
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
File: 7onRezmnaEppVLl7iw-6x9SJVMo.mft (raw, json)
Hash identifier: /Yc+LMjC68iZDQZe6q3NI29hp8K1gsLxLMZNIy70/Bo=
Subject key identifier: 0F:9A:1B:01:15:1B:CF:21:0D:3A:3D:2D:E4:AC:A7:15:41:8D:46:53
Authority key identifier: EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
Certificate issuer: /CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Certificate serial: 01A1DD948800D33A8D6AAE86FB60FC95B398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 05:01:01 +0000
Manifest this update: Sun 15 Nov 2026 05:01:01 +0000
Manifest next update: Mon 16 Nov 2026 05:01:01 +0000
Files and hashes: 1: 266U8v32AIwFxpg_FZxsUC2Aiq0.roa (hash: pX+SOE6s9KPyp5jmWUGDvGzaItPjX+1uMV/qoRqubBk=)
2: 7onRezmnaEppVLl7iw-6x9SJVMo.crl (hash: gISl+h2/yoWzo0DQcftQuj2Ciy/uAORG4OHJpM164sA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:88:00:d3:3a:8d:6a:ae:86:fb:60:fc:95:b3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Validity
Not Before: Nov 15 05:01:01 2026 GMT
Not After : Nov 16 05:01:01 2026 GMT
Subject: CN=0f9a1b01151bcf210d3a3d2de4aca715418d4653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:5c:b1:8d:05:3c:be:15:9b:b9:7a:28:5d:
fc:33:e8:03:88:c1:37:85:d6:1a:96:0b:f3:d9:28:
06:b8:66:8d:7d:44:67:ae:25:58:dc:bd:5c:e4:76:
3c:0e:f4:98:a3:45:08:be:a0:11:64:a8:5b:73:92:
02:db:ec:89:35:37:ec:ad:c9:47:14:eb:3f:4d:14:
9a:74:6e:3d:ce:84:f4:fc:0b:e3:31:09:a9:22:73:
9a:59:1c:c9:5a:42:1a:75:b6:93:66:b8:9b:93:a3:
a3:65:96:14:cf:fd:74:d9:1b:a2:60:80:ec:29:bb:
8a:90:46:19:fc:4a:5d:60:40:68:34:f1:5f:3c:e3:
65:a2:62:d5:8d:71:23:07:8f:52:91:56:d3:9e:31:
c5:00:61:de:e7:b0:60:e9:63:66:26:5b:54:42:fc:
f0:67:66:6d:db:ce:e1:55:cc:67:7f:00:78:a4:ca:
bf:02:7b:88:67:83:1b:e2:0d:b9:95:ae:51:df:1a:
2e:b0:2e:47:81:22:f6:0f:58:89:c0:cb:e1:55:ce:
9b:43:10:a1:88:03:78:fb:64:7a:33:7d:71:82:b4:
dd:f3:30:f5:74:2b:a8:4a:5d:cf:0c:4f:ea:13:b4:
ba:ec:f2:e0:9e:00:00:05:8f:7e:e6:47:6b:e9:8f:
08:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9A:1B:01:15:1B:CF:21:0D:3A:3D:2D:E4:AC:A7:15:41:8D:46:53
X509v3 Authority Key Identifier:
keyid:EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:25:32:74:17:e7:2d:09:a6:da:a3:07:6e:f8:21:25:ec:99:
c9:a8:01:f2:2a:51:e3:03:4d:5d:16:74:e6:99:66:6a:30:78:
f4:18:89:31:fe:f6:47:ec:cb:7a:49:72:4c:85:b4:1f:ef:fc:
f6:a6:18:c1:5f:65:58:19:87:3a:c9:0d:ae:60:f6:4c:b1:ea:
b4:4e:d6:86:2f:49:a3:63:a3:28:2c:a1:5b:81:19:27:17:0f:
a6:ca:af:e0:84:ed:40:bd:08:a9:47:79:86:01:4d:99:47:e4:
fc:fa:d7:b3:93:e7:7a:f0:d5:92:8d:63:24:0a:9c:4e:22:a4:
bb:cc:8e:31:c4:26:81:6a:21:5e:36:bf:6e:3d:60:08:e9:bd:
1e:46:bd:6f:75:17:d7:49:d0:bc:55:ff:56:8a:dd:b5:3f:9d:
aa:d4:8b:c9:cc:5b:c6:95:6c:96:fa:68:0b:7a:9b:c6:57:d6:
8f:41:57:6e:20:e3:7f:14:80:3d:ce:00:f8:86:15:a1:59:bd:
03:ea:62:d7:d9:72:04:f0:de:ed:3b:9c:6c:e4:0b:ca:f6:90:
c1:6a:39:5d:f2:b3:5a:b3:5d:68:42:c2:34:d3:1f:e2:38:81:
7d:53:97:7e:95:d7:df:43:17:40:67:c2:24:b2:0b:09:9e:c0:
19:0a:a8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:31:12 2026 by rpki-client