Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft
File: 7hgkJLSEGX3DBFJAktzdmS_L5L4.mft (raw, json)
Hash identifier: RukHIVRiT4T3jQg1YZ6ue/6x7lHPlYVwdeSvDxuWjXo=
Subject key identifier: 1D:36:04:6F:14:3A:ED:EE:30:9F:DC:57:6C:C7:27:0A:38:BC:E0:67
Authority key identifier: EE:18:24:24:B4:84:19:7D:C3:04:52:40:92:DC:DD:99:2F:CB:E4:BE
Certificate issuer: /CN=ee182424b484197dc304524092dcdd992fcbe4be
Certificate serial: 01A0CC6BC10089F92B26CCC91A5472A5C117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 04:00:08 +0000
Manifest this update: Wed 23 Sep 2026 04:00:08 +0000
Manifest next update: Thu 24 Sep 2026 04:00:08 +0000
Files and hashes: 1: 7hgkJLSEGX3DBFJAktzdmS_L5L4.crl (hash: 1RFPZyGvp8M4toRBktBRbpjqYEIVxxVWWYWiGJc0B+c=)
2: Tl-ULJNS7U7yQv1ALYRhyuuTJQY.asa (hash: WZCy7MqwzkBALjQBmZRI7CL5PqrMtviiIOgHQFocma0=)
3: mNbPgKFXcUtgAJjE5SL4MROXfYA.roa (hash: a4hJIheKbu/FGPUQdVESELKh3R1aqx9DspXSa4TjObI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6b:c1:00:89:f9:2b:26:cc:c9:1a:54:72:a5:c1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee182424b484197dc304524092dcdd992fcbe4be
Validity
Not Before: Sep 23 04:00:08 2026 GMT
Not After : Sep 24 04:00:08 2026 GMT
Subject: CN=1d36046f143aedee309fdc576cc7270a38bce067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c0:04:c8:e6:bc:f8:cb:9b:2e:17:5d:5a:73:
0e:da:d9:06:c0:78:d8:77:bf:28:50:0c:23:28:86:
06:07:dc:ea:e7:3f:2e:6a:81:4f:13:51:63:38:f8:
ba:28:fd:ce:2b:d7:67:32:d2:dd:d1:cc:62:09:29:
16:a2:62:cd:6f:21:ea:8d:ce:83:b3:f5:10:c9:4d:
bf:c4:29:5d:ea:40:d2:c1:ce:d4:30:64:7b:fc:cd:
8f:8e:3a:5b:6b:f7:ff:fb:ec:28:53:84:29:bc:be:
2d:c2:1c:6b:c3:40:f6:3c:61:0b:09:9c:bb:b6:2c:
aa:42:78:bb:ad:55:e4:5a:07:44:2f:55:46:19:41:
48:0c:a1:ef:db:16:55:c5:9f:4b:45:4a:88:e9:1b:
f6:bb:37:45:f4:9b:30:9c:66:94:5e:b0:2d:9b:37:
78:a6:35:a2:b8:3e:dd:bc:18:04:49:e0:db:ab:41:
c8:23:b1:a9:e7:61:a0:1b:c9:a3:ab:6b:11:31:21:
70:61:6d:a6:a3:1c:98:db:56:74:43:02:47:a3:fb:
41:5e:b0:52:cb:d3:a7:17:09:11:64:2d:79:4e:94:
48:78:cd:c6:62:c1:5c:55:a8:e4:52:6d:a5:c9:bf:
dd:14:ca:d5:52:5e:9c:a3:45:87:4a:cb:3d:be:78:
4e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:36:04:6F:14:3A:ED:EE:30:9F:DC:57:6C:C7:27:0A:38:BC:E0:67
X509v3 Authority Key Identifier:
keyid:EE:18:24:24:B4:84:19:7D:C3:04:52:40:92:DC:DD:99:2F:CB:E4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f8:28:dd:b5:ed:54:67:bb:be:a6:a0:02:04:f4:e8:0b:52:
8a:7a:35:ab:64:4f:94:cb:c6:2d:37:76:80:f1:62:52:da:63:
ab:d9:80:35:a2:78:3d:66:83:a2:db:a9:8a:4f:6b:d0:a1:9b:
9a:0a:c8:df:08:89:2a:3f:80:40:c8:43:b8:be:4c:83:28:79:
f5:2b:b3:8e:13:e1:b2:f4:f5:7d:cd:3e:fd:36:27:ed:5b:20:
df:ca:71:92:f1:de:cd:ef:13:88:46:59:d1:91:d5:60:a6:86:
00:b2:31:1b:2e:97:b7:29:1e:ee:d9:98:14:86:ce:60:a3:bd:
9f:a0:46:34:24:98:d0:48:dc:c6:16:ef:1c:79:86:af:ea:11:
17:c2:73:ed:c7:b1:1b:36:e3:2f:bf:93:e9:f4:5b:ae:cd:3a:
f2:59:db:de:0e:04:13:69:dd:cb:24:d4:36:67:f2:8c:14:a3:
a1:8c:41:fb:79:47:56:af:51:eb:e6:ef:79:3c:5d:97:a6:74:
53:9b:ce:fe:09:fb:5f:67:c9:89:af:f9:d2:8f:22:00:e6:a2:
46:64:80:a7:53:02:d1:1c:b9:80:d2:ee:15:c4:5e:43:2c:32:
4e:2c:0a:cb:4f:8e:3d:f9:fd:f7:ff:d2:d2:7a:e7:be:f6:dc:
d6:8d:bb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:44:15 2026 by rpki-client