Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
File: 7gZE9wYh3Uokp4tntGApSFc3WMA.mft (raw, json)
Hash identifier: 0fOipLTzAuUWpnXzRWpjljMaZdlsNhp5Dsjjzgu7Jfo=
Subject key identifier: 90:BB:3D:8B:E9:AD:A3:69:71:33:42:1C:79:91:57:80:98:7D:5F:FB
Authority key identifier: EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
Certificate issuer: /CN=ee0644f70621dd4a24a78b67b4602948573758c0
Certificate serial: 01A0CE5A42BE7905E1BFE8925E843F5F4035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 13:00:16 +0000
Manifest this update: Wed 23 Sep 2026 13:00:16 +0000
Manifest next update: Thu 24 Sep 2026 13:00:16 +0000
Files and hashes: 1: 7gZE9wYh3Uokp4tntGApSFc3WMA.crl (hash: y0XtkDRXubby1ZjEwJJsxO97nBVg/GyNXu56ZCdA1/o=)
2: Rrw9o3WCpwNOEYYVtK8wHu_QJkY.roa (hash: 6I0ghzBeN79J1UAgpVFm5cx7tXZBN44byXnGOpV99sA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:42:be:79:05:e1:bf:e8:92:5e:84:3f:5f:40:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0644f70621dd4a24a78b67b4602948573758c0
Validity
Not Before: Sep 23 13:00:16 2026 GMT
Not After : Sep 24 13:00:16 2026 GMT
Subject: CN=90bb3d8be9ada3697133421c79915780987d5ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:3c:50:31:71:27:33:0b:8d:3a:64:31:a3:
c6:01:0f:33:78:dd:70:f9:9f:03:5f:25:f1:ca:69:
8a:2f:36:a8:2e:46:c6:cc:d5:d0:77:ce:49:cc:ba:
23:e9:d1:ff:7e:5e:ec:6a:eb:d6:10:94:f7:99:70:
8e:74:ba:22:27:83:0b:79:c8:2b:0b:a8:52:b7:bb:
65:62:9f:db:d9:ab:b0:cf:11:d2:60:0a:1d:99:68:
7c:76:0b:d3:ba:59:ad:de:ef:90:72:2a:ca:96:e8:
8a:b1:97:1a:6e:9f:b9:b2:ff:47:53:f4:c1:b9:fa:
af:85:1f:ae:71:51:f3:5a:9f:54:37:bd:bd:35:23:
0f:2c:22:a2:af:1d:3d:e8:97:a3:90:e4:54:44:ad:
7e:35:f2:5d:ee:04:29:dc:01:a9:8a:ac:71:e4:77:
a5:ff:fc:21:0f:ac:bc:bb:fe:35:0e:6c:cc:d6:db:
bb:8e:be:a5:6f:60:90:f8:13:c5:f6:56:50:3f:ee:
a7:22:5d:ab:3a:6b:f6:4d:9d:93:92:01:ad:c6:54:
4c:6e:be:04:c9:fc:c6:34:eb:cf:46:e0:7a:ef:d9:
ee:b3:28:e4:8c:88:78:12:6b:ea:a8:64:92:ce:c1:
bc:b0:46:8c:23:40:17:ee:54:8e:c4:7b:2d:77:e6:
ac:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BB:3D:8B:E9:AD:A3:69:71:33:42:1C:79:91:57:80:98:7D:5F:FB
X509v3 Authority Key Identifier:
keyid:EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:80:8a:df:ff:0c:80:43:6f:28:8d:7c:66:f4:0b:c7:02:4c:
e6:f4:af:a6:6b:56:93:6f:50:fe:08:55:c9:03:13:e0:41:11:
05:39:2a:b9:04:43:66:fc:28:59:79:7d:01:b9:60:69:5b:15:
22:8c:5a:9a:28:48:2b:3c:b0:e7:37:9e:49:db:16:0e:a4:99:
ca:9b:68:2e:50:53:90:af:ac:73:ea:97:1b:be:9e:1a:8a:38:
dc:a2:cc:53:09:da:c7:09:e1:ac:88:9c:7d:db:24:9e:3a:c2:
a1:ad:79:e7:ce:ce:d0:e7:63:07:c0:75:cd:c9:ed:40:21:b7:
db:8d:79:b2:86:cc:db:fb:67:02:c0:7b:2b:ae:83:d5:64:e9:
6c:eb:a1:fb:11:1a:75:1f:a6:d9:83:e0:12:b0:2e:87:98:3d:
14:b5:b6:87:de:c0:c0:63:39:eb:36:85:c1:43:11:10:6c:5b:
4b:d2:91:7e:08:95:d9:b3:9b:1b:4b:51:b9:c9:01:8e:49:d7:
2b:6b:94:d2:8e:2a:02:60:39:b2:dd:9a:c6:98:ef:11:57:1d:
be:8b:14:da:71:d0:05:78:4c:2c:79:17:8b:1a:68:da:69:45:
81:62:0b:dc:f6:62:af:14:6d:8c:5c:d2:42:eb:c7:94:61:3b:
e3:ef:29:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:26:55 2026 by rpki-client