Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
File: 7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft (raw, json)
Hash identifier: svFTRWvYdxSXjVMxlmdi6P/H9kPIN0SWnNW9w1X73cA=
Subject key identifier: 1A:1F:CE:F0:64:57:23:C0:6C:49:AC:99:6E:84:77:98:8E:BB:3A:33
Authority key identifier: EE:AC:12:2A:92:91:7C:F9:53:FF:5C:5D:E6:A1:FF:E1:19:9F:12:2C
Certificate issuer: /CN=eeac122a92917cf953ff5c5de6a1ffe1199f122c
Certificate serial: 01A137B61503E9C2D46C9EE45C6CD3762DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
Manifest number: 1AA2
Signing time: Wed 14 Oct 2026 00:00:42 +0000
Manifest this update: Wed 14 Oct 2026 00:00:42 +0000
Manifest next update: Thu 15 Oct 2026 00:00:42 +0000
Files and hashes: 1: 7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl (hash: m7alFxBFjyjejr6fMB0Qg74dPOo7hc8kTDL/+KZFuec=)
2: OYAYkJsr12Z2fzjQPZfjWQb7bPE.roa (hash: mR0GOPgYN71wfw37nSlvDHq0Q6YfRMuXiZgBdujomYI=)
3: PhcWaa3aMcSfSfL7A05LVlfWmo8.roa (hash: muO9ZarGeUAZ/RdE0uDFFvn9bzKE1jMQWRZvhI1+828=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:b6:15:03:e9:c2:d4:6c:9e:e4:5c:6c:d3:76:2d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeac122a92917cf953ff5c5de6a1ffe1199f122c
Validity
Not Before: Oct 14 00:00:42 2026 GMT
Not After : Oct 15 00:00:42 2026 GMT
Subject: CN=1a1fcef0645723c06c49ac996e8477988ebb3a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:11:3e:6b:3d:4f:50:b8:f8:f4:85:ee:c8:86:
9b:69:71:b3:1d:1b:18:9f:b8:72:53:88:81:7b:1a:
65:7b:e8:11:a5:88:b7:e7:f6:c6:1f:7d:e9:68:5f:
c7:13:17:a5:fa:ee:ae:cd:2f:0e:51:8b:54:b0:8d:
e9:ec:ea:0b:20:7e:03:fb:4f:83:45:5f:28:6b:5c:
9e:65:a0:e6:0c:98:27:15:7b:0b:b7:ee:38:7a:b7:
d6:4d:18:5c:f0:7d:dd:92:7a:73:7f:11:3c:71:5a:
db:8c:0d:ce:48:9a:9e:0f:0e:4c:32:90:57:e8:1b:
6b:a5:5b:2c:8d:e4:91:57:b9:69:a0:46:22:fb:57:
86:1f:27:03:cd:65:99:e0:5b:9c:45:9e:bc:f9:5f:
16:3a:2b:e0:11:11:20:f6:8c:46:87:b3:8b:c4:d6:
1f:a6:2b:9c:72:19:2d:cb:cc:41:13:86:9b:88:07:
37:48:ba:25:d2:51:e5:90:f1:d6:de:b3:34:8e:11:
78:d3:7b:32:e2:5e:3e:58:ff:53:d3:de:e8:38:7a:
ca:8a:e4:15:10:00:e6:7e:b0:15:8d:53:31:1c:40:
ef:7a:66:18:a2:a1:4a:9f:cd:bb:b2:22:e0:18:af:
99:63:8b:0b:3d:67:62:7e:8a:c9:57:24:db:19:43:
b5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1F:CE:F0:64:57:23:C0:6C:49:AC:99:6E:84:77:98:8E:BB:3A:33
X509v3 Authority Key Identifier:
keyid:EE:AC:12:2A:92:91:7C:F9:53:FF:5C:5D:E6:A1:FF:E1:19:9F:12:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2a:88:19:a2:e3:5e:55:2d:71:9a:45:56:67:00:c7:3a:da:
0a:e7:0e:01:1b:73:18:e6:94:fd:97:53:24:aa:58:fd:dd:21:
cd:ae:d0:09:0e:f6:61:ed:db:6c:4b:89:de:c8:a2:46:9f:e7:
96:7a:c2:2c:0b:5e:59:c5:9f:0d:14:c2:a3:c1:3c:19:32:b9:
cf:79:c4:c6:a9:61:cb:ca:da:75:e8:cd:e2:6c:77:fb:77:03:
4f:25:90:7e:fe:ee:3c:2f:0e:3e:31:98:d2:a3:ea:18:97:c5:
10:18:cb:33:1e:53:0b:a4:2d:00:df:85:ec:45:9c:b4:37:c1:
7e:64:92:a2:47:c3:26:c2:93:38:8a:04:59:59:1e:72:77:a2:
71:74:9e:fc:30:9e:1e:c0:f7:81:77:01:f5:32:51:29:e7:00:
a0:e8:7e:18:b7:cd:04:c0:db:79:aa:03:8e:5c:c9:19:52:fc:
51:b8:7e:4f:ce:fe:23:48:e3:fe:8f:1b:fb:74:47:a8:37:c3:
69:d9:48:d3:ae:6f:c9:6c:d2:cd:96:4b:86:55:34:2c:62:ab:
96:a8:ff:64:d7:19:04:18:fa:3d:e7:d2:1e:52:54:73:af:d9:
eb:36:e4:f4:16:c3:8c:68:70:04:a4:28:45:0e:50:b6:e0:6f:
d5:98:20:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:47:07 2026 by rpki-client