Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
File: 7pzNOKXWSWiAvAlHBuaPoE-izZY.mft (raw, json)
Hash identifier: IWDEgGmPr5iYIoyn87WdviAvbffccIpB1P0qHo6ebII=
Subject key identifier: 4F:AC:1C:8F:2C:B7:0F:8A:17:30:C2:0B:64:1E:77:01:90:4E:16:46
Authority key identifier: EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96
Certificate issuer: /CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96
Certificate serial: 01A0DA290824BEA71ED4C4136B4165CE9274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
Manifest number: 062D
Signing time: Fri 25 Sep 2026 20:01:57 +0000
Manifest this update: Fri 25 Sep 2026 20:01:57 +0000
Manifest next update: Sat 26 Sep 2026 20:01:57 +0000
Files and hashes: 1: 7pzNOKXWSWiAvAlHBuaPoE-izZY.crl (hash: zyJ+/gghSm1yghCpJZ+cZEW6NIBewPcqCzGVi9m73hg=)
2: ocY70Yt7qprLim2mTu297m9-o2U.roa (hash: 6sPyz7kDxqJwF7yTxqQ7gDV39uN8BMfMMUG8+PSgNKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:29:08:24:be:a7:1e:d4:c4:13:6b:41:65:ce:92:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96
Validity
Not Before: Sep 25 20:01:57 2026 GMT
Not After : Sep 26 20:01:57 2026 GMT
Subject: CN=4fac1c8f2cb70f8a1730c20b641e7701904e1646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:02:1a:bc:d0:9d:21:34:b0:a1:ab:13:d5:
b7:a9:55:6b:89:a0:cc:d1:1d:03:cf:99:11:13:23:
bb:14:2a:11:da:79:50:0a:18:33:2f:7f:cf:da:22:
74:aa:42:b7:91:25:b2:33:f1:03:75:d6:c7:bf:63:
9f:44:f3:73:41:21:40:aa:cd:89:d4:c8:f4:98:db:
2b:ae:0c:23:58:68:11:18:22:89:84:b0:88:82:14:
f3:3c:d9:e8:32:c7:f9:8a:a7:51:ff:4e:fa:c1:c2:
ad:85:a1:d8:fa:8d:82:76:4b:f4:3c:e1:ee:9b:59:
db:c9:4b:d1:05:24:65:5c:f5:5e:0d:34:2e:66:67:
68:c8:ff:c4:5e:4c:a2:09:5f:93:f5:cb:32:de:a7:
ff:45:40:1d:1a:2c:d0:2d:8f:c3:ee:84:8a:b7:b2:
51:c7:83:ba:6d:d7:5f:c9:f2:eb:3e:d5:ed:59:b5:
86:67:b8:e9:93:97:75:07:ff:7a:88:be:3c:c0:e4:
d2:4e:5f:0b:96:b6:f0:d1:b2:87:fd:bb:97:90:6f:
28:37:27:90:cf:2e:9d:64:34:c9:87:29:40:4a:27:
f6:f6:b0:af:ca:0b:af:56:3d:bf:19:e6:8e:6e:b1:
f5:73:9e:09:17:8e:6b:3a:4f:fa:72:51:7e:29:95:
d0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AC:1C:8F:2C:B7:0F:8A:17:30:C2:0B:64:1E:77:01:90:4E:16:46
X509v3 Authority Key Identifier:
keyid:EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:09:5c:ab:8e:4d:35:00:49:5e:fa:f4:ce:53:a7:5e:2f:bd:
14:58:6c:9b:a3:f9:8c:94:5c:85:e8:b0:41:96:2b:8e:51:52:
0c:d4:47:a0:d7:4f:6f:d1:9a:62:41:50:a8:98:f4:ce:1d:78:
63:e0:5b:6d:9c:36:62:bb:05:85:02:00:8c:d6:e1:4a:b6:ac:
5b:eb:fe:10:1f:31:5f:af:11:b3:b0:ca:bb:42:66:77:a3:af:
5f:cf:30:71:3a:be:d5:3a:41:75:30:a6:25:a1:6d:2a:eb:4a:
9c:53:ee:13:bf:11:d1:d7:6e:20:1d:e0:f4:22:b4:a5:f1:5a:
1b:10:ac:c6:63:37:16:12:c6:2a:5d:a6:b5:3a:84:a6:e7:43:
78:15:94:27:24:8a:73:bd:76:8b:de:ca:f1:ef:c6:8b:1c:ef:
0b:4e:70:88:49:2d:55:38:f9:36:c8:be:2a:6a:a4:b5:c9:3f:
53:fe:db:d4:62:6b:c8:ad:10:f0:b9:88:b9:1d:24:5a:16:db:
c6:7a:68:99:97:af:82:0c:d1:71:ea:b0:64:45:82:98:50:74:
1e:5a:70:2e:7c:0d:eb:a3:cb:cd:be:80:4e:e9:16:5f:44:0d:
89:80:c3:79:44:82:56:a3:aa:41:15:27:63:b8:0a:a1:36:ad:
42:8e:89:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:10:34 2026 by rpki-client