
75:1a:cf:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 08:32:36 2026 by rpki-client