Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
File: 7CSoJiAgkayDGfDwbreW_YJCKw8.mft (raw, json)
Hash identifier: D2QXiQzrA/pfoBZgvq+dgqa0RY4wiDm08RakhRYavUU=
Subject key identifier: F0:EF:3E:FB:65:09:30:C3:EB:44:2B:34:FA:FD:EA:64:6C:03:52:CC
Authority key identifier: EC:24:A8:26:20:20:91:AC:83:19:F0:F0:6E:B7:96:FD:82:42:2B:0F
Certificate issuer: /CN=ec24a826202091ac8319f0f06eb796fd82422b0f
Certificate serial: 019E20FFFEC84EE55848C20D7D7520903986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
Manifest number: 02A8
Signing time: Wed 13 May 2026 11:01:48 +0000
Manifest this update: Wed 13 May 2026 11:01:48 +0000
Manifest next update: Thu 14 May 2026 11:01:48 +0000
Files and hashes: 1: 7CSoJiAgkayDGfDwbreW_YJCKw8.crl (hash: /I5+MHOXIkMqi1hPd4E4dggDunPw11nC9mkNy0XAzJc=)
2: NV3f3XuOFAsDnfAaCg6nF83CLX0.roa (hash: gLitDvaGVXpGQdqcXcYcXVG4iAgjgIJ9u8eaDv8Xduc=)
3: XHsv6tidd9i-2RRz-dH5aTG8xDM.roa (hash: mc5VNfZqvrFRMc92AfbsJY+NZvDvOSGlYFhOV1FglZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:fe:c8:4e:e5:58:48:c2:0d:7d:75:20:90:39:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec24a826202091ac8319f0f06eb796fd82422b0f
Validity
Not Before: May 13 11:01:48 2026 GMT
Not After : May 14 11:01:48 2026 GMT
Subject: CN=f0ef3efb650930c3eb442b34fafdea646c0352cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:ec:fc:81:5f:85:c5:46:a8:0b:c8:a4:f1:
ee:d4:42:67:e3:7a:81:39:f7:32:e3:49:37:e0:4c:
73:3e:fc:9d:e0:7b:b0:9e:a2:b3:81:86:84:f0:3b:
75:62:52:af:04:ed:95:3d:8c:81:3a:05:84:01:b8:
b6:cf:1d:86:8a:4c:31:a8:f0:49:14:69:9a:ac:e8:
9e:eb:43:ec:f4:39:e8:bc:ef:96:57:67:28:13:97:
20:c2:bb:d7:c6:cf:bc:00:08:13:ba:76:1a:80:0b:
53:31:f2:96:8a:b3:f8:2a:8e:f2:b8:bf:c9:25:4a:
b8:f2:ab:0a:dc:1c:57:cb:4e:05:03:d7:d3:0f:96:
2d:64:6f:b3:af:33:76:e3:0b:d9:a6:5d:a3:fb:fc:
72:bb:f1:10:60:d2:24:f8:30:7a:fb:00:bd:dd:92:
be:42:28:24:3e:63:71:24:bb:68:1e:1f:25:7e:4b:
9c:58:d5:27:62:8c:02:5d:ce:98:ab:f3:0e:82:2c:
96:25:ed:23:af:17:17:e6:60:d8:d1:47:09:bc:fb:
bb:9a:1d:79:d8:94:cd:70:ec:cb:da:d5:3e:51:2e:
c5:6b:8f:67:c0:27:2d:46:78:cc:28:3f:db:f8:92:
74:ba:1e:2b:87:ff:35:c6:e5:41:99:21:c1:fc:6b:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EF:3E:FB:65:09:30:C3:EB:44:2B:34:FA:FD:EA:64:6C:03:52:CC
X509v3 Authority Key Identifier:
keyid:EC:24:A8:26:20:20:91:AC:83:19:F0:F0:6E:B7:96:FD:82:42:2B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c4:a4:4f:70:1e:10:24:6e:9b:25:51:4d:d1:e0:15:9c:b3:
c0:d9:f2:c9:0b:1b:70:3a:d2:fd:8c:e8:0d:15:1c:34:c1:58:
e8:8d:9b:8b:9b:76:f2:bc:1c:43:46:c6:06:43:30:38:40:33:
9e:11:e6:aa:37:df:9b:14:23:bf:07:e1:4c:5e:39:57:ce:24:
44:0f:8c:6e:01:13:0e:f2:a1:97:90:02:7d:5f:58:fa:19:87:
8d:b9:bf:68:15:16:fa:4d:b1:50:f6:3b:80:56:c4:1d:61:02:
40:81:a3:5e:7b:e8:1c:da:14:4b:d8:d9:7e:54:74:83:e6:ac:
97:1f:5e:f7:d3:34:3f:a9:02:a8:c3:88:55:c7:66:f0:5e:52:
a9:f3:4b:76:62:17:4e:db:51:1a:4c:85:ac:8b:b6:aa:1f:f1:
65:69:f3:5e:89:10:c1:a6:3d:5e:3a:87:08:60:16:d4:d7:a0:
d8:b7:10:11:07:62:d4:53:58:47:60:36:e2:87:f0:db:99:e7:
51:48:cd:fb:ba:50:79:d8:11:e5:b7:95:45:4b:28:ee:c3:2a:
d3:85:f9:1e:1b:71:a5:78:d1:bb:32:cd:32:8e:c0:dc:49:30:
de:39:29:c0:25:c4:88:52:72:a9:21:f8:c5:ba:ad:0c:ca:ab:
bd:94:8e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:08 2026 by rpki-client