Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
File: 7VKTzUpieoRq7WDKf7XVqQGarlE.mft (raw, json)
Hash identifier: l2wtyhmz2PSZVfxZ8xOt2PXcqMBDb0wIWTNBPA/UZnI=
Subject key identifier: CB:92:56:E3:E2:E0:89:A2:DA:AB:AC:78:3C:AF:1C:21:13:F9:C6:45
Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
Certificate issuer: /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Certificate serial: 01A102B68A6E215964BFD57191E96D32215C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
Manifest number: 1A88
Signing time: Sat 03 Oct 2026 17:01:19 +0000
Manifest this update: Sat 03 Oct 2026 17:01:19 +0000
Manifest next update: Sun 04 Oct 2026 17:01:19 +0000
Files and hashes: 1: 5M_dzDXzTB3Y0brCjbUvwSZRed8.roa (hash: IY7K+wfx2bW1m/Ix+hlJ62XrT+AVkyx4H7HyP9JrVMM=)
2: 7VKTzUpieoRq7WDKf7XVqQGarlE.crl (hash: qcoRA0Wx7TJTS/J4ncwvNZlj9ALowrz8jFiFqRkJffY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:b6:8a:6e:21:59:64:bf:d5:71:91:e9:6d:32:21:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Validity
Not Before: Oct 3 17:01:19 2026 GMT
Not After : Oct 4 17:01:19 2026 GMT
Subject: CN=cb9256e3e2e089a2daabac783caf1c2113f9c645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ae:3e:4c:bf:93:be:5e:99:2b:b8:d3:c7:fe:
f5:8d:69:3a:76:fc:d6:21:65:76:7c:dc:d1:41:c1:
49:65:91:04:29:c2:dd:5f:49:57:a7:a4:cd:6f:8d:
48:05:5f:16:51:68:ae:b4:59:e1:ec:e8:1b:ac:5e:
eb:63:ce:79:e0:95:e1:ea:08:d6:70:a2:e6:be:b7:
49:2b:ab:bf:1f:4b:65:be:6d:8c:98:fa:69:7b:b7:
7d:26:2f:1d:07:2e:1a:66:66:0c:7f:dd:4c:01:d2:
26:8d:e7:dc:d4:1e:fd:ae:c2:14:fc:3f:b4:f9:23:
29:dc:b3:b4:df:b2:57:d2:ea:36:50:3f:b6:45:73:
f5:b7:5a:e7:50:7b:43:87:ec:09:f1:0f:0c:c2:8a:
14:7d:08:24:6f:b3:28:57:c4:01:d2:a9:89:b1:90:
c7:f2:3f:43:b8:25:72:88:2e:0d:65:e1:51:c6:0e:
7a:17:e2:63:56:b7:55:f5:04:57:50:bf:ef:b1:b0:
0a:b0:ae:fb:1a:15:2e:54:5d:02:eb:e2:4a:f8:3b:
56:ad:0c:1c:d6:a9:47:ba:a1:c2:9f:65:aa:18:5a:
77:99:16:19:23:7e:c9:ec:da:86:f2:c0:ca:ca:c8:
da:b7:a0:b0:12:f0:8f:1c:80:b6:e9:c6:da:d0:fc:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:92:56:E3:E2:E0:89:A2:DA:AB:AC:78:3C:AF:1C:21:13:F9:C6:45
X509v3 Authority Key Identifier:
keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b3:a9:68:41:1e:d4:4a:bb:ce:cd:b4:fe:fb:83:35:ba:ed:
4f:a8:b2:c6:10:77:50:52:8d:58:a8:f9:cd:61:96:9c:78:05:
9f:fe:eb:27:d6:92:ed:61:f2:ba:0a:be:12:72:09:c3:ca:b1:
15:30:1b:13:c9:e8:d1:95:58:13:e1:0b:5d:cc:d6:d3:fd:30:
05:43:fd:ef:49:7a:2e:bf:23:24:bc:aa:c9:98:15:c2:57:b7:
10:fe:da:74:92:29:a4:53:75:65:80:d9:c1:95:fe:71:0b:a5:
f1:95:0b:2d:a7:a6:17:cc:03:e9:ff:14:36:06:c9:e7:01:11:
dc:81:88:e3:25:84:cb:89:bc:0c:43:00:f0:0c:d8:0d:97:03:
1a:f5:59:ba:3b:e1:aa:d0:a2:91:31:02:ea:72:e7:3a:d8:08:
bc:33:83:5b:ca:98:d3:70:c0:fd:d5:dd:aa:e4:71:2c:d3:5f:
84:43:4d:c5:48:ca:e2:27:29:4d:fa:06:48:7a:95:26:ca:0b:
05:7e:5f:ea:0d:3b:da:1b:a0:0b:2b:f2:ba:10:55:3c:9c:03:
54:a3:26:93:38:9c:ea:a2:85:2d:3c:57:2f:d9:90:c6:bd:3b:
3a:5c:ad:63:35:51:e3:07:91:94:19:90:17:fa:78:be:23:8d:
db:99:62:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:36:40 2026 by rpki-client