Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
File: 7Sj1d0agBa51qPX56S99ItYcjTQ.mft (raw, json)
Hash identifier: NGhEknz1bH0K87Db5ouIrod1gl7jttlAEAa+0Odoj2o=
Subject key identifier: 85:1F:52:04:59:5D:87:4A:EE:0E:AA:7E:AC:FF:4E:89:F8:73:81:00
Authority key identifier: ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
Certificate issuer: /CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Certificate serial: 01A0D23771DA65372D1D7C7E20B056FB13FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
Manifest number: 0BAB
Signing time: Thu 24 Sep 2026 07:00:43 +0000
Manifest this update: Thu 24 Sep 2026 07:00:43 +0000
Manifest next update: Fri 25 Sep 2026 07:00:43 +0000
Files and hashes: 1: 7Sj1d0agBa51qPX56S99ItYcjTQ.crl (hash: Px3oqaEGgTVIHiKEtlbbrHtkAICU332wNUHzpbzAqkk=)
2: UlZluMg72w3OGQ7yVXSws-uTL0A.roa (hash: ZbBL16EPSfeFJDsY/7W353hLaYPwOpiK4otGlBdRF9Q=)
3: r6bLmGYRXJA6GUfCZnH4ebCbXYU.roa (hash: Q+Z0jJyseu+MqQA03xeTfakfDGrq+7+0HE8bf99rEXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:71:da:65:37:2d:1d:7c:7e:20:b0:56:fb:13:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Validity
Not Before: Sep 24 07:00:43 2026 GMT
Not After : Sep 25 07:00:43 2026 GMT
Subject: CN=851f5204595d874aee0eaa7eacff4e89f8738100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:a1:9b:8b:b7:fb:ca:6c:37:8b:99:87:80:
ec:72:10:5c:86:4d:ce:64:ef:d5:25:5b:e0:f4:b3:
85:6c:4f:a5:5e:14:f8:fa:b2:d2:2e:be:30:74:12:
07:9f:0d:12:69:71:60:96:55:88:ef:d8:c8:98:2c:
64:a3:b3:b3:68:b3:d2:7a:c3:fd:ec:70:2d:9d:aa:
31:9a:68:1c:a3:f3:84:7a:38:60:c0:d3:35:c2:61:
40:01:4c:78:23:5c:c4:65:95:7a:c0:0a:81:61:1c:
b8:75:e4:0e:55:1b:70:f8:95:c5:8b:b1:f4:f2:67:
0e:f0:e9:2e:a3:04:66:74:8f:27:b3:81:01:30:a8:
b5:b8:86:5b:45:8d:2a:92:bd:88:9b:56:f0:ed:fa:
7e:4d:1e:a6:88:67:c0:56:ed:b9:6e:59:a3:80:8a:
14:4a:ca:05:e2:39:96:0f:fe:ac:89:d5:78:76:db:
11:e7:fd:cd:6e:45:f2:56:97:b0:f3:53:4a:ec:92:
96:c3:3b:5f:d7:43:cb:cc:cd:69:b4:81:3f:5a:f0:
39:c0:74:0f:ba:77:dd:ba:c8:26:a3:31:7c:46:16:
a1:47:30:c7:85:cd:0b:ad:34:79:fc:81:97:21:59:
41:63:82:6f:ad:24:90:d3:c4:f6:2c:a2:e1:fe:4f:
1a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1F:52:04:59:5D:87:4A:EE:0E:AA:7E:AC:FF:4E:89:F8:73:81:00
X509v3 Authority Key Identifier:
keyid:ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:4b:07:36:31:ce:b0:6e:42:80:58:60:c9:1a:eb:79:60:6f:
43:3f:d6:3a:e3:d9:90:81:07:13:af:03:44:9f:5f:f1:5d:4b:
68:3c:a2:14:0a:b6:2d:42:40:54:90:8c:dc:9d:f6:7a:01:f9:
ff:8e:cc:de:5c:44:22:30:fa:7f:78:71:8f:a2:a3:57:c9:9b:
68:b1:7f:f3:2b:5e:7b:5e:e5:cf:89:92:2f:fe:54:fa:be:44:
df:a4:bc:f5:c6:e9:1d:c1:59:38:5b:40:30:ba:1a:4c:96:4e:
ce:dc:62:b2:78:2c:ab:63:02:b7:9d:60:0e:d0:4d:4c:d8:73:
f6:62:a6:5c:45:da:ed:e6:1f:09:14:48:0b:4f:97:35:8d:e0:
79:e2:b2:97:6b:7e:6c:02:f5:9d:3b:42:4e:af:83:82:bb:b6:
58:87:0e:7a:8a:f6:7d:44:d1:63:f3:9e:49:e8:7e:8d:75:6a:
08:00:65:62:e8:1c:2f:0f:7f:df:3c:72:d5:91:26:50:52:20:
6a:de:94:ed:96:29:f2:03:42:f0:b4:3d:b9:34:f4:f1:44:cd:
b1:8d:84:a7:3f:ae:32:cb:99:48:f0:c2:2f:cf:e3:46:0b:f5:
23:68:75:26:9f:60:fe:93:11:ad:e3:dc:38:18:42:7d:b0:1f:
46:3c:a2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:53:20 2026 by rpki-client