Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: svN/c7L4JiZArdhsyZZo2fEGFQutxCyBa63xn2tLwqE=
Subject key identifier: 21:17:D3:70:E2:3B:4E:D4:E3:24:64:48:9B:FD:34:25:81:56:78:AA
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 01A0CD7EBDCAB31C3323435ABDE514F4E1AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 1853
Signing time: Wed 23 Sep 2026 09:00:30 +0000
Manifest this update: Wed 23 Sep 2026 09:00:30 +0000
Manifest next update: Thu 24 Sep 2026 09:00:30 +0000
Files and hashes: 1: 5wBvYH18mnYKydx8H19r86HtE0Q.roa (hash: VUGd6jaGsjCSaa2yqTqiiqwge8OaZ7jM3DegnmT+3+Q=)
2: 5zuquzvoPSv-HJr2QhNMX3OYMgA.roa (hash: bcYgeaY8QXTzK+9kyXA0UgosAczZtORy6M/Ez+Fizn8=)
3: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: SVOCdm0CH66W5T5nz8EotTVWTQ4c3Fb0ngW1IkBW3eQ=)
4: kgnu5UR9Ocl-BiVCaC6wT07shm0.roa (hash: FpIRHnwVZMdLfpDIL1lnVTw2bZIMLJe4K4qr7pxMTCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:bd:ca:b3:1c:33:23:43:5a:bd:e5:14:f4:e1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Sep 23 09:00:30 2026 GMT
Not After : Sep 24 09:00:30 2026 GMT
Subject: CN=2117d370e23b4ed4e32464489bfd3425815678aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:a0:01:94:1b:dd:c2:39:45:46:04:65:f9:
91:c4:cc:b1:d5:38:29:ce:7b:71:b8:20:97:53:81:
54:82:d7:d7:67:c3:53:78:f1:4f:29:02:d7:8c:03:
9d:73:d5:aa:3e:4c:18:b5:d9:5b:67:9b:ac:6b:33:
9b:d1:d7:9f:d7:20:9d:62:3c:50:fc:7d:58:41:5d:
ce:2f:24:32:13:8e:59:37:69:d3:ca:bf:88:88:2a:
12:d3:56:29:7a:fa:03:fa:93:0b:b0:7e:a0:2d:da:
24:3e:47:ef:a6:cd:6e:9e:b0:05:20:9b:9a:28:2e:
60:85:f8:48:22:3f:61:c2:b3:ce:4c:04:14:5e:98:
eb:b9:fa:98:e6:89:0c:a4:95:6e:37:34:b3:78:39:
59:8a:bc:f5:bd:4b:da:2d:2b:5e:0b:21:3c:94:12:
f3:ae:e1:19:e4:7e:4e:0c:9d:1a:34:fa:4b:d5:c7:
cf:c1:10:18:65:d1:fe:97:c0:9d:9e:09:a7:40:54:
8d:9d:59:e9:e0:66:3a:24:15:4c:c5:78:2a:6a:d4:
65:c9:76:ff:b2:24:a7:f6:50:8a:b4:aa:51:51:cd:
5e:51:8b:ac:4c:19:bb:af:fd:06:59:f6:95:a9:0f:
bf:b3:2a:35:3f:d2:2a:5a:4b:6e:7b:6a:e6:74:ac:
35:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:17:D3:70:E2:3B:4E:D4:E3:24:64:48:9B:FD:34:25:81:56:78:AA
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:0f:d9:82:08:5a:81:bd:f2:65:d3:f8:30:46:84:82:d6:4d:
db:c1:4c:a5:64:dc:54:70:32:8c:09:84:29:fd:21:22:64:ed:
d6:97:9a:77:41:37:5e:7e:f2:4b:7e:d2:c1:29:05:e8:ce:97:
e9:ef:73:1d:a5:af:30:db:e1:12:f2:1c:b3:c3:2c:84:84:5a:
0c:32:9f:be:2d:8b:09:0c:44:cb:19:31:fa:3a:2e:48:3a:ce:
88:46:22:34:82:e2:55:d9:6f:e5:27:25:1a:ce:27:f9:86:c6:
c6:64:f3:e1:66:d3:b3:ea:de:3a:63:02:47:ea:91:b3:7e:b0:
0b:de:8b:ef:24:4b:75:d3:1e:0e:c4:e5:da:b5:ab:7a:39:e9:
f4:1b:ec:c7:fe:8d:01:f5:02:20:13:57:35:b2:fc:53:54:c8:
3a:e8:1b:84:1f:6e:28:ee:6a:8e:2e:1b:86:05:69:6c:10:01:
5b:2f:88:60:44:9d:20:70:24:d7:2f:bc:38:81:8b:28:ac:64:
91:d6:81:0c:4d:57:13:d1:ee:de:61:06:c4:7e:4b:fd:d7:b2:
62:d5:b3:91:c4:df:ff:42:cd:35:22:ab:a4:7d:24:cf:f3:e0:
11:7c:df:ab:f1:7b:ef:9c:6a:ac:2b:1f:ce:a4:de:8e:f8:6f:
63:9c:90:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:48:27 2026 by rpki-client