Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
File: 7PQndr5TK9BXUzKFXYxCxJUu2TE.mft (raw, json)
Hash identifier: 96mKAR999wk1YAtqNNiRORI1sUNBR/BF79z67itrgbc=
Subject key identifier: 39:33:66:23:1D:98:B4:A2:C2:D9:E6:22:B5:A8:FA:40:B1:A5:B8:6B
Authority key identifier: EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31
Certificate issuer: /CN=ecf42776be532bd0575332855d8c42c4952ed931
Certificate serial: 01A1355A595C2BDEA1EED66EB807A41CB2AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
Manifest number: 1AA3
Signing time: Tue 13 Oct 2026 13:01:15 +0000
Manifest this update: Tue 13 Oct 2026 13:01:15 +0000
Manifest next update: Wed 14 Oct 2026 13:01:15 +0000
Files and hashes: 1: 7PQndr5TK9BXUzKFXYxCxJUu2TE.crl (hash: DoLxe6fwu0oARi5xOjPsUASXU6GOevtsHx4FlsboeJ4=)
2: FE713c5vfxbQIGSVdFNk2cWFSNM.roa (hash: JgjcAo4jgA6vPRnMC9MOKVjzjQ9dpKh8w3rh7WLC4i8=)
3: MzmWO7LoBcnanX-oi0jTnFog8Sk.roa (hash: 5odMEIfNAjn0z/TvPiyQ2V/cG1Zv5Ya9/4mq6vD/C1A=)
4: ZFxceImgdOll43mTIb-2CEd5iZU.roa (hash: LEd9mfjkTgsQciD0Ian4mosID5/HXYAOaKPSHE8Z4vM=)
5: gb4eoozvCl4ZVVJkvwRFKCXlEQ4.roa (hash: K81jA4IV1mFJAtA8ax5fpPdJJ+koFS4vN7Zd8+4wcqc=)
6: nL83DswPZjOseSZh-M_SsVEMmMI.roa (hash: +wx/HPeXcm/ZjhRslTkWTgSvYpXyWghawfhk/xaSRoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:5a:59:5c:2b:de:a1:ee:d6:6e:b8:07:a4:1c:b2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf42776be532bd0575332855d8c42c4952ed931
Validity
Not Before: Oct 13 13:01:15 2026 GMT
Not After : Oct 14 13:01:15 2026 GMT
Subject: CN=393366231d98b4a2c2d9e622b5a8fa40b1a5b86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:ad:12:06:f5:17:d2:45:4d:61:9c:e0:17:
29:2e:03:b1:3f:87:49:86:d2:46:45:d9:2d:19:e2:
54:0d:46:42:f8:36:47:17:41:90:a3:cb:56:d3:d8:
4e:10:ca:4b:de:7c:20:8e:66:46:97:33:16:fd:2d:
46:46:65:5d:45:ea:2d:b5:99:e2:75:90:f6:68:7b:
b4:b8:b2:bf:a1:fb:16:c6:04:f4:44:6e:74:69:2e:
70:53:5b:ea:58:c0:b6:fd:68:4f:92:6e:14:f6:e1:
f4:2f:cb:ca:fa:a0:9d:6f:f3:a9:d8:a7:47:9f:22:
e6:fe:87:de:53:85:c6:75:4b:2d:83:61:94:2a:8a:
cb:1b:ea:f9:b7:6f:b2:49:c7:ef:7d:f1:cf:b2:e4:
eb:98:b1:73:fb:c5:ea:b2:20:a6:63:b0:55:4a:8a:
af:2a:71:81:a9:5f:9b:d2:6d:95:a4:94:a2:d1:60:
22:ca:50:7a:cf:d7:60:02:68:ba:81:b2:8b:a7:60:
88:c2:49:09:b0:8e:f8:a9:54:87:83:a2:fa:c4:a3:
98:34:30:f9:1d:28:4a:df:b2:2c:ee:c7:d4:80:cd:
42:89:87:46:d1:35:53:13:2f:42:88:3a:4d:d6:07:
7c:73:64:2e:7d:c6:c0:e9:e1:97:80:1a:8c:ab:c0:
e6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:33:66:23:1D:98:B4:A2:C2:D9:E6:22:B5:A8:FA:40:B1:A5:B8:6B
X509v3 Authority Key Identifier:
keyid:EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:33:db:e7:f7:50:36:3d:29:73:5b:57:eb:02:ff:92:8e:cd:
aa:cf:ce:ec:19:d5:8f:b6:70:5c:6c:e4:64:38:05:1d:5d:fe:
1c:01:bc:e6:4f:66:7a:bc:f6:7e:7a:5e:0f:aa:e9:ba:bd:30:
9f:2a:52:a9:f0:92:09:69:2a:26:2d:a5:57:0d:4f:94:2a:03:
ae:60:f3:18:52:45:09:ad:85:9c:38:f3:e6:34:b5:99:d7:a4:
55:25:25:b4:d7:c5:b1:80:65:10:4a:c1:4d:13:a3:51:52:43:
6e:80:06:f1:2b:42:ed:d3:fe:51:73:84:40:87:bf:36:ce:29:
85:62:cc:3c:12:ed:74:ad:08:71:73:ec:7e:2f:6f:7d:1c:98:
26:c4:a1:75:9a:15:23:b1:90:19:a5:9a:92:d6:69:d0:3a:30:
27:46:7b:8f:9c:37:39:ea:16:56:0f:9b:d9:12:3a:0f:f7:6f:
8c:bd:3e:22:b9:f6:a3:94:17:c3:2a:6b:f0:82:d3:ca:2c:5f:
37:71:62:ce:9a:4f:db:8e:97:e7:c6:65:0b:37:68:45:6d:55:
f8:cb:e8:19:14:e5:34:df:a7:c4:e2:79:91:b8:06:ee:49:cd:
d4:7a:14:b4:e9:3e:bc:b1:c0:b6:b1:22:b5:3f:a4:be:3b:7b:
0f:f1:53:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:41:53 2026 by rpki-client