Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
File: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft (raw, json)
Hash identifier: 4IYOvq/RytwFQ5OGcD0ry+bTxHxPywatUGftO/+A6wI=
Subject key identifier: 1E:6E:3A:90:86:E1:33:8D:CE:7F:BA:75:FE:54:AD:18:8E:F8:36:B7
Authority key identifier: EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
Certificate issuer: /CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Certificate serial: 01A0CB597FE008B2BCB08BA2B93F8E93F970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
Manifest number: 10D5
Signing time: Tue 22 Sep 2026 23:00:35 +0000
Manifest this update: Tue 22 Sep 2026 23:00:35 +0000
Manifest next update: Wed 23 Sep 2026 23:00:35 +0000
Files and hashes: 1: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl (hash: tmgYqURMvLX5BJB2DNmmq0GBOo2S2/VxTnLn9WmsnwA=)
2: 9oOBFeGSrwdju604vrWfdCoTauM.roa (hash: pd4ZMcD0zoZVQx34tpixPFz8KnUMJc8/XoRGbitBdPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:7f:e0:08:b2:bc:b0:8b:a2:b9:3f:8e:93:f9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Validity
Not Before: Sep 22 23:00:35 2026 GMT
Not After : Sep 23 23:00:35 2026 GMT
Subject: CN=1e6e3a9086e1338dce7fba75fe54ad188ef836b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:66:0d:c4:45:ee:44:bb:c2:2a:d8:a9:b8:0e:
1c:fe:d7:82:ad:cb:c3:aa:62:67:16:ab:cd:c1:09:
0c:ff:1b:af:80:7c:4d:62:0a:6c:8b:80:ce:8a:17:
d4:b9:bb:eb:58:21:16:9b:77:9e:02:ae:f5:dc:6c:
38:57:fb:86:df:a4:28:e4:85:eb:22:1f:d1:76:fc:
ab:1c:d3:69:60:fe:48:1a:5d:3a:f6:55:5b:15:c7:
08:dd:ff:69:32:bd:d6:dc:2c:fc:5d:06:f3:5a:4d:
dd:fe:16:3c:d2:fb:f7:40:4c:78:ca:73:e8:ff:d9:
fe:a4:ba:78:70:8d:da:b6:55:50:e1:9a:19:fa:2f:
7b:a1:d2:a4:d2:ca:03:08:5f:c3:4d:2a:12:fe:fb:
ef:dd:0e:bc:e4:73:ad:ca:12:b7:d6:01:d8:a6:3b:
ef:9e:47:2e:15:36:f2:05:e9:7f:0a:a4:3a:d3:8c:
4a:8b:23:55:82:a8:f5:e0:e7:19:8b:a3:65:69:14:
74:12:fb:e2:4e:b9:61:f6:c5:fa:25:b8:ee:3b:a7:
4a:6e:ed:d8:25:3c:52:13:67:4f:46:c1:8e:f0:16:
0f:2a:58:90:69:45:0b:4a:54:92:9a:da:6f:35:d1:
31:e3:8b:56:96:2c:89:23:ce:68:c6:57:f2:47:c9:
b6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6E:3A:90:86:E1:33:8D:CE:7F:BA:75:FE:54:AD:18:8E:F8:36:B7
X509v3 Authority Key Identifier:
keyid:EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b0:15:88:d7:c5:49:ee:bb:3c:5f:a4:7a:3f:c2:b9:79:94:
73:5a:ef:3f:03:1f:72:42:09:98:2e:5a:74:11:3c:e2:84:eb:
56:d9:dc:b3:b6:8e:94:53:fa:38:7f:e5:12:79:58:2a:98:e8:
02:ba:2f:19:99:fa:e5:55:88:c0:db:67:b0:09:ac:82:31:4a:
8a:f2:d6:86:19:c5:27:ac:cc:51:68:ee:94:ef:2d:6c:0b:9d:
28:39:1d:d3:ef:a2:64:1c:f5:59:eb:b6:97:f8:e9:40:b1:41:
67:11:7f:aa:20:5e:43:dc:d4:ec:90:77:49:a0:0a:fb:c9:e9:
e0:01:05:53:52:14:78:e4:d8:93:c5:5f:3b:ca:45:f1:97:3a:
a2:75:1d:11:a3:45:78:9a:37:05:d4:33:03:e2:c2:83:8d:1f:
96:47:3a:a3:14:03:38:07:99:d2:9f:61:1a:72:3d:c2:c6:50:
8a:ed:c2:94:91:a4:d7:d4:6a:ec:4c:5e:cf:5c:f9:0f:f1:4e:
a8:3b:2c:5d:17:57:13:dc:a3:e6:82:53:cf:26:90:0d:a4:39:
fc:2e:a5:23:64:2b:98:b8:11:95:db:51:9e:42:da:d0:ff:2e:
0c:b8:d2:60:85:d8:40:07:f3:d3:33:b4:d9:56:f3:c4:10:74:
13:e9:96:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:45:30 2026 by rpki-client