Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft
File: 7HB5DNzgwZKsiG89nvcl85lRg5g.mft (raw, json)
Hash identifier: Xow0Kx5UxExa9cW2hZZY99g3zitSC1N/KIKjx56Aqb8=
Subject key identifier: 7B:10:67:53:7B:63:AF:E2:83:BE:8F:5F:1C:C6:81:7F:09:81:50:E7
Authority key identifier: EC:70:79:0C:DC:E0:C1:92:AC:88:6F:3D:9E:F7:25:F3:99:51:83:98
Certificate issuer: /CN=ec70790cdce0c192ac886f3d9ef725f399518398
Certificate serial: 01A1212EF2D9B37BED00CB96F9704275B9A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HB5DNzgwZKsiG89nvcl85lRg5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft
Manifest number: 031E
Signing time: Fri 09 Oct 2026 15:01:27 +0000
Manifest this update: Fri 09 Oct 2026 15:01:27 +0000
Manifest next update: Sat 10 Oct 2026 15:01:27 +0000
Files and hashes: 1: 7HB5DNzgwZKsiG89nvcl85lRg5g.crl (hash: ctM0SGFck9Y4UZQwgNy3mRLcuE8XhwgLZXtCc1Uf5W8=)
2: SqwoZLt0wGfQ52uqKIyPq1MR0n0.roa (hash: 54gdg5z/WirnRdadVGX+GzAUp4jdY5Mqe47XSjLSOVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HB5DNzgwZKsiG89nvcl85lRg5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2e:f2:d9:b3:7b:ed:00:cb:96:f9:70:42:75:b9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec70790cdce0c192ac886f3d9ef725f399518398
Validity
Not Before: Oct 9 15:01:27 2026 GMT
Not After : Oct 10 15:01:27 2026 GMT
Subject: CN=7b1067537b63afe283be8f5f1cc6817f098150e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b1:b0:3a:bd:e4:b9:0b:7b:23:a1:83:1d:03:
d2:a5:a8:6e:8e:8d:27:4c:51:81:52:cf:77:ac:85:
f1:11:52:53:c0:54:fe:02:36:ab:1e:d7:33:c3:d4:
a0:a4:23:31:30:9b:2f:e2:7e:9a:2e:ba:06:c2:1a:
87:94:02:49:d3:75:a0:a4:96:71:b2:bb:db:ed:7f:
8b:71:3a:d3:c3:bf:ff:6a:26:8c:53:0e:d9:41:e0:
03:88:55:e1:3a:de:5e:a9:41:77:64:14:77:3c:23:
af:a6:f4:dc:fb:1b:40:a8:87:94:92:08:73:4f:12:
46:37:7b:a1:8c:7c:3b:2a:94:d3:bb:18:fd:bb:a1:
d9:0e:e8:98:5d:76:c4:b9:a7:84:44:28:76:ab:5b:
a1:90:1b:dc:58:48:f2:77:4d:5e:7d:8c:24:2d:80:
33:63:c0:b1:a7:66:9a:db:7f:31:59:00:15:de:fa:
b2:17:1c:6b:18:08:79:6a:16:e6:82:6c:24:9a:ad:
b5:9a:ba:03:d6:90:f2:bd:9a:37:4b:8b:b8:f5:72:
85:35:cd:0f:f6:9c:87:b4:1b:6b:6a:e0:c5:1a:c1:
25:31:74:b4:42:1b:ae:f1:2b:4d:21:ae:4b:bb:e1:
9e:4d:fc:f3:44:ee:e6:56:c4:39:bd:86:51:39:23:
2e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:10:67:53:7B:63:AF:E2:83:BE:8F:5F:1C:C6:81:7F:09:81:50:E7
X509v3 Authority Key Identifier:
keyid:EC:70:79:0C:DC:E0:C1:92:AC:88:6F:3D:9E:F7:25:F3:99:51:83:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HB5DNzgwZKsiG89nvcl85lRg5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:92:a0:a8:94:13:27:6c:e4:a7:05:ea:36:e3:75:ac:71:96:
3f:af:a7:1d:7d:ec:e0:bc:a0:a3:7f:15:3c:37:b7:1d:32:65:
17:c0:7c:a5:25:11:4f:02:d3:d8:1c:6d:5e:fe:18:18:b5:08:
d8:64:13:a8:a4:04:89:82:da:74:ee:89:7a:9e:ac:99:0e:27:
fe:17:d5:a0:cd:0b:cb:7c:50:5b:8c:80:70:15:a5:76:3b:17:
d4:ba:8f:26:f6:72:01:06:94:d9:04:05:3d:15:14:ac:59:a1:
a2:79:75:e5:c4:f2:97:96:ce:2e:6e:d2:28:60:6e:08:c5:04:
9e:38:b4:f1:be:66:32:4a:f2:86:e4:8e:d5:25:06:7d:46:a4:
9c:4d:d3:c6:92:47:51:9a:95:61:ba:91:8e:c3:c6:01:7b:13:
dc:19:0e:4b:3b:ab:75:81:d8:db:34:ca:83:df:55:6b:23:f2:
87:7e:41:b7:a9:7b:87:f6:3f:75:0f:72:a0:e6:01:6b:76:f9:
b1:88:dc:8b:92:db:bd:94:1f:c0:57:c5:ef:c2:d0:4e:8b:4c:
f3:51:d3:af:32:85:91:8f:bc:e1:03:37:1c:8e:9a:08:8b:1d:
12:7d:d1:dd:e2:40:ad:8e:3d:4d:99:74:83:57:69:84:72:b2:
99:7f:36:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:47:26 2026 by rpki-client