Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
File: 7vvoNpp7vAOob75jm376oCtxcoc.mft (raw, json)
Hash identifier: O2xSNgDTwBJsxNoon1trToFVOHCTZCSB7qKknKgNeZM=
Subject key identifier: CA:0F:84:53:AB:56:81:55:59:0E:AF:24:58:67:38:97:B5:43:9E:3A
Authority key identifier: EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87
Certificate issuer: /CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
Certificate serial: 01A0CCD9C4A0E9A3820749D0038516DBC33A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
Manifest number: 1152
Signing time: Wed 23 Sep 2026 06:00:18 +0000
Manifest this update: Wed 23 Sep 2026 06:00:18 +0000
Manifest next update: Thu 24 Sep 2026 06:00:18 +0000
Files and hashes: 1: 7vvoNpp7vAOob75jm376oCtxcoc.crl (hash: KBHIjcYzGscEwzfAohcQibX51qCUsxYrgnhtHSz9pjM=)
2: EiatrI83uO9tftsPdHu8fpbPds0.roa (hash: NS244B8Thb+nWglSt1HPIJiaD9wGsscqn8SIEyk9kQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:d9:c4:a0:e9:a3:82:07:49:d0:03:85:16:db:c3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
Validity
Not Before: Sep 23 06:00:18 2026 GMT
Not After : Sep 24 06:00:18 2026 GMT
Subject: CN=ca0f8453ab568155590eaf2458673897b5439e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:0d:82:9d:7c:f8:00:c9:76:20:ae:e5:6c:
52:73:18:c7:b0:9c:3d:82:29:77:bb:44:12:b8:3b:
ae:0b:48:5a:8f:1d:86:13:4d:7d:14:70:1b:66:6d:
bc:a7:0e:93:3c:18:c2:82:f0:da:aa:87:4b:e7:e6:
72:ec:d4:87:07:ff:dc:c9:b0:f9:da:f0:8e:41:3c:
5f:99:a6:da:52:0d:77:fc:5d:af:75:1f:79:df:3c:
29:e1:ef:f0:0c:57:87:c3:e2:c1:66:f8:b7:e7:17:
15:8d:0b:5b:4f:75:1f:26:61:73:85:be:06:ff:50:
c4:02:2d:8d:82:5e:d4:0d:84:a3:45:ca:85:3f:e4:
8b:b6:c0:ee:0b:3e:c7:fe:24:cf:cc:a4:ef:b1:1c:
b5:c7:cb:0f:f1:5e:1d:c9:ef:3d:e5:9a:5e:45:17:
70:48:f0:b0:e0:24:26:cb:f6:dc:dd:cd:f5:09:ba:
49:eb:86:53:25:a8:da:0a:ae:80:5b:3f:b8:ad:50:
9c:c4:02:ec:09:8a:6d:99:e3:b3:e0:d5:71:bb:f5:
53:bc:cc:a1:06:05:7f:36:ab:51:54:88:e5:34:2e:
65:cc:e1:06:e0:65:0d:a3:2b:a7:42:59:67:d2:7c:
8e:42:c7:6c:9b:9c:91:ea:62:3c:51:0a:e7:95:db:
13:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0F:84:53:AB:56:81:55:59:0E:AF:24:58:67:38:97:B5:43:9E:3A
X509v3 Authority Key Identifier:
keyid:EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a8:16:56:79:da:c3:fd:37:64:5f:76:9e:63:ae:72:76:11:
9b:75:b5:75:91:b0:30:0f:3b:69:48:b6:18:20:d2:60:ac:39:
03:8d:63:d4:fb:54:ef:71:a7:a2:12:c4:46:98:17:7c:1b:99:
5b:88:10:be:cd:51:e5:e5:fc:26:ca:c4:26:c9:c9:56:5a:6d:
ba:92:a5:b3:0a:91:60:92:6f:03:48:13:77:00:da:bb:b3:87:
bb:b3:fd:5d:4e:7b:ae:54:90:54:88:de:68:46:00:bf:2a:c8:
5c:6a:e0:ca:32:2b:ca:0d:1f:03:49:21:24:65:fd:ea:3b:aa:
50:15:48:cb:83:e1:69:80:e1:b9:76:6b:20:ae:c3:09:5a:dc:
23:a9:80:64:2f:71:0d:3c:64:65:ca:06:50:b8:8b:a4:36:89:
38:48:39:64:7d:c0:2d:2c:a0:1e:0c:0e:df:da:5d:42:5f:8c:
9c:c7:4b:9a:c8:7c:0f:73:34:c7:de:bd:79:3d:88:2f:ca:6f:
b4:48:bc:53:45:6c:ea:9b:0b:4e:f5:5f:e4:bd:6f:e4:6b:bb:
50:f9:9c:25:80:56:d9:79:31:16:25:b7:35:f7:a9:2b:52:8c:
44:05:fe:40:8a:17:de:8d:d5:b4:1d:28:01:b6:ea:cf:e0:38:
62:78:9c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:54:39 2026 by rpki-client