Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
File: 7MihqtAgWUOkVyOJu3QzThyihIU.mft (raw, json)
Hash identifier: kt16ACok4PHVrlVF2PNPZ1PSt2tQFCX1r1FYymZlyXE=
Subject key identifier: 81:CA:81:53:5D:F0:2A:3A:95:A1:C8:27:69:4A:E8:E1:55:CC:A5:A7
Authority key identifier: EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
Certificate issuer: /CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Certificate serial: 01A10CCC01219F627EE8CD48DB9841DF4BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
Manifest number: 1A8D
Signing time: Mon 05 Oct 2026 16:00:58 +0000
Manifest this update: Mon 05 Oct 2026 16:00:58 +0000
Manifest next update: Tue 06 Oct 2026 16:00:58 +0000
Files and hashes: 1: 7MihqtAgWUOkVyOJu3QzThyihIU.crl (hash: 2py9YtWCEJ9fHYWEatMnLs1IpafbMgMt0VzSL/4AEDk=)
2: TPFA9ANmjeizoRraD4Ig8TEK1SU.roa (hash: kT6UPV2xN7mmP7EqC+AR1+y3Fgn76QDWPblq40BQx1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:cc:01:21:9f:62:7e:e8:cd:48:db:98:41:df:4b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Validity
Not Before: Oct 5 16:00:58 2026 GMT
Not After : Oct 6 16:00:58 2026 GMT
Subject: CN=81ca81535df02a3a95a1c827694ae8e155cca5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:47:24:72:4c:a9:b4:43:d3:72:5a:39:9a:4e:
59:c5:bf:02:82:9a:e1:e7:f8:93:ac:30:96:49:64:
9d:1e:29:cf:f3:ea:98:17:78:bc:95:f4:96:cc:f3:
39:97:a3:23:50:84:05:02:73:34:46:00:70:44:86:
8e:ea:c1:41:e2:52:95:3e:ea:a5:be:04:de:7d:7d:
23:25:38:77:94:5e:c5:70:6a:ed:f7:97:b5:cc:91:
c6:d9:8e:c0:82:9b:d3:70:33:1d:3f:7b:e7:aa:f8:
4b:8e:28:ef:c8:32:76:34:0b:14:12:94:00:e4:04:
13:2d:5f:25:f4:68:fc:6a:5a:bf:04:bf:db:1b:43:
e6:e3:3a:26:cb:f3:be:8c:f8:50:bf:d3:3d:32:d7:
b6:b9:c7:f3:dd:46:4d:f0:c7:fd:79:1d:e4:27:67:
05:34:f4:b1:34:c0:08:92:a1:54:8d:bb:fa:53:a8:
41:86:78:96:84:2a:ad:4c:9d:33:c6:db:2a:a4:bb:
fc:02:93:61:a8:47:c1:e1:fb:da:8a:34:70:ff:b1:
0e:47:b9:e2:68:f8:bc:58:25:59:a0:1f:fb:b6:52:
73:55:5a:0b:e5:bd:80:d4:02:42:28:d1:c8:e6:67:
47:92:d1:dd:7f:dd:5e:c8:2f:50:e3:8c:39:21:18:
6c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CA:81:53:5D:F0:2A:3A:95:A1:C8:27:69:4A:E8:E1:55:CC:A5:A7
X509v3 Authority Key Identifier:
keyid:EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f2:4d:fa:dc:cf:cb:89:bc:e8:ba:b9:af:78:1e:8f:14:c1:
6d:ba:ad:f5:ba:54:5d:ea:17:9f:7f:8c:a3:7d:42:1c:14:22:
85:92:fd:4c:db:94:89:a9:a8:86:6b:3d:da:66:44:91:33:67:
89:ad:8e:ee:02:50:72:b1:22:ec:e4:c6:c2:82:be:6d:06:2a:
93:e8:d5:94:7a:e3:9d:b1:b3:52:2f:d7:4b:01:f0:c5:b5:13:
6d:9d:48:32:6c:be:94:21:bb:a1:a6:df:63:71:e1:73:61:bd:
1f:47:54:6f:82:59:d8:25:0f:4f:fd:d9:fe:6f:fe:76:64:34:
25:f7:0b:f1:e2:e2:e5:ef:3e:c0:42:2f:52:2d:b3:58:8f:ec:
4a:e5:06:fc:20:d8:ce:ad:38:e5:11:5f:5a:2b:54:82:c1:d1:
1c:12:1b:18:82:f5:1a:00:0f:14:19:e0:e5:e2:8d:5a:29:8c:
4c:d5:07:5e:e4:6e:b6:11:b2:05:03:ee:1c:d2:03:de:c0:07:
4b:f1:d9:41:53:47:07:d6:f1:72:60:17:f4:54:0b:fc:9c:91:
ab:69:74:bd:37:c5:91:68:45:84:5a:9a:00:91:10:db:79:10:
74:c4:de:90:54:4f:69:05:f3:72:7a:70:2d:ca:c5:3e:ee:ae:
d1:f0:70:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:29:25 2026 by rpki-client