Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
File: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft (raw, json)
Hash identifier: jo5S+P9JFR+beX/MTb01E2/bkxvZo5U1dZn3/WcaI7k=
Subject key identifier: DA:E1:E9:F4:55:65:59:6C:7B:D4:67:9E:15:8B:35:C0:EE:A3:91:F3
Authority key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
Certificate issuer: /CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Certificate serial: 01A08CE92E502A9F47A9708367E9CC3E2035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
Manifest number: 18FF
Signing time: Thu 10 Sep 2026 20:01:27 +0000
Manifest this update: Thu 10 Sep 2026 20:01:27 +0000
Manifest next update: Fri 11 Sep 2026 20:01:27 +0000
Files and hashes: 1: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl (hash: /awQo4gP95nLGS3h/EBmDc8pmlDTxENc92AWEwkhl6Q=)
2: m5yvHicFnXm_Esifvf9nJ43HYjM.roa (hash: 2UG9meAu50+1K4RYnFNAIuouwlkL5D4Ox6KRSauQKrc=)
3: rI-1eY7TtxFeY70hEXPRG9r4SUU.roa (hash: 3yzUSLFgFbapDsLKTnHWd+eZDAnjuQ4IsvzD3dpVDZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e9:2e:50:2a:9f:47:a9:70:83:67:e9:cc:3e:20:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Validity
Not Before: Sep 10 20:01:27 2026 GMT
Not After : Sep 11 20:01:27 2026 GMT
Subject: CN=dae1e9f45565596c7bd4679e158b35c0eea391f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:28:2b:6f:f6:a6:8f:24:26:56:be:a1:3b:92:
23:d0:a9:df:81:17:7c:6f:70:0f:fd:4d:8f:57:f0:
cb:aa:81:37:f4:19:89:b1:a4:0b:3c:aa:83:47:c3:
31:8e:f0:ec:cc:f4:30:46:a9:ca:4f:9b:4d:a7:a4:
cc:6b:69:47:56:6b:23:e7:b8:69:3e:ba:cd:b1:f7:
5f:47:76:ba:2e:a7:0b:4d:9b:4a:17:d8:bf:81:b5:
1b:43:94:65:14:2e:40:c9:3d:4d:03:42:e8:26:43:
f8:d1:13:8f:b8:84:59:e2:d4:c5:0a:08:b9:86:8a:
d4:da:c7:bb:0d:3b:ee:90:6e:1c:b3:b7:d0:09:7d:
92:72:3c:51:09:ab:8e:b1:e7:fb:8e:65:47:07:d2:
5d:31:45:25:38:65:40:0f:23:7d:a6:85:d3:6d:ec:
3a:bb:82:30:5c:0a:be:b4:36:1c:77:b7:31:64:7f:
0c:14:df:7f:70:1e:88:9b:9a:fe:73:8e:b2:25:a0:
72:e1:2f:0b:2d:28:9a:bf:99:a5:de:3f:a0:d0:f7:
6a:4e:4b:cf:aa:ab:11:1f:5c:b9:21:ea:cd:ff:7f:
41:30:09:8d:f5:83:6d:9a:4c:df:69:9c:54:b5:41:
9e:fe:b6:de:50:09:83:59:91:d1:43:04:bc:f1:d1:
6e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E1:E9:F4:55:65:59:6C:7B:D4:67:9E:15:8B:35:C0:EE:A3:91:F3
X509v3 Authority Key Identifier:
keyid:EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b3:04:6a:97:72:01:42:f6:dc:c6:a3:7a:c4:cf:a6:0d:70:
5f:49:d9:f6:8e:75:48:2c:f5:ee:09:e8:79:a6:4a:62:fd:53:
09:61:82:0a:fe:61:15:4d:29:76:b0:4f:38:6d:d8:27:c4:af:
e2:7c:bf:a5:dd:18:28:f2:52:bd:89:a6:66:9e:d5:3d:a8:62:
10:7f:5a:ae:b1:20:64:2c:eb:f8:f3:b4:9b:15:a3:4b:cc:b8:
26:28:34:d3:e5:45:81:0d:4d:c8:50:83:71:54:32:33:48:ef:
45:c2:38:65:35:79:e9:6f:9e:4f:de:57:4b:65:27:ca:05:35:
d6:f6:04:d1:0c:bc:26:05:2c:82:b3:30:07:d7:6a:33:cc:62:
cf:92:b9:7a:9e:cd:69:f1:a7:98:0a:c2:0e:ca:92:06:fb:57:
f3:d0:62:82:08:cb:93:c0:c7:ee:bc:89:bf:56:fe:9c:73:d0:
b1:f6:fd:76:e9:9c:22:76:4a:57:62:09:bd:86:3d:11:02:db:
20:69:75:75:12:e2:75:be:ff:15:47:7a:c3:24:98:7e:e2:67:
5e:56:08:4e:01:d9:18:14:36:10:ba:36:68:0b:cc:db:0c:44:
73:c4:63:c6:d1:4a:fb:1d:1d:5d:0a:3a:8b:85:4d:dd:17:da:
02:b0:b6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:35:39 2026 by rpki-client