Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File: 7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier: xWbEAbOw82byI+x+RUW5ApBbM+pHIf2d2txMx+sZRDw=
Subject key identifier: 54:D5:6D:54:AD:AE:1D:E6:EB:31:C9:21:E4:E9:41:5F:12:C4:A2:5E
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial: 01A0D983F0546D40E95CFF685097321EE345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number: 14FC
Signing time: Fri 25 Sep 2026 17:01:37 +0000
Manifest this update: Fri 25 Sep 2026 17:01:37 +0000
Manifest next update: Sat 26 Sep 2026 17:01:37 +0000
Files and hashes: 1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: qAaCcjjTNgAY+FF8PdkSH8GjKwBla1DhsgiiRAMMIRc=)
2: _Uw3PwW3zuhX_9qdNVHM9xLSh_Y.roa (hash: pJtmufqjt3E+bTnB46Z/8QQdZ6WxLHIqysmmyqJfzzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:f0:54:6d:40:e9:5c:ff:68:50:97:32:1e:e3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Validity
Not Before: Sep 25 17:01:37 2026 GMT
Not After : Sep 26 17:01:37 2026 GMT
Subject: CN=54d56d54adae1de6eb31c921e4e9415f12c4a25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:19:54:0b:ef:c9:11:7a:29:57:1b:7d:d9:0b:
54:a8:6c:32:c8:2e:00:ab:28:8f:e7:11:22:1c:8b:
0c:20:af:61:00:6e:ad:8c:5b:cf:26:51:15:a0:29:
72:19:19:63:ee:ac:53:12:e7:d6:72:16:b7:9a:b1:
c7:2e:d6:94:4f:b5:e5:68:8f:4c:34:66:f9:6b:e7:
75:ad:0b:0f:79:a3:fa:6a:24:f6:1d:b8:93:ca:d0:
93:28:24:d2:32:2c:4e:08:2f:78:8f:71:1c:d4:a4:
00:b6:49:3e:ef:d5:47:db:1d:ae:4f:29:dc:66:db:
59:da:04:3f:96:76:23:01:80:19:29:e1:25:24:a9:
30:4a:11:d1:5b:25:d2:35:72:d8:65:77:f6:8d:be:
01:42:63:b8:db:9e:e0:31:ea:6e:06:38:e8:a2:e7:
6c:9c:bf:c3:46:bd:ce:0f:17:c6:cf:f8:70:2f:ed:
a7:a0:73:9c:40:f4:ba:ba:4c:58:56:a6:af:7a:48:
54:81:65:64:cc:4a:5b:ef:08:ca:91:32:f5:bd:33:
7a:60:43:03:c4:8f:2f:09:40:20:2b:39:90:22:a3:
0f:2b:18:e2:a1:4c:95:c2:8d:87:c0:31:5b:c6:7c:
9d:f7:03:da:f0:7f:18:d4:7f:eb:f3:62:31:61:ac:
87:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D5:6D:54:AD:AE:1D:E6:EB:31:C9:21:E4:E9:41:5F:12:C4:A2:5E
X509v3 Authority Key Identifier:
keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:21:24:51:23:a7:fd:f5:fb:ea:41:5e:fb:03:5d:fb:1a:5b:
de:4a:a6:23:fe:ca:3c:e6:10:d2:59:87:2f:74:a9:b2:fe:53:
56:8a:3d:35:aa:c3:0f:89:6c:30:87:f7:d2:d5:86:d7:c3:63:
6c:13:ab:af:b6:a0:5c:db:46:21:13:5b:9e:d0:df:72:99:82:
3f:eb:9e:8e:0e:97:8a:e2:84:83:c3:df:3c:3a:9c:49:cc:4a:
18:cb:60:92:77:b3:97:2a:33:c2:ce:10:16:b8:0c:94:04:01:
33:bd:32:f7:8e:9e:0b:20:1f:ee:ba:99:77:2c:a8:e8:60:87:
3e:cc:2f:37:d2:8b:0c:9f:41:96:1a:fa:de:fe:b3:23:e8:09:
fe:6a:f6:12:c4:1c:0d:33:16:30:52:85:ef:ba:ea:b8:8a:24:
34:51:e8:aa:e1:23:51:34:1f:2a:2b:88:f8:5a:b7:87:1c:7d:
ff:61:d3:4e:c0:53:c1:be:68:79:be:ed:e1:7c:6f:0f:37:39:
57:21:58:e2:b3:f0:15:50:c6:b9:77:5e:29:02:97:7b:4f:be:
2d:96:3d:1a:fb:6d:17:da:d9:44:a4:cd:e8:ae:8a:68:ab:f9:
c2:97:36:33:87:b4:ab:2d:57:83:ea:ae:6b:79:2b:61:23:ad:
51:1a:ad:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:01:36 2026 by rpki-client