Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
File: 7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json)
Hash identifier: lCSZAKa65nfbtojHWe0+/ifgjGLhSkRrIzwLD+A9SFA=
Subject key identifier: A3:4C:11:7E:FF:85:A7:B6:C1:92:04:59:2B:A1:6B:3D:99:03:BC:69
Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
Certificate issuer: /CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Certificate serial: 01A06F16090A4A0766BED079D7AB29B3DB00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
Manifest number: 08F0
Signing time: Sat 05 Sep 2026 01:01:50 +0000
Manifest this update: Sat 05 Sep 2026 01:01:50 +0000
Manifest next update: Sun 06 Sep 2026 01:01:50 +0000
Files and hashes: 1: 3G5FaVllDbETSk9fskWR8haKEKw.roa (hash: nANvlaGTj6d8YAx0Gn/UgJV6ez/NG9UwrTH42g969HU=)
2: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: Qj5B+5sfNQ0g6SkENxsZshZZBbAgp0f1I1jDD0JrNE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:16:09:0a:4a:07:66:be:d0:79:d7:ab:29:b3:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Validity
Not Before: Sep 5 01:01:50 2026 GMT
Not After : Sep 6 01:01:50 2026 GMT
Subject: CN=a34c117eff85a7b6c19204592ba16b3d9903bc69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:b1:f2:dd:56:1e:95:7f:84:9e:19:e1:80:
71:9c:ef:5d:24:2b:6c:d2:3f:21:bc:50:f7:a8:01:
16:3c:08:b6:e6:9e:03:23:e4:1e:54:20:05:ea:3b:
13:74:64:e6:40:5f:1a:0d:b7:c8:92:67:d3:59:17:
b9:48:32:35:5e:d3:c4:0f:b7:f9:14:16:f3:a6:b8:
57:9c:3f:8a:dd:e2:7b:08:be:1d:4d:70:1f:5e:07:
39:7f:92:78:5c:31:74:cd:94:97:2c:29:89:52:d1:
d9:54:12:77:b9:d8:86:3d:da:fe:3f:8f:4d:c0:a7:
f4:d5:bd:80:88:05:e3:05:0a:4d:b4:12:38:07:68:
87:35:40:16:c4:ce:b8:cb:bd:18:9b:84:e7:2a:48:
29:41:1e:c4:3f:88:e1:7f:70:d8:c1:c2:89:c3:10:
5f:e9:e8:65:33:07:8c:77:8e:85:99:a7:42:20:23:
e6:ee:0a:6c:5a:39:89:30:98:8c:0a:ae:d4:c1:1a:
e7:eb:67:bb:07:f4:f6:4a:7d:3c:ed:da:e9:81:d2:
5f:5f:f8:ba:e3:4d:94:80:fb:4f:83:52:6e:58:2a:
8c:f1:88:10:0a:33:51:d2:55:2f:e6:d8:79:ac:a5:
a3:c6:f5:f0:18:18:5d:ae:83:9b:78:38:95:f5:79:
0e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4C:11:7E:FF:85:A7:B6:C1:92:04:59:2B:A1:6B:3D:99:03:BC:69
X509v3 Authority Key Identifier:
keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ea:8f:d6:9d:32:76:db:2e:bf:50:17:68:1a:86:eb:46:50:
6d:47:5e:51:75:95:11:c1:3d:b1:34:d6:4b:cb:8e:c9:54:96:
7b:ff:a1:26:d0:1e:41:31:d4:6b:0b:15:12:f0:38:bb:3d:66:
89:13:82:72:68:84:0e:7b:6b:35:9a:37:f9:3d:5e:06:a5:50:
09:fe:d7:e7:97:d1:cf:4b:6d:cf:56:82:01:bb:84:63:08:c5:
d8:56:31:1c:54:9f:fd:8c:0e:7b:b3:8b:18:05:91:fa:fb:8b:
67:83:b3:b5:2f:3a:c7:6d:3f:cd:86:68:09:4d:b2:19:14:5e:
c5:f1:79:96:dc:2c:a3:20:1e:57:f5:e3:ed:54:7b:7c:49:90:
ae:e8:8c:99:c3:02:10:9a:02:81:72:6f:b4:5d:fb:34:1c:53:
71:b5:ff:57:bc:ad:0b:88:8a:fd:49:10:69:20:73:6d:33:7a:
55:06:37:52:78:5f:28:8b:6f:d1:c1:f1:ad:6b:3c:06:51:21:
17:e3:c4:c4:46:96:1f:6c:7a:a8:17:f8:d0:96:d8:cc:07:2f:
91:5f:72:88:e8:3a:94:74:88:3c:09:c8:84:7a:74:93:27:81:
29:be:8c:ef:c2:c0:f1:93:dd:73:23:c9:6f:e6:3c:e0:e7:09:
9e:bd:5e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:01:44 2026 by rpki-client