Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/9ba5fa-ca9b-4f99-9ce5-0870c19ed7f8/1/7OuzK9a4SwHPpNQnfUm7dS8W1IA.mft
File: 7OuzK9a4SwHPpNQnfUm7dS8W1IA.mft (raw, json)
Hash identifier: IY6svuAGNsS1aSzCZfnGGvi0Oz7qjk2N6RWsSU1WacM=
Subject key identifier: 58:C8:30:6C:EE:3A:8F:F9:76:60:60:69:15:64:F2:18:A5:0B:40:B9
Authority key identifier: EC:EB:B3:2B:D6:B8:4B:01:CF:A4:D4:27:7D:49:BB:75:2F:16:D4:80
Certificate issuer: /CN=ecebb32bd6b84b01cfa4d4277d49bb752f16d480
Certificate serial: 01A0CBC6FC8259B17EBBE5534675149B13CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OuzK9a4SwHPpNQnfUm7dS8W1IA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ba5fa-ca9b-4f99-9ce5-0870c19ed7f8/1/7OuzK9a4SwHPpNQnfUm7dS8W1IA.mft
Manifest number: DE
Signing time: Wed 23 Sep 2026 01:00:10 +0000
Manifest this update: Wed 23 Sep 2026 01:00:10 +0000
Manifest next update: Thu 24 Sep 2026 01:00:10 +0000
Files and hashes: 1: 7OuzK9a4SwHPpNQnfUm7dS8W1IA.crl (hash: n0DUibproQA9FSYs09wNBKkYQXaJ4J4sUrC0EawmQXw=)
2: qWZEFT_OxQeqd6Y0OYCdMhrVv30.roa (hash: g41dSquqqdgjaDzTxJvTsOMXpBmPaLOtw6LNHhJmIbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ba5fa-ca9b-4f99-9ce5-0870c19ed7f8/1/7OuzK9a4SwHPpNQnfUm7dS8W1IA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9ba5fa-ca9b-4f99-9ce5-0870c19ed7f8/1/7OuzK9a4SwHPpNQnfUm7dS8W1IA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7OuzK9a4SwHPpNQnfUm7dS8W1IA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c6:fc:82:59:b1:7e:bb:e5:53:46:75:14:9b:13:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecebb32bd6b84b01cfa4d4277d49bb752f16d480
Validity
Not Before: Sep 23 01:00:10 2026 GMT
Not After : Sep 24 01:00:10 2026 GMT
Subject: CN=58c8306cee3a8ff9766060691564f218a50b40b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3d:01:46:16:4b:2e:e8:8f:f3:84:ca:dc:b0:
c4:44:18:a3:71:17:a4:40:fa:bc:b5:d9:ca:23:00:
9f:6f:3a:9d:b0:02:67:32:1d:ef:a3:21:92:66:b6:
23:8c:54:70:36:1c:65:84:ea:54:e1:36:5d:8b:86:
f7:09:13:a2:a9:f3:04:59:78:62:de:c7:90:d9:5d:
62:a7:cb:b6:2b:38:80:68:b6:d2:a2:e0:37:27:23:
37:8e:25:7a:86:a0:5f:c9:51:b3:d9:0b:ae:55:c6:
d6:a0:dd:00:91:43:49:99:c1:d5:d5:0b:a2:f6:70:
75:00:ef:71:b7:6c:48:a5:2c:e7:29:b4:4b:b2:05:
89:24:97:35:4e:a7:91:88:a3:fd:f2:4e:91:50:23:
be:7e:43:70:a7:43:eb:17:07:97:41:b2:4a:6c:33:
0b:22:b4:2a:c1:24:94:46:71:bc:58:5a:d8:59:c1:
c5:6c:6a:ca:a3:c6:be:3d:a6:f4:49:64:39:65:53:
f4:ba:68:0f:1f:ca:dc:36:d4:e7:3a:ac:78:50:11:
da:67:9c:9c:6c:5b:e2:64:de:a1:2e:e1:f6:61:a0:
ce:bd:7f:3d:bd:5f:f0:69:62:1e:98:78:b9:65:e3:
63:3a:ad:94:6e:73:b1:36:91:ab:11:08:93:2d:a8:
0b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C8:30:6C:EE:3A:8F:F9:76:60:60:69:15:64:F2:18:A5:0B:40:B9
X509v3 Authority Key Identifier:
keyid:EC:EB:B3:2B:D6:B8:4B:01:CF:A4:D4:27:7D:49:BB:75:2F:16:D4:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OuzK9a4SwHPpNQnfUm7dS8W1IA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ba5fa-ca9b-4f99-9ce5-0870c19ed7f8/1/7OuzK9a4SwHPpNQnfUm7dS8W1IA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ba5fa-ca9b-4f99-9ce5-0870c19ed7f8/1/7OuzK9a4SwHPpNQnfUm7dS8W1IA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:89:69:2e:40:0e:f7:1b:a1:c8:f0:c0:4c:db:ec:d3:48:71:
de:ed:23:f3:65:e5:a0:f2:4b:4a:7a:87:63:3d:4b:09:6c:91:
e3:1a:61:5d:8d:ae:22:cb:d1:58:72:e7:cc:ab:27:68:ec:38:
b4:ab:b2:3c:84:8b:7c:44:f0:78:65:c2:46:dc:a7:34:5c:59:
47:64:50:e8:5d:0a:83:1a:89:f9:2b:f0:3d:af:4c:fd:2b:9c:
39:ba:3b:42:7e:1b:51:cb:77:ad:fc:53:c8:41:33:45:a3:f1:
37:ea:f4:d2:30:71:0d:40:56:01:fc:b6:d7:7c:44:dd:1a:e1:
30:55:3c:c7:28:8a:91:66:d6:2b:96:b4:66:e3:aa:fa:04:63:
84:30:f3:47:09:67:4b:ea:df:9d:26:0c:57:ce:8e:70:a8:58:
e4:a4:76:dc:2f:67:b2:d1:40:d8:85:01:1e:15:45:8b:61:22:
10:09:fb:c1:74:50:b5:b9:45:3f:86:d9:20:e5:03:23:d6:2b:
90:4e:00:d7:30:17:d9:84:5f:bf:e8:fb:2a:15:6e:d9:fb:6f:
40:44:16:72:c6:64:5b:46:e5:95:29:f5:9b:8a:c8:9b:27:01:
1d:c1:5f:82:82:50:b0:28:bb:cc:96:2b:ae:01:7f:de:78:ad:
b4:eb:e8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:07:56 2026 by rpki-client