Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.mft
File: 7JsJMRGPCL9KNLPgUv2PilweyrA.mft (raw, json)
Hash identifier: bCPyR1QrLMMp1PPZNdHYVBTkDk17hdDBeCL5V3vS7vk=
Subject key identifier: 95:32:3E:B0:C7:87:90:0A:BF:3C:FE:1A:AF:F5:77:03:4C:49:CC:2C
Authority key identifier: EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
Certificate issuer: /CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Certificate serial: 01A1CA449EB1870EA4021FDFFDE1D9870524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.mft
Manifest number: 1B1E
Signing time: Wed 11 Nov 2026 11:00:56 +0000
Manifest this update: Wed 11 Nov 2026 11:00:56 +0000
Manifest next update: Thu 12 Nov 2026 11:00:56 +0000
Files and hashes: 1: 1-u_ASCmy-wBbVCsmPwNd_unSr-o.roa (hash: udykiCdiD6b52lyV5MbUE3j2dFhwVQCOpp4kLMvK92o=)
2: 3P39wkexpKGMC_-n6F5vI94yQgg.roa (hash: HMLIMLk2ne2KsKtYKkHnU7RkPYKADLOQHIbB/ogiuuk=)
3: 734KdyFLQmtOjygZ2v1Xj8Ds900.roa (hash: 8domU21rb/aTzdCRM7nKzOSfKgE0Y8RBcHzmO0+BwA4=)
4: 7JsJMRGPCL9KNLPgUv2PilweyrA.crl (hash: coGdm79e9G87TTNhkMCrY3tWbDycxfF9uzbVgyUkhmM=)
5: 8c8Bez583gSraB_UqN_7qP66Nb0.roa (hash: b7dkdp0h2UCgVW6dTmard9yseZSUrDakBX19toPQms0=)
6: BYuHh8N01pEelmc4Xl4078g4ptg.roa (hash: /YIaDwVtFe0FQ/QYrc+fmbWUpyLS1QHJGjWBcKhwoIM=)
7: akO8JmwWxuTer2l42am_n-fQJlg.roa (hash: eSyNn/IZZ0ccY9oh5aaOroJXRYN7yy6H0+T/xO1d5yI=)
8: f7Z-yQgbhY-mbuerKun7yr_WUAA.roa (hash: atWuTLUfIEIsv5drDtWMJUqZuSDTqKqQ4Je+XdvicgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:44:9e:b1:87:0e:a4:02:1f:df:fd:e1:d9:87:05:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Validity
Not Before: Nov 11 11:00:56 2026 GMT
Not After : Nov 12 11:00:56 2026 GMT
Subject: CN=95323eb0c787900abf3cfe1aaff577034c49cc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:d8:79:13:20:00:18:0f:71:9a:16:5f:db:
4b:6c:29:d9:07:92:1d:83:a9:94:24:d3:e8:aa:ec:
8d:53:14:8d:47:76:87:a9:5c:59:91:19:67:18:55:
70:d9:5c:d8:b8:78:82:b6:7f:6f:d9:05:e5:6e:70:
52:6b:0b:7e:8f:b1:84:0c:77:12:7b:aa:66:01:94:
91:51:86:da:7a:a1:9b:8b:ec:f3:ed:d8:af:38:9d:
37:5a:d6:3b:9e:d3:53:f7:5c:28:59:77:6d:39:18:
b3:ea:96:dd:2a:6a:58:bb:03:d6:15:3f:35:52:ab:
21:e8:fe:d1:d9:d8:f9:b7:c5:a7:4f:6a:c8:d4:4b:
62:3f:d6:d0:55:37:36:f1:ee:4f:ee:ed:ef:bd:d3:
0f:c2:f4:92:69:eb:5a:2e:9a:69:53:08:0b:1c:aa:
e1:47:14:fe:56:e3:5d:c0:aa:4f:16:9c:bc:57:7d:
90:84:06:c0:19:b3:4b:db:39:6a:c4:34:25:fe:0c:
0a:53:a7:c2:ca:2d:48:1b:bc:7e:7c:c1:d4:ee:dd:
39:78:6c:1c:54:62:7a:70:a5:73:c0:77:00:43:ef:
32:b1:b0:1c:43:c1:41:df:9b:1c:62:d7:bb:eb:94:
b6:3a:78:d1:21:bd:e3:35:3f:74:ef:08:59:5f:f6:
6d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:32:3E:B0:C7:87:90:0A:BF:3C:FE:1A:AF:F5:77:03:4C:49:CC:2C
X509v3 Authority Key Identifier:
keyid:EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:16:f1:03:94:c1:1c:76:d4:08:64:3a:e1:dd:47:91:0e:9d:
00:74:d4:cb:3a:eb:bc:81:6b:56:eb:4b:c1:83:08:a7:1a:6b:
86:3a:af:4c:b5:94:e9:74:99:93:fb:fd:a3:f3:29:88:88:cb:
1e:3c:fa:66:8d:51:52:42:48:e4:14:41:b1:73:9c:69:57:34:
bc:bb:6c:e8:da:03:23:28:f1:da:d5:90:77:35:72:49:c1:1a:
00:9f:52:e0:67:cc:21:ef:86:3a:43:12:80:e9:32:a8:cf:1d:
71:b1:6f:66:9a:a0:5a:04:08:1b:e1:dc:a1:2e:79:4a:73:55:
7b:20:2a:b8:88:82:41:2f:cd:79:3d:4f:98:e4:d4:55:8a:d3:
ca:08:97:86:62:82:5e:f2:77:f9:1e:6e:a0:6f:95:7b:64:f1:
d1:b8:fe:18:b5:22:cd:44:b6:3c:ce:97:95:f8:14:d8:83:c8:
70:04:6e:77:64:88:4e:e6:83:c7:fe:cd:e4:05:2d:46:bc:d2:
c0:e0:dc:45:05:c6:95:07:84:5d:e5:dc:29:4f:fc:a5:93:cc:
dc:7d:18:9e:97:b9:c4:41:29:45:07:5e:75:3a:e7:84:32:7d:
fa:f0:d7:54:a0:f3:da:2b:39:5f:a6:d6:c6:e7:1e:f3:02:b3:
c1:25:ce:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 18:33:00 2026 by rpki-client