Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
File: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft (raw, json)
Hash identifier: ZOJVyyzeF0sVqrf8Xxgr9Xk9UgRvwHCKAD7AY23nHFU=
Subject key identifier: 94:57:25:AF:38:BD:8C:10:99:0C:AD:C9:DD:D7:43:82:47:54:DE:59
Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Certificate serial: 01A0D9F1B9B7388870E70E47A20E83ABB3C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
Manifest number: 1A75
Signing time: Fri 25 Sep 2026 19:01:32 +0000
Manifest this update: Fri 25 Sep 2026 19:01:32 +0000
Manifest next update: Sat 26 Sep 2026 19:01:32 +0000
Files and hashes: 1: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl (hash: yTSPUN5w+oQxqXsJrCjJyB9p9i61nOUl2RE+yFOPhdc=)
2: Y1SgnZdGMmo9fGpuJl7wUQaxlkc.roa (hash: c5a6z6fFSi3Ksmn1qg/vCHzequVOvVzrYowSPYYXoZY=)
3: zgjOZSAzojMMAhNOHNiG97-1lKs.roa (hash: 9AqyfTSVIr04hBsXGR4iW4XjBoNFR8P2652xVPdhD0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:b9:b7:38:88:70:e7:0e:47:a2:0e:83:ab:b3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Validity
Not Before: Sep 25 19:01:32 2026 GMT
Not After : Sep 26 19:01:32 2026 GMT
Subject: CN=945725af38bd8c10990cadc9ddd743824754de59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:09:72:80:dd:24:d9:d0:56:ab:51:8a:0c:05:
83:7d:e7:f5:89:78:7b:50:34:7e:83:03:08:52:2e:
1a:d1:69:cf:3c:25:c0:86:ba:2c:73:e4:c1:c0:cd:
d3:31:86:6f:6f:41:c4:1e:4c:26:bd:38:b8:e1:b4:
fc:43:45:55:9c:7b:7a:c4:7c:30:5c:12:35:d7:92:
ed:a4:a8:9d:39:a1:4e:43:ce:75:6e:f4:20:9a:55:
01:15:ba:a6:52:a4:7d:86:40:1b:2c:ee:85:90:9d:
f8:72:a0:2e:e9:59:40:41:0b:3c:fa:da:c2:3a:78:
f3:25:61:55:41:2e:9c:97:c6:43:a4:c9:14:de:3d:
03:58:aa:e2:65:cb:6a:93:29:fc:3d:55:45:48:62:
f3:05:b4:3f:af:85:ce:81:9a:fd:72:1b:59:3c:88:
9c:61:0f:60:d3:33:38:43:ab:46:3d:a9:cc:db:07:
a8:ad:e1:bc:1c:41:dd:9d:40:24:ab:22:76:0b:30:
19:17:90:be:36:6f:94:60:5e:cd:be:39:46:e4:d0:
00:9d:a3:bf:a5:a4:45:48:4d:3c:d5:b5:d5:58:51:
65:df:5b:a4:08:25:75:6b:91:1b:06:f6:da:db:52:
81:39:10:30:71:d5:cc:61:f1:0b:34:52:d0:d4:37:
01:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:57:25:AF:38:BD:8C:10:99:0C:AD:C9:DD:D7:43:82:47:54:DE:59
X509v3 Authority Key Identifier:
keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:62:2e:8f:b5:1a:ce:09:4f:e8:6b:26:48:75:43:f6:ae:8e:
be:81:23:aa:79:e4:e8:b3:02:23:ee:92:f8:be:33:e5:1a:aa:
8a:3e:b5:a8:ba:2c:61:25:e7:f7:9a:c0:38:30:b5:7b:2b:c1:
22:d4:62:29:ac:1e:55:01:af:0d:ee:80:6a:25:3c:0b:c9:51:
9a:8f:9b:dc:21:ec:7d:92:48:15:7c:56:a6:61:ca:bd:20:45:
ba:57:a5:86:e1:65:0c:90:14:94:8a:c8:a6:d8:8b:fe:d9:d6:
cf:e4:06:f3:87:a2:b1:fb:be:07:76:f2:75:17:c8:28:fe:be:
85:90:19:ec:31:3b:99:66:2e:0d:30:3e:58:6d:bb:b3:07:f6:
8c:1e:8a:24:54:21:15:1e:a7:a7:1f:8d:f2:cf:cf:38:40:37:
7c:bb:cc:06:a6:4e:54:c9:e6:de:5c:66:aa:0c:ab:eb:15:a5:
45:8f:5f:c3:00:6b:ed:b6:0b:a6:0d:bb:61:3d:13:94:48:7a:
9a:06:0c:5e:4a:5b:6a:c6:66:31:44:7c:b7:f0:e1:82:3e:c9:
26:da:70:8e:12:6f:d5:c7:cb:a9:d7:99:ce:f4:05:36:6d:5d:
03:81:a9:f5:48:c3:75:55:ec:1c:88:a4:41:d0:3a:9f:ef:41:
56:06:d8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:17:38 2026 by rpki-client