Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json)
Hash identifier: qXAaJdQ9X0Cya+EHptTosc4DEVrROfWC8vGr+4BBwG4=
Subject key identifier: 6B:42:FA:E2:8D:3E:9C:2A:6A:2D:8E:72:42:F5:52:35:4F:86:FA:A9
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 01A0CD4776848C5895F16E43B81071EA1350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
Manifest number: 1A8A
Signing time: Wed 23 Sep 2026 08:00:07 +0000
Manifest this update: Wed 23 Sep 2026 08:00:07 +0000
Manifest next update: Thu 24 Sep 2026 08:00:07 +0000
Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: nfasa0pJGh1I97xbQg4GwORDmf6lWgUPbp/i5tsBFec=)
2: Gp76Gv-eHWRgRvhEjHqJ6icn00Q.roa (hash: BmL3M6inhKtEkTbjCk7s9if8HrybG3oAFNlmaOoxF0c=)
3: JnNygfiur-rHLJuAn1hkxLz25cQ.roa (hash: CEYmgo0zOa133sbdNYSecv5niw3ZeeRwnisUaeasxBY=)
4: UV-Za1MLDNSaG4DuH_q131i6c6o.roa (hash: /nY7i2nihg09pwfCz4ZETusOQgWbnKeEZAo2lp/8PQQ=)
5: XwwEduTGUdEUmzQ6Vn1Qh0lULKE.roa (hash: yP/C4oSHOkCL3b3u7lTD0ceM0Z9V/7tsggm9f4RRupE=)
6: bc8LaOm-Ug6E5hSvds9yGbuwrFA.roa (hash: RaZzZcOTQlGar1i6XUpTh++hxvp7YrNT3WX2Bc1Xmtk=)
7: gDu74A_Z1ksatoKHQD455fxsAx0.roa (hash: 5WTnm+h2P7sppTWJRlxxAJMWxqtBVlvtcy2GltVnQig=)
8: zOmGYauNnRfV_5QaNrYyOSSrwQ0.roa (hash: QJz+FfKfespU5hmZuz01TmSY2wjv9AwO7tZKjrvrO1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:76:84:8c:58:95:f1:6e:43:b8:10:71:ea:13:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Sep 23 08:00:07 2026 GMT
Not After : Sep 24 08:00:07 2026 GMT
Subject: CN=6b42fae28d3e9c2a6a2d8e7242f552354f86faa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:5a:d4:c4:68:4e:b5:6f:7b:5b:bb:93:bb:
0e:94:ed:2a:b2:43:0f:48:f1:46:c9:f5:48:f1:16:
2e:83:c6:15:95:32:64:43:26:24:99:e9:1b:7a:59:
0c:af:65:65:41:f2:7e:51:32:d9:a6:47:60:b1:96:
28:e4:2e:6d:d3:10:1e:27:07:bd:56:70:1d:57:3d:
c4:ac:c9:06:06:cd:25:23:5e:8e:bb:2e:4d:55:69:
3d:cc:db:ad:0f:ce:86:dc:4a:6c:c2:66:c2:bf:d8:
2d:36:b0:39:8a:3c:cd:1e:06:cc:23:90:de:a1:a6:
3d:09:a2:d6:7f:d7:32:af:84:39:a2:ce:33:2a:a8:
da:9a:db:41:c4:8d:91:98:18:83:9b:5c:15:67:b7:
dd:d0:8e:08:c4:c8:26:a7:e7:4b:e6:d5:4d:f9:30:
a5:49:f0:88:81:3c:52:15:cc:70:4e:51:68:d3:89:
db:53:2d:2b:17:4d:96:3c:b6:6f:2a:83:10:51:85:
69:9a:1a:5b:06:ef:10:8f:f4:d1:c2:5b:a0:83:96:
58:51:ff:20:28:dd:e7:73:a9:5f:9b:88:c7:c3:f9:
eb:ca:36:14:6f:ca:37:b1:91:b1:ec:e0:cc:a5:a3:
ac:79:14:e4:0a:e6:39:95:10:5b:f6:70:cd:07:d8:
7e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:42:FA:E2:8D:3E:9C:2A:6A:2D:8E:72:42:F5:52:35:4F:86:FA:A9
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:cb:a1:b3:65:84:20:68:f7:ed:21:40:91:5f:71:8b:4e:13:
53:e4:bf:4e:5e:20:a4:60:89:70:e7:7c:0c:8d:22:c2:d0:87:
ef:cd:b9:4f:d8:78:25:1e:86:07:b6:f3:78:d6:8b:90:a0:65:
9b:10:f3:6c:76:62:49:4e:a9:dc:34:2c:05:ed:b5:1d:8f:0e:
8a:12:98:1f:df:91:94:93:db:fe:2b:af:58:39:c2:07:70:ee:
1d:08:14:fd:f4:bb:21:63:3d:02:54:55:82:51:78:73:cd:78:
cb:5c:e1:26:93:d6:da:ab:c1:11:ae:f2:a5:fd:32:c9:1f:f6:
0b:64:f1:83:5e:43:40:95:ed:cd:73:1c:83:c4:67:5f:19:b4:
25:bd:5b:66:9d:24:77:34:fe:1c:12:a7:cd:94:1c:b5:f1:73:
9c:98:0a:cf:05:89:31:cd:00:35:42:d6:f7:fd:40:e9:89:7f:
dd:07:5a:ad:42:8f:2e:07:c8:36:c0:09:61:be:ec:24:54:d3:
94:4b:0b:42:3e:64:0c:ea:7c:6b:ca:d6:6a:7d:02:ce:c3:9b:
9b:5e:09:17:9d:e5:80:64:e9:c0:b8:55:40:c4:ef:72:69:73:
af:f4:92:bf:7f:4d:1e:77:38:77:60:1c:e1:96:25:5c:68:9b:
84:22:97:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:04:44 2026 by rpki-client