Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/334b12-b17c-4bf7-8199-a4563a21a378/1/7Johw61I5fWl6kt5GjL4OjWmKKs.mft
File: 7Johw61I5fWl6kt5GjL4OjWmKKs.mft (raw, json)
Hash identifier: ecNrPZ3RvWQoM57ffloCG3gppMR2dRPCtHzCxlVLZk4=
Subject key identifier: 2E:ED:74:E6:EF:4F:B8:8C:5F:1E:45:CF:D1:32:E5:5D:8C:0F:40:7F
Authority key identifier: EC:9A:21:C3:AD:48:E5:F5:A5:EA:4B:79:1A:32:F8:3A:35:A6:28:AB
Certificate issuer: /CN=ec9a21c3ad48e5f5a5ea4b791a32f83a35a628ab
Certificate serial: 01A1205304C30EA9BB5D33629004D23A8E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Johw61I5fWl6kt5GjL4OjWmKKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/334b12-b17c-4bf7-8199-a4563a21a378/1/7Johw61I5fWl6kt5GjL4OjWmKKs.mft
Manifest number: D2
Signing time: Fri 09 Oct 2026 11:01:13 +0000
Manifest this update: Fri 09 Oct 2026 11:01:13 +0000
Manifest next update: Sat 10 Oct 2026 11:01:13 +0000
Files and hashes: 1: 7Johw61I5fWl6kt5GjL4OjWmKKs.crl (hash: piiLe2adSOa4I8ppXN10NDK+OLC25mZVPcC8FrTq5To=)
2: HxAmguSxXpGyDH-xXiJflZk79M4.roa (hash: g9Fkj7kdnOVRjgWMYZ9SuygJGXHhDWfYa1t92jixGec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/334b12-b17c-4bf7-8199-a4563a21a378/1/7Johw61I5fWl6kt5GjL4OjWmKKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/334b12-b17c-4bf7-8199-a4563a21a378/1/7Johw61I5fWl6kt5GjL4OjWmKKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Johw61I5fWl6kt5GjL4OjWmKKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:53:04:c3:0e:a9:bb:5d:33:62:90:04:d2:3a:8e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9a21c3ad48e5f5a5ea4b791a32f83a35a628ab
Validity
Not Before: Oct 9 11:01:13 2026 GMT
Not After : Oct 10 11:01:13 2026 GMT
Subject: CN=2eed74e6ef4fb88c5f1e45cfd132e55d8c0f407f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:61:b1:e9:02:11:e6:3c:0f:ba:57:21:a8:7a:
a8:f6:8e:d9:02:54:5a:f4:9c:51:6c:8c:19:91:60:
77:36:e2:29:b5:c4:4e:ba:4f:a1:f5:52:48:ee:a5:
3b:70:a4:a4:35:b8:4b:99:73:9d:76:2c:8f:9b:5e:
cf:45:e4:eb:ed:96:01:63:cd:0c:f8:fd:a3:16:23:
31:24:49:1e:9c:27:14:81:7d:f1:9f:c4:df:78:7f:
25:f5:34:1e:cb:ac:0d:95:33:a3:b3:54:69:65:aa:
3d:97:6e:61:51:a2:85:82:a8:ff:ac:30:cf:c3:c2:
39:e4:43:a5:47:fa:8c:c9:0d:b4:2e:0c:14:5a:30:
27:f2:cd:98:a4:06:66:39:ee:41:bc:4b:79:3e:e0:
81:ac:86:99:1e:4f:0a:5b:7c:8b:54:a2:bc:64:29:
26:53:95:41:e7:8d:b7:52:ef:a8:e1:7d:78:23:56:
c5:16:41:cf:6a:9d:2f:f7:2f:fc:57:17:f6:f3:3a:
33:dd:93:42:58:7c:0e:89:72:0d:48:9d:d1:17:1f:
b1:24:c0:8f:df:3d:02:fa:e3:95:f9:40:61:4e:b0:
b5:52:f4:53:8d:39:8a:85:b2:81:b8:8b:21:ee:33:
15:fa:f0:47:9e:50:e7:e6:d4:37:7a:7d:84:13:68:
39:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:ED:74:E6:EF:4F:B8:8C:5F:1E:45:CF:D1:32:E5:5D:8C:0F:40:7F
X509v3 Authority Key Identifier:
keyid:EC:9A:21:C3:AD:48:E5:F5:A5:EA:4B:79:1A:32:F8:3A:35:A6:28:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Johw61I5fWl6kt5GjL4OjWmKKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/334b12-b17c-4bf7-8199-a4563a21a378/1/7Johw61I5fWl6kt5GjL4OjWmKKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/334b12-b17c-4bf7-8199-a4563a21a378/1/7Johw61I5fWl6kt5GjL4OjWmKKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:cb:1c:b7:80:65:d5:dd:7b:57:09:2d:4b:e2:27:d7:4f:77:
42:19:fa:71:09:65:53:37:f2:3e:0e:a0:62:60:b3:d8:0e:d3:
31:b1:6b:db:fc:83:c5:86:2e:c7:95:53:3d:e1:01:3f:3f:92:
bc:48:c5:5c:49:bd:ed:b7:40:7d:de:93:6d:71:3b:f1:0f:36:
d9:c0:9a:3b:8e:cb:08:a4:2b:98:15:0f:ad:05:8e:26:39:5f:
ae:e1:f6:a0:17:cb:24:e0:cc:c5:23:61:9e:3a:8c:bc:40:96:
c8:0a:f9:a7:1f:ad:d7:3c:e6:3f:fd:71:80:7e:60:8b:58:c4:
05:f5:49:b0:7b:08:ba:06:40:cd:da:56:65:47:83:52:1b:63:
c6:ad:6d:24:ab:df:06:66:9f:f0:d0:1a:dd:1e:dc:8d:65:5a:
f3:db:57:bd:f1:c0:0c:77:d6:1a:0c:ba:6b:24:7c:3b:d8:4b:
00:20:91:e8:94:48:15:b8:86:7e:f7:7e:6c:8c:68:c6:a9:d2:
57:22:37:5a:58:b7:9d:5f:cd:89:50:e6:9f:db:1f:44:d5:d0:
e1:ed:c1:7b:2b:a4:39:ef:35:ce:b4:ec:f1:0a:e2:71:db:f9:
61:69:2c:4b:b6:c2:fb:f9:5f:dd:ff:06:00:e9:5c:da:82:69:
dd:58:8f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:42:29 2026 by rpki-client