
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
File: 7wKUR5RZGCRZwV2MoBCop_R_gMg.mft (raw, json)
Hash identifier: Pthndk3KimYx0OCa2tpj1qf2QDZH2Xh/kJe6niB0EFc=
Subject key identifier: 2A:97:03:31:BC:C9:CD:83:5E:AF:46:51:0A:F5:10:C0:B0:C8:EB:23
Authority key identifier: EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8
Certificate issuer: /CN=ef0294479459182459c15d8ca010a8a7f47f80c8
Certificate serial: 01A0D0EDB9EF5981A55213BC5CEC6B97850E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
Manifest number: 09CA
Signing time: Thu 24 Sep 2026 01:00:35 +0000
Manifest this update: Thu 24 Sep 2026 01:00:35 +0000
Manifest next update: Fri 25 Sep 2026 01:00:35 +0000
Files and hashes: 1: 7wKUR5RZGCRZwV2MoBCop_R_gMg.crl (hash: UdIwUOj0AOdPEhuoO9t+cazkV8Ce4k1Te3NhJeXQj+Y=)
2: ZKITQWeRmOOpWe3j9phAgbWo098.roa (hash: uQME1knZ+/RpjbN1SdA7vXHO6Nrx1GYvYRwaBz+mqFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:b9:ef:59:81:a5:52:13:bc:5c:ec:6b:97:85:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0294479459182459c15d8ca010a8a7f47f80c8
Validity
Not Before: Sep 24 01:00:35 2026 GMT
Not After : Sep 25 01:00:35 2026 GMT
Subject: CN=2a970331bcc9cd835eaf46510af510c0b0c8eb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1f:cf:21:10:e0:ff:b4:ce:58:1b:46:c4:15:
d6:f6:0d:2d:37:b8:16:74:a6:f7:99:ea:b9:dd:cf:
30:6c:90:a0:64:fe:fd:e2:fa:d5:c6:e0:d8:57:9c:
41:10:00:53:43:88:ef:53:f8:8b:a8:e0:fd:4a:c2:
66:a9:23:47:79:ab:d9:be:d9:f5:61:af:91:ca:5e:
c9:4f:50:98:90:3c:86:58:cf:81:3b:a5:c3:ad:97:
58:a1:96:61:a9:b1:ad:6c:6a:b9:22:2a:6e:27:b3:
de:1a:52:66:24:95:5a:a0:eb:6d:a2:60:bf:f3:52:
1d:4d:ae:36:62:6b:05:8f:69:64:13:31:27:d1:f2:
9c:d6:9a:cb:f2:6e:d4:24:eb:5c:13:cf:b5:89:f8:
53:c9:6f:46:87:f2:89:8c:c8:30:12:d8:12:02:06:
9f:98:6c:11:6c:1a:dd:7f:07:70:57:ac:a1:af:90:
37:4c:e2:92:09:31:8e:3d:cf:86:be:3c:65:41:65:
6c:1d:61:53:d9:5c:16:20:e6:06:67:a4:20:5b:e2:
5e:c5:27:1e:ff:c2:78:f5:fb:84:90:7b:86:72:81:
04:f3:0b:42:cf:0e:dc:a0:96:1a:b3:73:8a:7d:6a:
d0:93:32:a7:aa:fd:a1:3b:0c:6e:eb:e3:ab:f5:8f:
05:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:97:03:31:BC:C9:CD:83:5E:AF:46:51:0A:F5:10:C0:B0:C8:EB:23
X509v3 Authority Key Identifier:
keyid:EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:73:76:d3:fb:7e:7a:4e:a8:ac:3f:a8:d3:54:97:e9:b4:16:
94:2d:26:c8:0b:a2:05:85:f2:2a:2c:9e:fb:d9:64:47:ec:0d:
78:9a:82:0b:3a:76:a5:ed:fa:f5:a9:d3:7c:ab:00:d8:be:03:
6e:07:7b:ba:26:45:39:72:f7:9c:c5:51:fc:e0:1c:a0:2b:6f:
5e:eb:e2:29:cb:06:e1:a4:b7:6b:9a:a7:20:6a:13:c8:2d:29:
a0:a3:a1:f4:b8:39:bf:88:a8:8a:07:f0:35:0b:e4:4a:c4:72:
22:07:91:d6:3b:ec:2b:f1:92:13:b1:75:fc:5e:ac:e5:d4:7d:
30:05:51:e8:d7:89:dd:99:20:94:9d:80:25:46:ba:71:d6:95:
83:3f:e2:4a:41:51:08:5f:89:9f:18:ca:da:d7:b7:41:b9:91:
ad:21:1c:0b:35:6c:7c:fe:f7:24:eb:67:d5:0b:3e:51:ab:10:
8f:01:60:2f:2d:19:01:1e:9f:15:7f:63:ac:d1:f8:c6:fd:e8:
a7:a1:2a:36:13:46:79:67:e9:1d:16:df:54:e0:f2:e2:f4:d2:
4d:4d:c2:a3:01:fe:0d:ce:aa:29:9b:24:02:cd:46:61:3e:a0:
49:ee:5a:05:1d:56:45:e3:d8:42:16:a7:02:fa:68:aa:2d:54:
19:7d:b3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:43:33 2026 by rpki-client