Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
File: 7WoxJ-11rNJGANs1qPIw4vMkug4.mft (raw, json)
Hash identifier: l1YKdfPaMhjF3KBHS7yzchlw1XVho9VSfoFXBotJHzw=
Subject key identifier: 8D:91:8F:8B:87:A3:7C:30:F7:18:C1:15:AB:8D:3F:F0:43:A6:15:6E
Authority key identifier: ED:6A:31:27:ED:75:AC:D2:46:00:DB:35:A8:F2:30:E2:F3:24:BA:0E
Certificate issuer: /CN=ed6a3127ed75acd24600db35a8f230e2f324ba0e
Certificate serial: 01A0DC849C6E0A5CF74099F0F44872B49F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WoxJ-11rNJGANs1qPIw4vMkug4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
Manifest number: 027A
Signing time: Sat 26 Sep 2026 07:01:13 +0000
Manifest this update: Sat 26 Sep 2026 07:01:13 +0000
Manifest next update: Sun 27 Sep 2026 07:01:13 +0000
Files and hashes: 1: 7WoxJ-11rNJGANs1qPIw4vMkug4.crl (hash: 03Lk51FhFDijJn8KCyPJM4AxBYJ3Pl7cb3i7gZU5qQs=)
2: RQqhLPcGGSGX-Yx2wib2KDftxXQ.asa (hash: aHQ4ca8e5T8BDTfMZOey9jkGfKWYE/aGZxfTiuf/1Ro=)
3: pCAXnejbOOJp7m5yFPm8VPwf0Uw.roa (hash: N796Zom1skp7/3+RCtSYa/r7JVVy/XIYs8YxWI+wUD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7WoxJ-11rNJGANs1qPIw4vMkug4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:9c:6e:0a:5c:f7:40:99:f0:f4:48:72:b4:9f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6a3127ed75acd24600db35a8f230e2f324ba0e
Validity
Not Before: Sep 26 07:01:13 2026 GMT
Not After : Sep 27 07:01:13 2026 GMT
Subject: CN=8d918f8b87a37c30f718c115ab8d3ff043a6156e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:46:af:3a:6d:d7:f7:98:35:dc:19:dd:39:18:
ce:b8:85:52:a1:37:6b:a7:91:31:1c:2f:e3:6e:0f:
88:42:a5:d8:13:81:ec:6f:d3:33:b4:29:25:15:e0:
e8:ea:c6:fe:06:3c:58:6d:0a:2b:59:3c:99:84:16:
a2:0f:46:a7:05:db:bc:b1:45:41:e8:2b:43:ec:d9:
f2:2f:3a:9c:fc:db:2c:88:98:99:c8:32:21:7c:53:
97:e8:e2:80:7f:03:ff:75:bf:f5:ce:fe:ec:a1:3b:
20:03:56:6d:62:05:03:33:c4:cb:32:ad:61:07:ff:
36:ad:70:18:e3:22:48:94:8f:8c:da:93:36:4d:8b:
06:8f:28:a1:b6:38:88:22:e8:30:ea:41:29:40:5c:
9b:7d:87:0f:82:a2:cb:3e:a8:72:42:d4:d3:c7:48:
0b:8d:c4:79:0a:6d:01:ba:56:02:09:d5:34:92:61:
c3:68:af:cd:e6:05:dd:30:df:02:28:8a:17:ed:e3:
c1:9a:b7:3e:6e:1a:63:57:c1:36:cb:94:ef:e8:a5:
1a:c5:3f:85:35:73:53:a2:a4:8d:d6:ad:eb:95:be:
02:ed:0f:ab:87:4d:cb:0f:0f:fe:ea:f4:71:8c:5b:
07:91:29:9b:95:17:74:d7:1a:da:ef:67:40:f0:e7:
73:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:91:8F:8B:87:A3:7C:30:F7:18:C1:15:AB:8D:3F:F0:43:A6:15:6E
X509v3 Authority Key Identifier:
keyid:ED:6A:31:27:ED:75:AC:D2:46:00:DB:35:A8:F2:30:E2:F3:24:BA:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WoxJ-11rNJGANs1qPIw4vMkug4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5e:83:ab:26:48:35:db:a9:05:62:7f:9c:84:6a:5c:7a:93:
fc:6f:f9:38:b7:9f:ca:eb:95:38:a4:57:94:17:9e:6e:65:c3:
52:e3:1a:45:f6:d9:fe:9d:aa:67:a9:7e:36:6a:3c:39:85:b0:
9d:c1:26:cf:e9:c9:8e:d1:57:d8:74:2f:82:4e:a6:74:9c:97:
6d:7f:80:db:1d:5a:2e:3f:42:fd:b0:ef:25:bd:11:c8:07:b9:
61:1e:cd:20:2e:89:aa:49:1b:6b:c2:c8:58:db:ea:30:92:fd:
3b:a5:5c:fd:5c:e9:2c:0c:aa:e1:5b:55:93:de:a8:95:88:e1:
01:d1:f6:bc:57:d0:e2:f2:fc:81:f6:02:c5:fd:c5:12:21:f0:
c8:66:0c:6f:42:7b:23:9a:06:2e:35:58:99:65:13:12:c5:ad:
e4:74:3e:fd:1b:66:48:77:91:0c:0f:e4:db:39:9a:e6:53:3c:
1e:92:40:99:67:33:c8:a9:22:36:91:53:6a:64:78:31:d4:39:
03:7e:6a:30:4d:a9:da:95:d2:31:69:63:a0:ae:8a:53:d6:ac:
6a:c9:ed:76:f3:35:78:5c:97:c1:a4:5b:aa:19:71:4f:73:c9:
bf:1a:65:bd:05:c3:4a:88:f1:60:8a:45:7f:5a:b0:06:18:a2:
24:49:34:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:42:58 2026 by rpki-client