Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier: BVp+yZ0E0n6P77+DxI3pleCtD+NBvyzHtTKEUssZ50E=
Subject key identifier: 7A:BA:CB:06:7A:C7:DE:1E:95:1C:07:93:F0:9C:1F:D2:05:25:BA:A8
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 01A0DE73287A5619E11AD61BCC525BCF14C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 16:01:23 +0000
Manifest this update: Sat 26 Sep 2026 16:01:23 +0000
Manifest next update: Sun 27 Sep 2026 16:01:23 +0000
Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: iYxgpyC+uD57hWF2tGMIV2V0a1fdvndrW3gd+b5kJdQ=)
2: x6n822Rpr9x_ujzRReAoyI3uWJE.roa (hash: xHlOIj9K0jyV1cDKqnDaDCInd6n4ZibqQVDDfE1qwao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:73:28:7a:56:19:e1:1a:d6:1b:cc:52:5b:cf:14:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: Sep 26 16:01:23 2026 GMT
Not After : Sep 27 16:01:23 2026 GMT
Subject: CN=7abacb067ac7de1e951c0793f09c1fd20525baa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b4:e7:a8:57:2d:c0:95:d0:05:d0:bb:e2:11:
bd:df:3a:06:3f:55:ac:74:ff:2f:0b:39:ea:b2:b1:
db:55:fd:ca:2f:b6:de:a4:ff:9b:47:59:05:9d:15:
ff:5c:32:1d:18:34:9b:14:8a:84:68:9f:cf:2d:d6:
11:5f:ce:9c:f8:f4:31:0f:5c:e2:2e:9c:bd:f6:d2:
10:bd:85:4f:b4:05:59:1d:b8:6d:00:89:6c:25:71:
27:f7:87:e3:46:e9:8b:ed:8a:84:fc:e9:46:ec:1e:
4d:d3:1e:1f:c4:43:48:f9:82:3a:cb:55:9b:1e:8f:
25:d0:a3:ee:43:70:81:1c:fd:8e:08:a8:56:a5:9d:
47:80:dc:ee:28:93:f2:ba:e9:6f:47:86:26:79:ab:
8b:36:b8:cf:a0:3e:f1:41:72:0e:1e:bb:ac:35:a4:
56:41:ed:39:91:f3:4d:05:29:0b:98:87:e0:09:c4:
ca:bb:c0:18:3e:3c:0f:3b:13:16:61:64:c9:9b:a9:
47:75:50:e4:ab:7b:2d:2a:b4:88:34:a9:85:af:07:
3b:ee:87:1b:d0:79:1d:ee:29:78:75:8e:a3:49:08:
ec:1d:e9:3f:c1:94:a3:94:e5:4b:8d:54:64:7b:5a:
bf:0e:cd:4c:52:fa:03:af:d2:e2:99:3d:36:79:1f:
d9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BA:CB:06:7A:C7:DE:1E:95:1C:07:93:F0:9C:1F:D2:05:25:BA:A8
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5d:7f:fe:d9:7f:56:e0:08:02:ef:f4:82:4c:04:09:16:bf:
e9:24:38:5a:61:52:8f:56:d8:50:ab:67:06:7f:a1:e8:19:d9:
a6:a2:82:0f:99:47:4c:c8:0d:e3:58:1f:34:3d:1a:e3:a6:2a:
cb:97:84:37:4a:96:d1:cb:b0:0e:2a:38:a8:66:2c:02:7c:48:
a5:1a:39:44:c1:59:51:dc:e8:cb:75:3e:e2:ae:3d:13:7a:2a:
6d:31:84:5c:c7:f5:26:37:11:47:87:cb:35:75:be:d2:5d:26:
38:a8:98:91:f4:c3:6a:e1:c0:80:50:71:46:d3:e1:34:58:db:
3a:3b:9f:71:15:56:37:1a:f0:6e:ec:e6:09:3f:09:a2:da:48:
32:94:03:34:12:9f:7d:93:7b:98:1e:bc:92:00:39:4b:75:09:
15:fc:d2:94:43:2c:09:37:77:27:46:0c:5e:a8:eb:bb:85:02:
c2:31:3d:d8:21:9b:2b:dd:18:2d:7b:6b:3f:00:62:d3:c6:11:
4a:77:40:96:ba:a2:48:64:18:02:c9:2f:5e:48:fb:e3:e0:3c:
ca:e5:69:b1:ae:f1:9d:a3:82:db:98:c4:5f:7e:91:55:6f:ef:
e1:54:90:1c:25:cc:f2:3f:9f:37:86:2c:0c:d2:1d:ad:a7:99:
78:05:e5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:13:58 2026 by rpki-client