Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
File: 7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json)
Hash identifier: IG0C30BcU/yIIxytkhhsTj0nTdFvDjxV8lPZIYAd5k4=
Subject key identifier: A0:9B:2B:CD:2D:E1:CB:73:08:9F:6E:C6:B9:28:73:32:70:26:C5:DA
Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
Certificate issuer: /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Certificate serial: 01A0D04871898B653315E76F2B2DE02C39C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
Manifest number: 0CDE
Signing time: Wed 23 Sep 2026 22:00:03 +0000
Manifest this update: Wed 23 Sep 2026 22:00:03 +0000
Manifest next update: Thu 24 Sep 2026 22:00:03 +0000
Files and hashes: 1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: hzeXGYG/FA9HNERNnEd68jykiUDgt+AUH/w3R5uEtns=)
2: aO8SV7r8aRmaMsrCVn54MAITseY.roa (hash: UBYs9t/xpmJLmkQIIYwuZf57SETqiU4zYplqSc9D++E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:71:89:8b:65:33:15:e7:6f:2b:2d:e0:2c:39:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Validity
Not Before: Sep 23 22:00:03 2026 GMT
Not After : Sep 24 22:00:03 2026 GMT
Subject: CN=a09b2bcd2de1cb73089f6ec6b92873327026c5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:91:8d:01:f8:db:10:b5:bd:e3:3e:c0:82:12:
83:c4:e4:e8:0f:6f:ab:0a:1e:4b:49:0b:5d:2c:67:
fe:d2:8a:75:a2:1e:cb:00:de:8a:20:85:48:c0:7a:
43:fc:45:a6:91:d7:3c:49:b3:a1:7f:46:4c:81:3e:
b9:a8:35:59:9e:d9:b6:45:97:7b:e5:81:88:e1:f3:
99:9f:87:79:03:1e:af:ec:de:2f:ea:02:c1:fb:3f:
9f:c5:e8:8e:68:7a:1f:9a:bb:1b:e8:40:c0:9b:fd:
57:93:68:de:62:a3:24:fa:b6:a7:a4:31:26:68:5d:
76:14:b4:3a:ac:af:45:52:ca:c8:c9:2c:39:95:bf:
9f:68:4a:53:e8:36:ed:c0:df:83:29:0c:16:f9:1f:
d8:ed:2d:2e:b6:d2:4b:6a:d0:de:26:da:80:db:b2:
8a:34:1f:3e:34:a3:d2:67:e2:ab:17:1a:ec:17:bf:
61:7b:26:2d:80:e2:f6:45:f9:2c:d9:17:37:b8:e6:
e5:19:66:6e:ae:85:59:5c:50:2f:04:65:3a:42:78:
cb:1c:3f:26:fc:1f:4a:70:d5:c4:9e:cf:f2:ed:28:
82:22:78:27:e8:e1:31:c9:0f:c7:14:10:e2:fe:68:
4b:43:a3:d2:d6:a0:0d:6b:ac:4a:eb:5d:62:8f:d1:
b6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9B:2B:CD:2D:E1:CB:73:08:9F:6E:C6:B9:28:73:32:70:26:C5:DA
X509v3 Authority Key Identifier:
keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ff:5e:73:cc:64:f8:8e:f0:ff:65:2b:5a:9e:9c:a2:4f:33:
33:4b:ec:12:ce:51:cd:3c:f3:9e:e2:a8:9b:08:51:59:d6:d9:
46:09:c6:93:42:e9:66:c9:af:ed:26:46:22:29:a0:7f:80:f9:
b4:c9:f8:da:29:e5:d1:38:f2:71:6e:1e:52:2b:54:5e:b8:28:
f5:c7:98:24:e1:01:11:fb:c8:f3:89:13:5b:b4:40:40:43:d6:
68:17:13:d7:96:5f:a7:b2:da:63:a4:90:de:62:1f:57:eb:89:
23:26:44:f4:e9:f7:cf:2b:92:be:bb:ba:e0:a0:52:95:82:26:
f6:25:b3:8d:78:65:39:9b:f4:8e:df:81:d4:78:63:99:c5:f8:
e0:9a:f2:ba:80:07:e1:74:82:6c:5f:81:3b:11:49:2d:92:da:
69:d0:6f:67:6a:b9:09:2c:55:57:4f:8f:39:49:de:21:90:76:
5d:79:f0:25:7d:ea:fc:ee:c9:27:4b:41:a6:f6:14:31:77:e9:
f9:85:06:63:b3:7f:32:91:77:4a:d9:66:95:60:35:48:db:51:
c1:38:d1:30:8d:6f:9e:85:3c:bc:07:27:d0:55:30:98:2c:00:
cf:16:74:07:1d:a8:6f:5d:c7:20:b3:7a:55:e0:c1:d4:c3:41:
55:4e:16:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:48:30 2026 by rpki-client