Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/7oxa8cFuFRjMQ5IoShoOVPTL91Y.mft
File: 7oxa8cFuFRjMQ5IoShoOVPTL91Y.mft (raw, json)
Hash identifier: 4JH7bzMCV55Aj9Vit83juFwWpZETlGn/J1Pe2KCADeM=
Subject key identifier: 99:85:2B:3E:66:B3:F9:18:4A:39:D3:90:2B:93:16:93:7E:45:38:3C
Authority key identifier: EE:8C:5A:F1:C1:6E:15:18:CC:43:92:28:4A:1A:0E:54:F4:CB:F7:56
Certificate issuer: /CN=ee8c5af1c16e1518cc4392284a1a0e54f4cbf756
Certificate serial: 01A0D3EFF6CF4E3CD09BBBA72B98E82E026B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oxa8cFuFRjMQ5IoShoOVPTL91Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/7oxa8cFuFRjMQ5IoShoOVPTL91Y.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:01:53 +0000
Manifest this update: Thu 24 Sep 2026 15:01:53 +0000
Manifest next update: Fri 25 Sep 2026 15:01:53 +0000
Files and hashes: 1: 7oxa8cFuFRjMQ5IoShoOVPTL91Y.crl (hash: vl1ZvuCa6RBNqjRBqiGFtgTd2CMFyts706msf9y4H3A=)
2: MFHvUPrYAeDk8SpBoizdIOrRDfA.roa (hash: ppOuHRLYDTC+js6b7NOJZskTOOb+m18mpkOOGMItddw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/7oxa8cFuFRjMQ5IoShoOVPTL91Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/7oxa8cFuFRjMQ5IoShoOVPTL91Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oxa8cFuFRjMQ5IoShoOVPTL91Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:f6:cf:4e:3c:d0:9b:bb:a7:2b:98:e8:2e:02:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8c5af1c16e1518cc4392284a1a0e54f4cbf756
Validity
Not Before: Sep 24 15:01:53 2026 GMT
Not After : Sep 25 15:01:53 2026 GMT
Subject: CN=99852b3e66b3f9184a39d3902b9316937e45383c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d6:79:62:94:60:f5:36:d8:7d:7e:4e:da:67:
eb:90:6e:8f:ae:2c:2b:5b:a2:f9:90:f0:95:54:d3:
bc:14:d7:4d:99:c3:37:b5:5e:ed:ea:bb:8d:d0:5b:
47:dd:11:7c:87:5f:d7:7d:60:79:f5:63:b6:b7:88:
70:89:d8:73:76:00:9a:25:9d:17:da:e4:30:8f:1f:
3d:d6:da:11:f8:f4:9b:66:94:56:53:16:90:2d:34:
35:12:9c:6b:c1:fe:49:0a:a5:f6:cc:c5:8e:7e:6b:
55:71:42:67:10:c3:3b:b1:f3:6d:04:14:01:e4:a5:
f2:3e:66:04:3e:d8:4f:de:a2:f5:bf:e2:02:32:28:
71:f3:13:0c:f0:9c:67:4e:49:b7:b5:4e:01:dc:4a:
d3:82:aa:98:56:15:f9:e4:75:91:37:b6:9b:9d:9b:
b6:50:65:c7:93:95:9b:e6:94:31:55:c1:87:9a:cf:
2b:8a:c7:9f:2b:46:9a:e0:47:46:0a:79:78:6d:24:
19:d2:0c:2c:a4:4e:1a:e2:5b:07:88:6c:83:40:4a:
31:24:d5:13:47:0a:b6:2e:1a:52:98:17:d3:54:bc:
0a:79:f0:ab:dc:c6:f0:3f:30:f3:cb:8c:07:e2:10:
c6:fe:b6:67:0e:03:1f:5f:54:c0:3c:e1:a9:ac:a2:
07:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:85:2B:3E:66:B3:F9:18:4A:39:D3:90:2B:93:16:93:7E:45:38:3C
X509v3 Authority Key Identifier:
keyid:EE:8C:5A:F1:C1:6E:15:18:CC:43:92:28:4A:1A:0E:54:F4:CB:F7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oxa8cFuFRjMQ5IoShoOVPTL91Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/7oxa8cFuFRjMQ5IoShoOVPTL91Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/7oxa8cFuFRjMQ5IoShoOVPTL91Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:70:7d:b9:9b:71:a9:b4:90:32:d9:5a:54:5a:25:f2:16:32:
fe:b7:9b:ea:88:d0:2c:4b:93:d1:b6:30:6b:b1:9c:ce:b4:9c:
46:7b:1c:ea:85:95:2d:24:ca:4a:00:c9:c5:2d:7f:cc:a5:ff:
c2:75:d2:f2:32:8b:98:3c:8f:18:14:2b:c3:f5:fe:ff:80:3d:
18:62:3e:ff:8f:4a:55:a2:2e:c1:4a:ad:10:7e:c7:21:56:a1:
3f:56:94:78:b3:4c:a0:41:3d:c2:ca:e8:88:39:b0:9f:45:fb:
1f:42:57:89:ba:4a:57:03:74:25:e4:69:67:75:c0:0a:d5:2f:
90:bc:cc:08:fc:bd:69:fe:62:a4:f1:79:0a:fe:eb:ad:a4:91:
1f:07:20:57:98:83:a5:8c:7d:08:70:22:fc:bc:9f:99:08:08:
c2:6c:b4:06:fb:0a:ad:fe:6c:d4:0c:d4:db:33:36:64:62:f0:
7d:2a:ec:4c:43:3b:23:83:00:39:3b:bd:fd:9d:44:81:1f:0b:
72:7e:21:98:c7:cf:6e:70:63:b1:e4:52:82:ee:7d:55:8f:5e:
6a:95:b0:bd:f7:c7:02:1f:91:08:8e:ff:9f:60:44:15:ae:5e:
20:4c:3f:9c:9d:c7:ba:d4:fe:e4:5d:bb:6f:bb:43:27:86:52:
57:ab:a8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:30:43 2026 by rpki-client