Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
File: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft (raw, json)
Hash identifier: oXDxCrD8DfQMWQO1PIGho5OkC79vZoLMvfywlSpPFRM=
Subject key identifier: D2:5B:FE:17:B8:A9:D9:99:D3:25:A2:2E:F7:E2:14:FD:D6:65:69:AB
Authority key identifier: EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
Certificate issuer: /CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Certificate serial: 01A0CFDAF240FBB5B4030B3737D0448819A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
Manifest number: 09C8
Signing time: Wed 23 Sep 2026 20:00:27 +0000
Manifest this update: Wed 23 Sep 2026 20:00:27 +0000
Manifest next update: Thu 24 Sep 2026 20:00:27 +0000
Files and hashes: 1: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl (hash: XBrCmbPHRGN2e4sMhY/U1qrRblro8/Rv65zwzZ5vPvk=)
2: s7-y41zPRmkHcrILtIvpGUfe7SI.roa (hash: k/m4SqHR3oYDvv5JTtyJN297BXfGfqcf9sOF+T2TJHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:f2:40:fb:b5:b4:03:0b:37:37:d0:44:88:19:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Validity
Not Before: Sep 23 20:00:27 2026 GMT
Not After : Sep 24 20:00:27 2026 GMT
Subject: CN=d25bfe17b8a9d999d325a22ef7e214fdd66569ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:a0:bb:1a:ab:3b:c6:6d:0b:d9:37:1c:a5:
a4:bd:8c:86:25:6e:7e:93:96:4b:ae:27:31:90:9e:
ac:b6:68:66:9e:9f:8c:54:dd:4b:fc:2f:f3:02:7b:
05:e1:a5:98:d7:e3:6b:61:ed:21:19:de:37:0c:02:
d8:be:cf:0f:61:40:58:e3:49:e6:a6:e3:e8:55:c0:
bd:c1:52:e4:f6:aa:99:cd:39:22:53:e9:7b:4d:25:
e6:f3:c2:23:80:3c:0f:49:f6:2a:6c:42:f0:a7:9f:
b1:db:8c:f5:50:63:ae:42:65:0c:20:bf:b4:db:91:
fe:33:f3:d6:59:55:72:d1:20:f4:bb:6a:2f:0f:b3:
5a:77:f6:a1:ff:15:37:cc:b1:8a:41:a5:9f:b9:3c:
22:17:66:98:23:52:56:17:42:83:f1:a5:87:fa:73:
ba:79:d0:73:0c:38:1e:e8:84:12:04:72:fd:d5:d9:
c9:76:2e:d5:ca:06:d9:1b:d4:8b:b6:e5:e2:97:95:
6f:b5:a8:37:4b:2c:04:c8:a0:26:26:f1:a4:ce:38:
1d:10:0b:6e:3b:c0:77:f8:68:92:a8:ac:37:24:c6:
93:e4:08:e0:c5:c2:9c:2b:f4:9d:b7:88:6b:cf:72:
b2:0b:38:7b:25:8d:97:35:66:3f:88:f3:c3:1a:73:
80:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5B:FE:17:B8:A9:D9:99:D3:25:A2:2E:F7:E2:14:FD:D6:65:69:AB
X509v3 Authority Key Identifier:
keyid:EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:41:b2:79:d6:c9:80:c3:ec:fb:df:f8:34:d4:fe:6a:cd:4c:
5e:a7:45:31:84:9e:2b:03:62:9b:9d:69:60:07:73:f3:d1:bb:
c3:c1:f6:06:a6:7e:7d:d2:43:91:39:9c:c2:6c:b6:8b:90:6d:
23:d7:9f:f3:3c:83:57:9b:72:39:70:1e:e3:8e:fe:65:0d:09:
dd:9a:ba:2c:29:6c:eb:fd:fe:fd:a7:d5:ac:3f:8c:e0:21:31:
52:79:15:9e:34:91:c2:c3:e5:85:6f:05:c1:cf:6e:54:fc:38:
c0:e4:c7:a1:22:dc:6a:ae:9c:e8:58:0a:56:eb:8e:bc:69:e8:
4c:9d:cb:2e:1b:f0:87:02:ef:d0:f6:fe:14:cd:75:78:f3:bf:
a3:c0:9a:6c:f4:26:c8:36:40:4f:c7:11:36:ba:9c:b0:91:05:
bc:91:6d:7d:19:f3:09:96:2f:8d:c8:02:39:24:3c:c3:d3:c2:
45:e2:55:42:a4:1e:9c:5a:96:f1:c6:98:67:68:60:67:f2:e6:
d4:c4:35:02:89:a1:ad:fe:05:70:42:50:c8:6a:22:7a:4f:01:
0f:69:7c:3e:56:ef:0d:8c:05:7d:93:7c:ee:a5:63:8b:a5:39:
9c:12:28:18:3b:be:82:ec:60:bf:ad:5c:12:d2:03:35:c2:73:
ac:0d:cb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:07:25 2026 by rpki-client