
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft
File: 7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft (raw, json)
Hash identifier: t0A0d7zdZBlhhmlQycXGrrS5ftIPicm41ICN2QfK1qY=
Subject key identifier: 3D:6C:72:A7:15:74:96:8C:C9:D9:92:36:C9:34:2B:5E:E8:D1:D9:B8
Authority key identifier: EE:8C:A3:B0:DC:4F:0D:97:5A:E0:FA:83:27:49:6F:4B:0C:E4:56:DE
Certificate issuer: /CN=ee8ca3b0dc4f0d975ae0fa8327496f4b0ce456de
Certificate serial: 01A0DCF2D2E6BA82C154142957E6BEB9A12D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oyjsNxPDZda4PqDJ0lvSwzkVt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft
Manifest number: 01E3
Signing time: Sat 26 Sep 2026 09:01:36 +0000
Manifest this update: Sat 26 Sep 2026 09:01:36 +0000
Manifest next update: Sun 27 Sep 2026 09:01:36 +0000
Files and hashes: 1: 2MXfxYxjZYsleljiFeJEZak5vUA.asa (hash: gW26kSGjEqEoaOP+tOvwLTFKjcYS1BBUZBxeBvqeSQo=)
2: 7oyjsNxPDZda4PqDJ0lvSwzkVt4.crl (hash: eFb3mCBDvk5N6I+1RQCvJKuYFCJ/gImsfo1ZkKsPC1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oyjsNxPDZda4PqDJ0lvSwzkVt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:d2:e6:ba:82:c1:54:14:29:57:e6:be:b9:a1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8ca3b0dc4f0d975ae0fa8327496f4b0ce456de
Validity
Not Before: Sep 26 09:01:36 2026 GMT
Not After : Sep 27 09:01:36 2026 GMT
Subject: CN=3d6c72a71574968cc9d99236c9342b5ee8d1d9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:b9:a2:78:65:b7:63:88:b8:d5:5c:17:a2:
26:35:a5:30:c7:2e:e6:7c:57:26:b5:b3:dd:75:c1:
0b:90:aa:d1:e0:53:18:62:18:0c:1f:dd:4f:db:1d:
58:b8:41:04:b3:ee:8b:9d:01:f0:6f:03:66:17:43:
da:17:0b:10:9c:cf:4f:b5:c2:a7:f1:ce:e7:28:2f:
4e:b1:c8:a5:14:06:03:18:5d:a3:1a:05:22:99:65:
a8:d7:f8:ed:34:7b:af:dd:09:21:ff:aa:fa:f8:5c:
45:78:56:d0:15:80:ad:00:72:bc:f7:53:8f:fc:1d:
98:f1:92:5b:d1:85:b2:3a:22:3a:bf:d6:df:64:88:
49:31:4f:15:4e:44:9f:25:8e:12:aa:ab:d6:9c:d4:
bb:8f:af:de:14:d8:3d:90:b9:14:49:5f:f4:0b:a2:
d7:cf:37:a4:b6:c1:36:15:fc:e8:d8:e5:96:46:87:
15:94:2f:4c:64:64:3e:68:57:f2:b2:4b:71:1e:f4:
72:5b:f7:69:0e:ef:eb:aa:37:8c:e5:6b:e9:e3:93:
71:b8:48:4c:29:87:7a:9a:9f:0b:1d:de:a7:ab:0e:
07:c8:f9:ac:73:1f:58:1f:3f:ce:8f:cc:3a:ba:9a:
ea:ca:0b:46:02:7e:df:29:14:57:a1:66:a8:52:ff:
f1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6C:72:A7:15:74:96:8C:C9:D9:92:36:C9:34:2B:5E:E8:D1:D9:B8
X509v3 Authority Key Identifier:
keyid:EE:8C:A3:B0:DC:4F:0D:97:5A:E0:FA:83:27:49:6F:4B:0C:E4:56:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oyjsNxPDZda4PqDJ0lvSwzkVt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:29:bc:45:7e:fe:ce:a8:d0:5d:5b:da:99:05:99:f5:df:f9:
e1:3b:d3:40:55:ae:da:33:a1:1d:46:8c:19:63:14:05:66:b3:
28:eb:0b:9a:0a:af:8f:a4:47:3e:31:7b:fd:1f:34:75:8f:b1:
93:17:f5:c0:31:13:f4:2c:28:89:a4:fe:dc:9f:2f:cd:00:bf:
54:a5:a7:ac:be:b4:f1:27:c8:d6:b4:bc:ae:41:5f:aa:b7:13:
6d:82:cd:2b:16:5a:26:45:c5:eb:f1:e8:79:a6:d6:0c:8f:0d:
48:a9:c6:53:e9:e9:00:e4:d7:d1:9d:73:37:5f:e8:45:43:84:
60:75:38:dd:2e:7f:90:2d:73:c5:15:8b:fb:64:85:8d:f8:85:
c1:67:21:1b:1a:49:5f:8e:cc:db:f1:c1:e8:3c:51:fe:c6:f3:
bd:95:77:a6:c6:62:e1:12:5d:c6:8d:bf:1d:db:39:89:d0:b0:
c7:6d:8a:54:03:7f:6a:c1:03:09:a7:d0:20:ac:4a:2b:67:a5:
25:a1:96:bc:d8:3c:1a:22:c9:df:d7:90:28:09:e5:72:ef:2f:
56:e7:0f:01:19:fd:ab:ed:19:ef:7a:0a:a4:4c:00:71:60:55:
d0:11:df:27:6b:02:9f:0e:32:96:67:bd:ce:dd:cb:da:3a:58:
2c:53:41:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:32:56 2026 by rpki-client