Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
File: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft (raw, json)
Hash identifier: 12EiPgWdRn6yHbQ14YgL1OxEibvQkFavGcBV5AhdOHo=
Subject key identifier: A4:2B:96:DD:DA:B3:42:91:9B:1E:FD:9E:1D:4F:27:F4:AC:48:4B:8D
Authority key identifier: ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
Certificate issuer: /CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Certificate serial: 01A0CE91A9ADCF991680188F058C82752FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
Manifest number: 0829
Signing time: Wed 23 Sep 2026 14:00:47 +0000
Manifest this update: Wed 23 Sep 2026 14:00:47 +0000
Manifest next update: Thu 24 Sep 2026 14:00:47 +0000
Files and hashes: 1: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl (hash: KepaNiT38r5Lgf3ObB07B1em5ovi6itAvY6ANFY4+sE=)
2: DBz0WhaRA9wNrK9K1etEW30ajBM.roa (hash: TIvrus04yBKxsgpsBLzS8XeHM34FR+aAzVV81lSqNzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:a9:ad:cf:99:16:80:18:8f:05:8c:82:75:2f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Validity
Not Before: Sep 23 14:00:47 2026 GMT
Not After : Sep 24 14:00:47 2026 GMT
Subject: CN=a42b96dddab342919b1efd9e1d4f27f4ac484b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e2:e0:9e:d0:12:10:c5:23:3c:cf:bf:da:68:
6f:7e:b6:45:9f:7a:fa:cf:49:fb:19:84:89:29:b6:
9a:32:6a:19:2d:72:fb:47:eb:6c:2a:fb:54:cd:a1:
e4:a3:f8:bb:43:74:05:a2:ba:06:1a:04:10:ca:df:
69:35:b5:4d:19:89:48:ba:65:71:da:61:55:e7:52:
02:06:e1:3c:c5:87:99:17:0a:d1:48:0c:e0:4c:6c:
f8:55:e8:55:5d:dc:31:3e:ce:26:0c:fe:63:1d:f5:
c6:1e:62:07:3a:4f:f7:36:83:45:7f:71:8c:81:f0:
d2:e3:a2:a5:40:98:d2:4b:10:d1:08:de:24:e3:82:
4b:ee:8b:4b:b0:fe:3c:20:a2:22:5f:77:b7:50:02:
08:b4:57:5e:61:fc:ef:57:bc:b2:97:a0:5c:14:22:
72:28:17:6e:66:b1:4b:46:2d:c8:07:a0:1b:71:ad:
65:c2:9a:e0:c9:12:44:b6:84:7d:2d:b5:58:f1:1b:
44:d8:ff:88:14:89:43:f5:46:75:57:42:d8:31:21:
06:f1:e6:6b:93:91:4d:5f:7f:4d:97:28:f7:44:52:
f7:50:b6:68:25:cc:57:8b:33:39:46:84:66:f7:e0:
c0:6c:e8:98:c5:72:75:d9:64:17:b4:34:0a:6e:97:
67:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2B:96:DD:DA:B3:42:91:9B:1E:FD:9E:1D:4F:27:F4:AC:48:4B:8D
X509v3 Authority Key Identifier:
keyid:ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c2:24:31:ce:cd:57:24:85:ce:78:33:e6:81:db:9f:24:96:
7e:af:82:51:e3:79:1b:3c:16:fb:41:0f:cf:d2:7f:ad:de:d9:
9e:f7:81:f2:46:ab:c7:87:d5:02:3b:62:9f:2a:37:88:db:0e:
60:02:a3:38:8a:61:53:57:59:92:73:a2:11:75:1b:c5:fc:47:
95:1e:89:5f:8d:0a:7d:6b:54:bf:45:92:fb:9c:4b:39:4d:21:
dc:86:87:e8:bb:75:7f:41:2a:0f:a2:cc:b0:e4:9b:c8:5a:06:
5f:03:30:8d:f0:44:02:ab:e0:a8:eb:ba:9d:49:fd:ea:2c:c6:
03:1d:e9:95:d7:e8:1e:fd:64:e9:57:00:77:61:4c:5b:68:f9:
27:ca:38:02:81:bb:4e:91:ba:8d:4a:ab:3d:d3:0e:0a:37:52:
77:67:10:a5:bd:f6:41:03:25:a3:db:c3:05:0c:e5:9f:17:c9:
55:08:5d:43:5e:ac:ca:75:3a:3d:6b:5e:61:85:be:fb:dc:9b:
9a:d2:f3:e4:d0:e1:0f:b3:87:a7:18:50:c6:a0:f2:2b:f4:81:
49:27:24:d5:da:62:3c:54:01:5f:38:82:94:4e:91:76:62:91:
e6:cc:5f:da:05:a5:24:e1:a0:74:78:70:1a:38:53:af:0e:f9:
f1:ab:51:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:48:48 2026 by rpki-client