Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
File: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json)
Hash identifier: vPrvYbXJKZEld/Kq9FOPfW/Q7hfif9jSqChIQ44IxIs=
Subject key identifier: 45:A2:E6:5B:52:C1:3F:F3:FA:7A:4B:A1:92:20:5F:66:30:13:55:58
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Certificate issuer: /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial: 01A0CE92306C3EF24C978034D22EAB8F806F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 14:01:22 +0000
Manifest this update: Wed 23 Sep 2026 14:01:22 +0000
Manifest next update: Thu 24 Sep 2026 14:01:22 +0000
Files and hashes: 1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: QGc3WHmK5cGzu14kOnbulBTMIrcbWzck+yz27SuDM08=)
2: jI0W3FXepCGwUQYooUrSqFApgnI.roa (hash: ywNZ9Hr6Ek5jRSdgINiD2gJAFEBiWAjLS61c7FwJ6mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:92:30:6c:3e:f2:4c:97:80:34:d2:2e:ab:8f:80:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Validity
Not Before: Sep 23 14:01:22 2026 GMT
Not After : Sep 24 14:01:22 2026 GMT
Subject: CN=45a2e65b52c13ff3fa7a4ba192205f6630135558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:91:63:da:1d:76:7f:4a:d1:69:e3:d0:ab:
05:3f:32:04:32:dd:48:dd:3f:b3:4a:5d:ae:a4:fa:
99:01:05:c0:bc:5c:a9:df:ff:bc:09:ee:ad:4b:dc:
39:71:0c:3e:7f:6c:59:9e:fa:40:7d:14:15:3f:54:
ba:88:cf:c4:1c:cc:f6:23:49:94:b4:50:db:e7:9d:
a4:81:74:13:36:e8:bb:fa:08:b4:1e:64:f8:b2:cd:
2a:5b:72:21:df:11:4e:e5:56:a4:69:7d:94:6f:2c:
82:a7:1b:7f:d5:ed:be:06:9c:ff:36:0f:1e:f1:cc:
c6:55:e0:8f:db:f0:45:41:ac:85:b4:c9:6b:bd:43:
3e:a6:39:a6:3f:fb:41:8a:6c:de:0f:45:1c:09:83:
e4:95:f4:b6:4d:68:4c:33:4b:14:33:04:37:64:e4:
d2:40:77:43:0c:26:94:2d:89:49:f2:89:1c:9b:61:
1b:a9:5f:ea:f2:2f:fa:74:a9:0e:1c:00:23:03:95:
10:20:5d:b5:2f:9b:47:5b:1a:23:0e:b0:8a:61:ce:
f3:e3:a9:68:8f:9c:38:65:6a:bc:bb:0e:84:8a:23:
4e:b6:5b:c3:37:15:6c:26:7c:69:6d:f5:46:91:a1:
e3:2e:b2:63:d2:2e:a1:57:5a:1c:d2:2d:2e:f7:6f:
90:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A2:E6:5B:52:C1:3F:F3:FA:7A:4B:A1:92:20:5F:66:30:13:55:58
X509v3 Authority Key Identifier:
keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:cb:62:92:47:2c:7f:60:cc:97:5a:a7:a1:39:49:e0:ea:af:
80:84:0c:88:db:5d:a2:00:44:35:0f:6d:e5:51:5f:d8:59:09:
80:47:81:87:52:40:83:25:df:dd:7a:c0:b4:e1:29:ef:cd:2f:
98:05:f5:c5:16:5b:b3:93:2e:5b:93:b9:16:a6:ec:12:37:b9:
2d:26:fb:ee:87:00:7f:c3:71:a5:72:ae:a8:dd:b9:fc:34:40:
d6:f2:e1:cf:4a:b6:b0:31:fb:32:fa:a2:b5:40:a1:4f:f7:01:
a8:96:57:9d:98:18:64:e0:fb:a3:86:73:6d:f0:6b:9e:1f:6f:
35:31:fb:46:49:39:9f:43:1d:21:48:7c:7e:20:2a:e1:cc:96:
90:57:fe:bf:53:d4:8f:b3:19:f5:a4:64:20:98:e6:89:f5:87:
1f:37:4b:33:aa:6c:6f:b2:81:9d:cb:b5:b3:3f:9d:26:61:30:
af:90:8c:6c:f4:46:d4:f1:b0:35:85:e1:7b:02:7d:b3:74:a9:
c6:ca:05:f9:97:c6:94:c2:5e:c3:f3:3a:49:e6:d0:0c:a6:42:
c0:0d:21:f6:5a:d2:6a:e4:c7:d8:0a:41:ef:f3:3a:38:ca:e9:
ac:00:61:ef:2c:da:60:39:e9:d5:b9:e6:77:07:50:70:0d:3e:
58:72:21:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:49:06 2026 by rpki-client