Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
File: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft (raw, json)
Hash identifier: thl2gXFGXx7OJhIO0S4uHWYQEBuLtbA5YPfFlXtRsEw=
Subject key identifier: 42:BD:89:F4:65:70:7B:BF:C7:CF:AB:E7:D0:B7:30:01:FD:E9:86:3B
Authority key identifier: EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
Certificate issuer: /CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Certificate serial: 01A0D0EE0FF4746BCA0FB2550447589BF19B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
Manifest number: 07E1
Signing time: Thu 24 Sep 2026 01:00:57 +0000
Manifest this update: Thu 24 Sep 2026 01:00:57 +0000
Manifest next update: Fri 25 Sep 2026 01:00:57 +0000
Files and hashes: 1: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl (hash: aKHed0BH+Epgw1AOvtmuc/MTIfYWExKadsjU9Ge/040=)
2: l1mFVAOuxHZKBwMbg64rZnUC-1A.roa (hash: b+iEU9Au8tIP5RGBvo59a7Rag467Ip6uQFWhSxkco+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ee:0f:f4:74:6b:ca:0f:b2:55:04:47:58:9b:f1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Validity
Not Before: Sep 24 01:00:57 2026 GMT
Not After : Sep 25 01:00:57 2026 GMT
Subject: CN=42bd89f465707bbfc7cfabe7d0b73001fde9863b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:01:3b:66:35:59:60:41:2c:b9:bd:f4:67:
b2:df:df:c6:31:d0:ff:e8:d3:68:86:1d:fe:b0:c4:
13:3f:81:c9:1d:8e:c6:b3:65:39:81:47:08:e4:90:
fe:ab:6a:1a:76:00:fd:ae:0b:e3:b5:7b:39:d7:d1:
c5:a7:84:9f:a1:94:2b:ea:28:da:60:cc:7a:b4:18:
27:ca:60:27:ab:02:9e:aa:ea:dc:32:bd:1e:de:bf:
5d:f3:1e:21:b9:ba:67:ed:bd:ee:e8:f1:c7:b2:ea:
30:f3:54:3c:6c:8b:24:6b:57:65:57:9d:a4:ef:da:
ef:49:57:94:0c:9a:fd:37:a5:1f:62:ce:9e:de:7f:
c1:c2:6f:89:79:ac:f0:c1:c8:f2:86:34:95:08:a5:
d8:15:16:bc:c8:b8:77:64:e6:f4:4a:ee:cd:81:6c:
f6:bb:b9:74:61:1e:36:cb:c8:d1:49:b4:d0:38:0f:
0d:d0:35:48:60:86:94:5d:94:f8:d8:f1:f2:6d:b2:
a1:02:51:8c:76:27:03:12:eb:5a:60:43:ac:92:ca:
42:2c:dd:90:10:cb:55:44:aa:f8:37:a4:c2:3e:e3:
0a:74:8c:7f:50:53:ed:4e:8e:31:ce:28:10:ef:d1:
5d:32:bd:51:cf:ef:17:7d:6b:b5:3d:f8:68:5f:e7:
e7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BD:89:F4:65:70:7B:BF:C7:CF:AB:E7:D0:B7:30:01:FD:E9:86:3B
X509v3 Authority Key Identifier:
keyid:EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c6:15:82:47:05:59:4b:e2:14:65:21:75:ad:04:a9:c5:b7:
a3:e3:6a:21:be:2e:da:a0:e7:31:b3:79:a5:86:16:32:61:e7:
ae:c7:51:45:f0:3d:8e:e6:85:01:eb:71:e2:b9:0b:9b:b5:a5:
04:4d:12:29:d8:28:23:b0:fb:b2:aa:39:b0:bf:e4:95:ad:9b:
a1:02:95:74:c2:8c:25:af:07:ec:c1:1e:d2:9a:db:64:f3:0c:
f6:86:aa:13:70:75:db:a0:5b:b9:09:a4:7b:d8:63:98:7b:f4:
68:7d:1d:e3:b9:47:7a:a7:fb:1f:87:bb:65:a4:9a:77:9f:84:
44:a0:40:38:b1:83:7e:29:51:03:54:38:62:10:74:61:49:70:
b0:42:2d:bc:8c:10:d2:f8:e5:a2:4d:41:3c:ae:f5:de:86:a8:
0e:fd:5b:6a:06:4e:a3:38:bd:a0:4d:82:ea:a5:97:1b:9f:0f:
aa:83:8b:76:ec:4b:60:78:e6:f3:f6:a7:3b:45:15:dd:5d:5b:
99:ee:df:dd:44:44:45:3e:df:44:b1:21:22:2f:b2:db:e5:1a:
dd:27:0c:d3:c7:6d:c0:19:ca:66:c4:1c:d1:ed:73:f7:e3:7c:
cd:ed:b4:6b:cc:e2:f5:c1:a7:e4:61:74:1a:45:5e:65:00:99:
54:56:c9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:01:06 2026 by rpki-client