Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
File: 7osnkE0RvPU2d01UFUIILPr-jqo.mft (raw, json)
Hash identifier: nDw3nJePVHusNpcihl6Usf88qiNNbMCIEGLGUzP65kw=
Subject key identifier: C4:32:67:30:B2:DA:A5:CB:38:A2:2E:7E:58:F6:D0:C5:1B:93:59:8D
Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
Certificate issuer: /CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Certificate serial: 01A0D80432E50C0B88FDAD02B4E70A69E593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
Manifest number: 0E7E
Signing time: Fri 25 Sep 2026 10:02:28 +0000
Manifest this update: Fri 25 Sep 2026 10:02:28 +0000
Manifest next update: Sat 26 Sep 2026 10:02:28 +0000
Files and hashes: 1: 7osnkE0RvPU2d01UFUIILPr-jqo.crl (hash: v5VGy1nux0nhUBpr4mZg5V4+M2hYaONw1Af5rs93wtQ=)
2: BLLh5nNCz1s5if2pHYByIfYWqoE.roa (hash: EPJ+RLaqu85xGvwiEKDRnHSjYD9ruTYxv3tR7VjbDJs=)
3: E7Yzs4RQ5PAWanrzJaRetL_vIW4.roa (hash: ZfDaAmo4Ze/Cj58O8IkcEHyg6puoaRdc7XWQV2TfV6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:32:e5:0c:0b:88:fd:ad:02:b4:e7:0a:69:e5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Validity
Not Before: Sep 25 10:02:28 2026 GMT
Not After : Sep 26 10:02:28 2026 GMT
Subject: CN=c4326730b2daa5cb38a22e7e58f6d0c51b93598d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:92:33:ae:6e:6b:32:02:de:bd:9b:12:51:ae:
1b:aa:da:c1:8e:b8:eb:7d:55:16:a2:23:3a:b3:0d:
7e:90:81:2b:db:15:19:d1:35:12:91:8c:95:60:e5:
c0:49:f5:c3:2f:0f:7f:e4:bc:3b:31:2b:4d:7e:31:
e8:49:0b:74:72:df:81:18:18:54:5d:17:19:ac:f6:
eb:ce:a0:09:fc:ee:62:00:0f:c1:3f:d6:d8:b8:ef:
85:b2:2e:0a:9b:bd:cd:77:48:7e:88:a0:e1:5f:6a:
14:d1:66:ff:a2:b2:94:ee:2f:14:a6:e1:86:72:a6:
14:06:87:fb:fd:5e:7c:33:cd:ef:2a:8b:7c:f5:00:
af:16:3d:64:10:8d:c8:b1:1b:e0:31:2f:47:c1:75:
cc:d0:39:47:fe:b8:b9:9a:fd:a2:f0:66:22:37:6a:
27:d4:36:b8:b7:cb:4f:8d:36:ef:12:ff:07:3b:3b:
7f:50:35:24:34:0d:89:73:16:36:0b:22:3e:6c:ea:
08:0f:f3:63:fa:75:76:0f:fe:aa:3d:dd:74:67:e8:
d6:5d:7c:8f:7c:7b:d2:0c:51:47:c0:4b:2a:10:dc:
02:d9:66:26:0e:1b:b6:da:0b:5d:7e:49:a5:88:4a:
12:f7:d9:e0:b9:f0:14:88:2f:38:81:35:4d:d4:ac:
7c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:32:67:30:B2:DA:A5:CB:38:A2:2E:7E:58:F6:D0:C5:1B:93:59:8D
X509v3 Authority Key Identifier:
keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3b:a0:c1:06:3d:92:06:84:1a:d7:83:79:1c:e6:62:57:2d:
3e:66:8f:ff:03:03:7b:9a:8b:42:00:17:5c:eb:72:bd:d4:08:
ec:22:06:4c:9e:bf:08:9a:96:7d:ff:78:b1:d0:f1:0f:9e:d9:
b4:d5:05:7c:1c:b9:41:66:84:0b:d2:28:19:f9:c4:0f:12:9f:
e1:1c:bc:67:b7:9d:a6:21:db:2c:27:86:2d:7a:5c:11:12:56:
d6:c5:68:31:87:1a:2c:1d:1f:14:a3:63:1b:92:88:09:98:40:
0b:1e:ec:20:f6:63:d5:db:84:7b:11:08:42:29:77:f7:17:29:
07:2c:6b:02:02:c0:cd:9a:5b:cb:0a:60:56:1c:07:80:c9:0b:
6d:74:69:6f:f1:1c:67:57:33:5c:a1:ba:73:33:e8:da:34:e8:
72:ee:26:02:7d:cb:ef:c9:a0:4d:7a:e1:8a:f9:8c:62:ab:40:
25:d9:4b:97:a3:5b:01:a8:47:a9:23:76:67:1a:a4:1a:01:c4:
92:ce:a1:64:c4:88:ab:b0:90:8b:8b:c4:a8:6a:a5:f3:48:91:
e2:9f:ab:26:6a:22:e7:fa:c0:55:62:f8:92:d8:19:13:96:96:
24:f1:77:5e:2d:9c:90:a1:3f:6a:2b:49:17:13:03:f7:1d:64:
2a:9b:83:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:54:54 2026 by rpki-client