Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
File: 7GXTFEC_ddJcYG95FcI2ymFEZKI.mft (raw, json)
Hash identifier: 6BQ63sPAG6YtAe6NYKosRXvXm6UE8vBfXkonuyRzLuc=
Subject key identifier: D2:3A:26:BD:CC:CD:BF:4C:A7:4C:3E:F4:43:FE:60:03:47:7C:F3:00
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Certificate issuer: /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial: 01A0CBC753B1B7D9E2BB8C99F97AC2D4F43F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 01:00:32 +0000
Manifest this update: Wed 23 Sep 2026 01:00:32 +0000
Manifest next update: Thu 24 Sep 2026 01:00:32 +0000
Files and hashes: 1: 0_75cziqkrd_avFDUZ9rg7qilxA.roa (hash: pSQt5ocfFcDKXdLoPRHR826k+pr8i3n1PKJhobyxS7Y=)
2: 7GXTFEC_ddJcYG95FcI2ymFEZKI.crl (hash: vE+Rfsb4Gv9lCHAiiSoKwkaaOb+AB/hUZTIqfahxZjQ=)
3: HkkRPwqU3p5aRopaf6XmKJHJOS0.roa (hash: rwteSwkgkB56v9QAYH409kxEVNO2s78pdzGxZ9J+cBI=)
4: OLd3XQLlCLw9LdNyxml8_t8xuEg.roa (hash: CeqIhEYWVzjJk4bpmS5ELgvmNglk0SZVe+OxNRFsLsg=)
5: YFvRu6poI8Ij__cAkw9ZXzn1ELA.roa (hash: TFdZLvuT5jh6qUmHTvzmxP9xeFFqlGN1y9JFOGD2i4E=)
6: YeiOtzdwnFZaRqUumW9LmExU9wM.roa (hash: MQxdsF/k+I/4Kf6o+ulDftRoc2iIVZbE/JYfdEq0Q2c=)
7: fXNtDKuxKl9PcIOvEE_JPpC6Emk.roa (hash: d9XcOkmKMoLj3DydzQnJz/zsoCrdK+ingQkEPwtmOSU=)
8: vKDDTdeKpC38SOoCmTQDNYKcN_A.roa (hash: 1c+RNvMiXqFMlXYtXBUL17aJsh89UBFVQ2ryMtknJE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:53:b1:b7:d9:e2:bb:8c:99:f9:7a:c2:d4:f4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
Validity
Not Before: Sep 23 01:00:32 2026 GMT
Not After : Sep 24 01:00:32 2026 GMT
Subject: CN=d23a26bdcccdbf4ca74c3ef443fe6003477cf300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c3:77:d2:54:bd:77:c3:59:6c:61:4c:7d:ee:
08:77:95:27:ab:bc:67:e6:82:54:93:f4:76:de:fb:
f8:f7:02:04:1d:65:8c:5b:19:55:68:eb:9b:16:d2:
c3:6b:0a:1a:dc:f3:e2:5c:7b:5e:fe:74:54:e9:a1:
8f:90:76:ef:64:ee:52:8a:af:c8:65:4e:ee:74:35:
33:9d:d7:a6:91:40:ab:08:3a:e2:69:8a:31:1d:35:
af:b4:9f:47:ff:90:56:0a:63:73:a5:4a:95:0e:7d:
48:05:f6:cb:45:bb:11:f5:55:76:1a:00:cc:8d:c0:
a4:d8:82:19:90:7f:e4:a2:b4:71:ac:3a:1a:25:a6:
d1:72:17:d6:38:ca:68:10:ef:34:94:02:bc:8e:84:
15:41:72:fa:c6:6b:35:fc:e5:dd:fb:25:fc:26:86:
3a:ba:5c:e4:e8:cc:1f:91:07:84:1b:0a:2f:13:20:
fe:de:71:09:b2:44:af:b3:4e:1d:36:d6:e4:b8:fa:
39:e4:00:67:84:ac:80:f8:e5:bf:9c:8e:8b:6f:36:
32:77:9f:82:19:67:ce:6c:a6:4a:c1:68:51:1e:49:
93:4b:bb:69:3e:dc:2c:3b:72:70:67:3f:e1:a9:e7:
d7:a5:fb:7f:f8:05:4a:5d:72:88:06:a7:d4:4a:0b:
6e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3A:26:BD:CC:CD:BF:4C:A7:4C:3E:F4:43:FE:60:03:47:7C:F3:00
X509v3 Authority Key Identifier:
keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d8:bc:0f:e4:22:93:dc:4a:94:ea:97:b7:95:fe:44:80:58:
a6:5c:75:b4:88:7b:65:32:d0:cd:59:78:74:7e:d8:b7:8b:83:
00:69:d0:f9:b5:a0:fb:48:ea:45:bf:bd:47:48:6c:7d:d9:2c:
47:9f:37:ff:fd:97:e2:ee:f8:1e:fd:16:9a:8b:47:fb:6c:f7:
a9:d6:c8:4d:ac:27:1e:e0:8a:a8:06:29:1c:6a:6b:e8:12:cf:
df:e8:99:2b:e0:89:9f:8a:a8:d7:a6:d3:4c:8f:e8:e4:34:1e:
de:88:2d:15:e6:7a:ba:dd:36:51:3f:f7:f2:af:9a:6c:7e:8e:
4a:28:52:1d:99:c6:b1:34:39:5c:b7:d5:98:b6:a4:4b:ef:fb:
9c:9e:ec:76:4c:3c:58:64:55:f1:51:ff:dd:4c:69:92:3f:c3:
bc:e6:88:57:39:8d:ad:d7:2f:da:bc:ce:92:6a:65:90:ef:60:
10:4a:36:0c:87:3e:49:13:f9:10:f7:69:e9:14:c6:00:7f:6a:
aa:a2:5e:6c:f4:24:2b:ff:8f:3a:a7:2d:2f:14:c8:03:09:bf:
5f:95:f7:05:94:42:6b:95:28:c1:b3:48:f2:38:01:c8:59:3c:
a4:9e:6b:a2:22:a4:ef:b1:84:be:cb:b6:11:82:fc:a5:57:dd:
26:4a:05:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:53:22 2026 by rpki-client