Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
File: 7aJsQI_Ge3UnNMyZfzYw269vYG8.mft (raw, json)
Hash identifier: ysYBxobOJe3JtXpk8th7M5JaOwUq+MfLBpWx+optJ3I=
Subject key identifier: 1B:FD:C1:EE:9E:86:F7:B5:47:A1:C5:7D:43:55:77:DE:D9:6E:EB:BE
Authority key identifier: ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F
Certificate issuer: /CN=eda26c408fc67b752734cc997f3630dbaf6f606f
Certificate serial: 01A0CE91D68F41C340A58E6ACF835CA93473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
Manifest number: 0EE3
Signing time: Wed 23 Sep 2026 14:00:59 +0000
Manifest this update: Wed 23 Sep 2026 14:00:59 +0000
Manifest next update: Thu 24 Sep 2026 14:00:59 +0000
Files and hashes: 1: 7aJsQI_Ge3UnNMyZfzYw269vYG8.crl (hash: 4I7L+aNhi1XJfliRQgMkCU5nDLQxsytYlPMWh6CuOjI=)
2: FPqdZZMf-fAPrlSDgNZhOHhHZxU.roa (hash: 3JadQ2sVOsTDIpy9yP5IPOoHewm11RGCjoRS/5qYd6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:d6:8f:41:c3:40:a5:8e:6a:cf:83:5c:a9:34:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eda26c408fc67b752734cc997f3630dbaf6f606f
Validity
Not Before: Sep 23 14:00:59 2026 GMT
Not After : Sep 24 14:00:59 2026 GMT
Subject: CN=1bfdc1ee9e86f7b547a1c57d435577ded96eebbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2a:c5:34:00:0b:c4:e0:e9:e8:b6:b2:7d:14:
50:29:b9:88:89:0c:41:5f:76:0a:ee:7a:af:ee:63:
fe:b8:cb:33:00:46:8e:11:e6:b3:c2:55:99:43:73:
4a:ab:1d:83:68:e8:48:51:1b:5f:49:12:b2:ad:f8:
91:48:51:e5:a0:c2:e1:f9:f9:d0:a7:2e:d9:99:d0:
e3:fb:c8:18:c2:fb:1e:ad:5c:c8:ba:76:42:69:b2:
38:b9:da:87:3c:76:03:69:b0:d0:49:8e:8a:a2:3a:
70:8c:7c:99:28:46:2d:e2:49:e8:bc:6a:77:da:59:
c8:e2:34:17:c1:3e:b9:54:1e:72:47:bd:da:e4:4a:
85:aa:41:0b:59:ed:d6:9a:c2:4f:70:8c:3c:57:fa:
f4:74:5a:cc:44:b8:3f:82:31:1f:e6:75:96:88:63:
7d:4c:99:bb:48:f5:7f:ea:65:6d:2a:6c:4e:12:56:
7b:27:73:43:53:86:e7:66:32:04:a4:30:aa:3f:ec:
0c:6b:d2:70:42:47:d8:85:20:68:03:f8:2c:e0:d6:
59:a1:2c:fc:7a:de:b4:c3:3f:6c:37:44:d2:17:e7:
53:b0:24:62:66:de:f8:9a:b4:34:77:cc:c5:8d:10:
1f:fa:8f:d5:9a:e7:f5:38:9c:9d:e9:af:23:71:f5:
f0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FD:C1:EE:9E:86:F7:B5:47:A1:C5:7D:43:55:77:DE:D9:6E:EB:BE
X509v3 Authority Key Identifier:
keyid:ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:0b:c0:f6:d8:f3:30:21:78:fd:58:d0:ba:e5:1e:6b:78:1a:
b4:8f:19:3f:f0:6c:38:f5:71:2f:b8:be:8b:66:2e:ef:9c:6c:
37:f2:96:ed:ab:bd:f2:bc:d4:11:b3:be:f7:b9:2d:a9:9e:b7:
01:46:f6:05:1e:97:e3:25:7d:d0:aa:98:2c:19:c3:cf:61:74:
72:5f:b7:a1:98:8d:88:5c:53:fb:23:f9:63:8f:bd:e0:26:14:
a7:32:a4:fa:56:61:df:df:bb:10:48:1f:91:d2:92:9c:c8:b2:
16:cd:7c:40:03:aa:c4:b7:7a:03:67:34:b1:ad:dd:4f:88:7a:
61:e1:d4:7f:39:02:0c:d5:90:f2:f9:0c:1b:8e:90:e3:2d:63:
9a:bd:6c:0e:c9:f4:bd:db:1f:a8:54:e8:89:3a:9c:5c:71:88:
f4:a7:14:f8:eb:11:3b:41:87:7a:c8:3e:75:22:a5:72:73:cf:
f8:11:de:59:e4:a1:eb:5a:a8:17:52:6b:1d:d6:ef:42:37:c4:
ec:ba:33:b2:43:a1:d2:35:50:40:21:e5:73:32:f0:e4:5c:5d:
95:cb:4f:bf:97:dd:28:7a:d3:70:ae:eb:ba:2c:6a:e6:d9:4d:
34:c9:27:39:e4:0d:0c:b6:92:ef:a6:8a:af:fa:21:60:ce:fe:
89:30:32:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:39:59 2026 by rpki-client