Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
File: 7CSoJiAgkayDGfDwbreW_YJCKw8.mft (raw, json)
Hash identifier: gAmLpQJp3I78s/fll5a9MPLyCk8rDmz5ys3VEDQyY24=
Subject key identifier: 37:29:12:84:15:6D:45:4C:F8:06:17:C7:CC:C1:9C:D5:BC:55:AB:D1
Authority key identifier: EC:24:A8:26:20:20:91:AC:83:19:F0:F0:6E:B7:96:FD:82:42:2B:0F
Certificate issuer: /CN=ec24a826202091ac8319f0f06eb796fd82422b0f
Certificate serial: 01A0DE05368F19F918027B1478BBC7E8C6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
Manifest number: 0413
Signing time: Sat 26 Sep 2026 14:01:18 +0000
Manifest this update: Sat 26 Sep 2026 14:01:18 +0000
Manifest next update: Sun 27 Sep 2026 14:01:18 +0000
Files and hashes: 1: 7CSoJiAgkayDGfDwbreW_YJCKw8.crl (hash: BnqYHB62n7kdsj8soMNozcr+nXJXY2qRkd0eEXo8ZTQ=)
2: NV3f3XuOFAsDnfAaCg6nF83CLX0.roa (hash: gLitDvaGVXpGQdqcXcYcXVG4iAgjgIJ9u8eaDv8Xduc=)
3: XHsv6tidd9i-2RRz-dH5aTG8xDM.roa (hash: mc5VNfZqvrFRMc92AfbsJY+NZvDvOSGlYFhOV1FglZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:36:8f:19:f9:18:02:7b:14:78:bb:c7:e8:c6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec24a826202091ac8319f0f06eb796fd82422b0f
Validity
Not Before: Sep 26 14:01:18 2026 GMT
Not After : Sep 27 14:01:18 2026 GMT
Subject: CN=37291284156d454cf80617c7ccc19cd5bc55abd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:ab:68:63:3e:42:ef:fc:1c:08:8d:30:b6:
79:60:93:ec:18:f0:8b:b4:f0:22:3e:c0:71:b6:c1:
c8:6a:10:f8:23:ed:e1:e7:d3:9f:56:5d:21:47:ab:
5c:a6:82:9a:4f:65:8f:b1:6f:7d:b7:2d:c2:c1:41:
64:4f:a4:52:09:66:a2:5c:7e:39:da:ab:9a:00:dc:
13:b2:3a:16:d0:1b:5a:6e:22:30:12:4c:ea:af:91:
34:4b:48:73:ac:9d:74:8f:e3:15:67:48:fb:b6:57:
4c:63:e1:c9:cc:80:98:39:25:08:02:23:b1:69:d4:
3e:8a:f3:c8:29:d0:01:dc:c5:e2:89:24:ff:c0:07:
f0:2c:9b:75:93:6b:37:12:14:a0:e0:b0:b3:2f:9b:
78:2b:f0:f3:42:56:f9:86:79:5a:0c:9d:6c:94:16:
93:c4:d5:20:f8:05:42:55:ec:3e:df:c8:85:b1:b7:
59:94:87:72:68:cf:ba:31:54:df:62:26:15:fb:6d:
fc:1b:40:fb:28:e4:e3:01:d4:dc:b9:6d:ff:ff:1a:
c0:58:58:90:8a:33:ff:09:09:a2:2d:e4:04:00:1a:
63:0d:ec:ca:30:96:d6:39:6e:f7:55:13:5e:18:cc:
17:ee:43:9f:35:0b:50:c3:e9:4b:58:d7:d0:83:ac:
fa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:29:12:84:15:6D:45:4C:F8:06:17:C7:CC:C1:9C:D5:BC:55:AB:D1
X509v3 Authority Key Identifier:
keyid:EC:24:A8:26:20:20:91:AC:83:19:F0:F0:6E:B7:96:FD:82:42:2B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:25:fa:aa:d0:60:22:65:e8:a3:28:8f:3c:e2:17:92:e2:d6:
9f:66:54:86:a5:96:6d:8d:c2:0f:d9:99:77:9d:56:a0:44:01:
b2:09:3f:6e:4a:9c:4c:db:cb:c3:d0:1d:29:b9:11:ee:0c:e0:
34:f5:2b:18:d8:ae:a2:a3:72:96:de:13:6e:1c:30:7b:90:93:
c9:73:9d:b5:a9:09:38:bc:d3:8f:72:90:42:a1:51:62:0d:80:
cb:99:6c:c5:2e:99:4c:26:b6:80:e5:a7:2b:cc:88:bc:59:20:
5a:5d:ea:2b:c9:3a:a5:96:f1:ea:13:af:42:71:c9:6e:91:26:
c0:aa:d4:84:32:13:35:db:75:63:8a:9a:da:39:5a:30:64:6e:
4f:a3:0c:53:99:0e:31:04:c4:df:b6:fb:b3:bf:31:83:08:a4:
77:23:56:c6:30:a1:ef:92:3f:2f:0d:b3:f8:b0:ad:f1:13:7c:
3f:c8:ca:f1:8b:df:97:88:4f:48:9b:76:9f:27:96:d0:37:e5:
0c:60:61:09:ae:fb:ab:dd:a5:a9:20:56:a9:6a:b3:04:e9:af:
da:1f:e4:1d:3e:ff:94:26:76:56:63:53:1e:59:67:11:fa:41:
1a:d1:43:a3:6a:16:5c:64:db:92:36:56:3b:f5:3b:33:ad:86:
d3:9b:48:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:08:17 2026 by rpki-client