Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
File: 7nRQsjAXLj6K01KIEQ74q9JP-S0.mft (raw, json)
Hash identifier: bPEPsA+Kd8DSH/Zzcz3zUX3lrOziyzw1ZSR2xo0Ev+o=
Subject key identifier: 22:33:14:D0:65:BB:30:78:D4:E2:31:C0:AC:0D:ED:BF:65:78:00:EE
Authority key identifier: EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
Certificate issuer: /CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Certificate serial: 01A0DA5F5CB9DBFE9E01E952C3833F8FF2A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
Manifest number: 0D3D
Signing time: Fri 25 Sep 2026 21:01:17 +0000
Manifest this update: Fri 25 Sep 2026 21:01:17 +0000
Manifest next update: Sat 26 Sep 2026 21:01:17 +0000
Files and hashes: 1: 7nRQsjAXLj6K01KIEQ74q9JP-S0.crl (hash: LgUresPkoybC6sJGYoJyWRERp38Ru1ZvE0Q9rHEp+1s=)
2: smfmsIUF9u9g8NgIU5ofNUq_OII.roa (hash: 4JsRlal2vIPYDa8QmogXl60LTzkl5mPgzweZiKuoNtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:5c:b9:db:fe:9e:01:e9:52:c3:83:3f:8f:f2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Validity
Not Before: Sep 25 21:01:17 2026 GMT
Not After : Sep 26 21:01:17 2026 GMT
Subject: CN=223314d065bb3078d4e231c0ac0dedbf657800ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f6:b1:94:e1:23:1d:1d:6a:87:6e:a2:78:0f:
fd:68:15:22:ac:4f:8f:15:32:4e:b2:71:46:92:22:
dc:aa:a6:ad:61:01:94:69:31:e8:0d:5a:4b:5e:0b:
33:7e:5f:4c:a2:e7:68:25:7c:2a:06:3a:93:e1:74:
35:0e:1c:04:f4:99:d3:6a:7a:0d:fe:8d:aa:0d:1d:
f2:7e:97:f1:25:be:1b:9a:87:93:44:47:a5:e0:ff:
e2:a7:db:9e:f0:be:11:3c:6e:47:89:4f:d1:6f:cf:
58:cd:49:5e:90:77:9f:4f:c3:e2:c5:d8:8d:ce:4c:
df:ad:02:20:8c:13:63:09:39:c4:80:ad:36:62:fa:
4a:08:be:3d:0f:8e:23:c0:d4:9c:23:1a:d0:d4:77:
df:06:58:69:aa:1e:70:3a:4c:09:1e:c0:04:26:bd:
97:72:a8:27:8e:b3:63:43:9b:53:97:3b:88:1f:d8:
a6:7e:36:f7:3d:9b:ad:b0:37:54:0f:71:ea:6c:7f:
1f:b9:81:bc:de:05:7b:7c:39:b1:56:5a:a6:b3:1e:
6c:af:3d:4d:a1:ee:0e:62:0e:51:57:fe:3c:21:a3:
83:ef:cf:25:27:13:5f:33:c0:aa:32:75:36:b7:60:
44:c1:02:ad:1a:98:02:88:4a:9d:b5:09:67:33:55:
71:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:33:14:D0:65:BB:30:78:D4:E2:31:C0:AC:0D:ED:BF:65:78:00:EE
X509v3 Authority Key Identifier:
keyid:EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:bb:7b:ab:8c:2f:f6:aa:46:1b:d4:a9:ac:23:c7:0d:30:42:
fa:57:55:46:ba:47:d7:69:1f:16:c2:a0:f3:7b:d6:5d:6c:9d:
24:70:36:ce:57:05:38:f6:93:91:6a:d9:07:d7:45:64:ec:84:
47:9e:e6:86:9e:46:67:50:87:8f:c0:cc:60:9d:7f:2e:c4:7a:
e8:62:f3:c0:41:61:fb:b7:28:36:05:c3:eb:05:a5:da:03:72:
64:00:e5:e3:0b:db:ca:af:88:3b:9c:dd:68:5a:6c:f0:eb:de:
32:51:93:e6:c2:e0:cd:0e:a2:ec:b9:86:1c:7e:91:67:03:ea:
56:ae:4f:9a:32:0a:80:67:60:47:c3:01:59:20:d3:d5:7e:f2:
1f:97:79:5d:1c:ad:28:5d:1b:e5:64:36:00:c8:f2:52:be:ad:
3e:7c:ef:d7:36:27:a2:f5:0e:61:5b:8b:c0:07:69:71:fd:76:
d7:e5:e5:98:58:ca:dd:57:5b:15:f3:78:56:1e:3a:de:c9:53:
36:d8:7f:ac:0b:51:c9:5b:ea:9c:03:55:e5:4b:0f:c5:2d:5d:
51:71:ca:8a:26:42:e8:67:28:ee:a2:f3:74:4b:b2:42:0a:45:
e3:52:a8:7a:11:8a:ec:1b:76:63:a5:fa:05:a6:15:96:b1:4e:
f1:58:0d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:27:04 2026 by rpki-client