Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
File: 7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft (raw, json)
Hash identifier: AwOy//LlXtu617sdA1E1uO7OUvqCyANTp6Jzhv+eYLA=
Subject key identifier: 03:DC:40:2C:2A:95:D8:3A:A2:48:4B:72:A6:DC:FC:3B:79:08:8E:47
Authority key identifier: EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
Certificate issuer: /CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Certificate serial: 01A0D796EB7D443E4078A88218738FE44E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 08:03:07 +0000
Manifest this update: Fri 25 Sep 2026 08:03:07 +0000
Manifest next update: Sat 26 Sep 2026 08:03:07 +0000
Files and hashes: 1: 7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl (hash: ub92mJ0k3R8QfLPaV74DUnobujZBFxxI1sDJoAybpfc=)
2: aTDLH8OzshREg-8mq0j-dLNvoVA.roa (hash: bWxd+gcoFiIXVBKwuiK0uKoGEVScpNqYAsExPghzTho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:eb:7d:44:3e:40:78:a8:82:18:73:8f:e4:4e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Validity
Not Before: Sep 25 08:03:07 2026 GMT
Not After : Sep 26 08:03:07 2026 GMT
Subject: CN=03dc402c2a95d83aa2484b72a6dcfc3b79088e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c1:20:3a:9a:61:2a:52:a4:85:b0:0e:58:37:
c8:f3:8c:14:17:5c:c9:97:05:6d:7f:92:39:60:ff:
52:0c:2d:c2:bf:60:6b:d2:7c:74:db:85:04:02:0c:
7d:3f:7f:1d:82:ef:61:4c:07:69:74:10:7e:2f:b2:
e9:cf:f4:f8:06:b5:87:a0:64:82:76:15:bc:03:5e:
ca:16:98:19:4e:ee:58:e5:42:b0:33:1c:78:3d:ae:
25:78:7d:03:41:9d:ce:8b:86:8e:fa:51:34:54:80:
01:08:bb:b3:f3:13:42:60:5d:00:30:83:3c:2a:ea:
a5:42:be:db:42:a2:17:c9:8c:04:5b:78:20:92:d3:
39:a7:be:f8:c3:d2:19:75:55:d9:76:a1:eb:2e:10:
f3:08:ae:3b:fd:b0:9f:fb:28:bb:4e:d4:9b:e1:a6:
a8:82:b7:9d:4c:2c:6a:d1:ee:b2:44:cc:bf:7d:51:
99:16:3b:f5:9a:ad:dc:5d:c3:8e:0e:bc:c2:c5:f4:
cc:b4:e7:5e:49:46:58:17:c8:77:84:c5:0a:59:16:
94:87:48:d6:19:9a:fe:ba:b7:8d:2f:90:47:e0:79:
76:a4:7f:3f:02:1d:fa:65:56:52:b5:6d:f6:ea:77:
e2:1a:6b:b7:2a:71:25:ed:b9:ae:d8:83:90:16:f8:
e1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DC:40:2C:2A:95:D8:3A:A2:48:4B:72:A6:DC:FC:3B:79:08:8E:47
X509v3 Authority Key Identifier:
keyid:EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f8:3d:d9:4f:0d:1a:e2:15:7c:84:53:91:a4:1a:64:0f:f8:b3:
6d:9f:18:1a:2c:cc:8f:73:6b:da:a6:00:7b:65:db:6b:2c:c8:
e5:79:72:46:61:78:08:b7:eb:3a:4a:92:20:04:44:29:98:b8:
04:29:bf:24:f9:ae:c1:cb:0c:33:d1:41:ba:26:e8:db:ae:e6:
b8:9a:db:46:dc:d5:2c:30:8d:08:b1:04:9d:66:45:65:32:c7:
b2:4f:cb:85:ed:45:b5:80:58:47:ac:e7:13:e6:72:c5:64:a9:
3c:e2:a0:7f:58:fe:97:d2:7f:5b:eb:6d:71:dc:4b:aa:28:af:
06:98:55:b0:f7:62:0f:43:1b:a3:9b:1c:22:17:65:a8:b0:5a:
46:c9:f9:b6:78:6a:94:5e:34:c7:4f:c6:cc:fa:10:ec:74:ad:
83:c2:eb:ee:2e:b4:34:34:b0:1a:51:cb:a5:13:61:5d:c4:45:
cc:c5:50:7b:3e:39:18:01:a4:e3:63:81:fd:da:65:02:e1:09:
3e:1e:47:7a:d8:39:f7:cd:be:3d:ec:97:dc:cf:f9:8f:f7:de:
33:27:44:39:71:6e:96:b2:30:f4:72:ef:99:e7:16:5a:88:a2:
a6:e2:bb:12:a5:2d:a2:c1:a4:19:89:cf:be:c5:42:82:c0:f1:
c3:87:5b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:19:59 2026 by rpki-client