Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft
File: 7B-pzoPKFB0pqr7sAMX598upk8Y.mft (raw, json)
Hash identifier: RrE3T+eba+z8tGCP2ZPvQFqVjjzJNiAQcnKeplOJIew=
Subject key identifier: 60:F5:BE:6D:32:8A:02:7C:75:C2:A0:F4:DF:DB:63:7A:E8:81:3B:CD
Authority key identifier: EC:1F:A9:CE:83:CA:14:1D:29:AA:BE:EC:00:C5:F9:F7:CB:A9:93:C6
Certificate issuer: /CN=ec1fa9ce83ca141d29aabeec00c5f9f7cba993c6
Certificate serial: 01A08AFA39789F7A5590FC6410362B8C2E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7B-pzoPKFB0pqr7sAMX598upk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft
Manifest number: 014A
Signing time: Thu 10 Sep 2026 11:00:49 +0000
Manifest this update: Thu 10 Sep 2026 11:00:49 +0000
Manifest next update: Fri 11 Sep 2026 11:00:49 +0000
Files and hashes: 1: 7B-pzoPKFB0pqr7sAMX598upk8Y.crl (hash: UkEBJ04lEoTJ4Dcn3adiQBx9dhUgPPIoth8SkzM67Ug=)
2: lty9FU9-lvCivlXe3WOpvJPkZAU.roa (hash: w7emHClyLxjQcPa4VKPJS2kQf8ZhF6GvGuiuy4vd4PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7B-pzoPKFB0pqr7sAMX598upk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:39:78:9f:7a:55:90:fc:64:10:36:2b:8c:2e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec1fa9ce83ca141d29aabeec00c5f9f7cba993c6
Validity
Not Before: Sep 10 11:00:49 2026 GMT
Not After : Sep 11 11:00:49 2026 GMT
Subject: CN=60f5be6d328a027c75c2a0f4dfdb637ae8813bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:44:b4:ca:ed:92:e6:82:c6:a1:5e:9f:ea:
63:6e:45:8a:9f:ab:39:53:63:bd:28:22:ad:e8:b2:
8d:7e:86:b8:66:24:b9:c7:af:9c:c5:78:38:e9:ed:
ac:07:2f:ce:c2:dc:99:2c:68:38:21:36:ba:ec:54:
e6:32:02:35:0b:8f:7e:58:6c:63:92:76:97:85:d0:
ae:81:e0:d9:39:72:5d:aa:90:df:ca:50:60:02:a0:
4b:b5:83:62:90:36:de:0d:54:77:63:43:63:96:f7:
f0:48:ee:42:f7:3d:53:7b:35:7f:53:7e:04:bf:6f:
c2:29:4d:97:2a:fe:fc:3d:e7:2c:96:b4:3a:fe:37:
0b:36:f8:1d:58:31:ac:af:4e:62:3b:1e:5f:b9:fe:
7a:2d:9c:c1:fa:c2:85:98:69:71:20:19:1d:80:ec:
8b:f2:ff:91:eb:da:d2:b8:38:2f:32:c1:43:04:2f:
be:0a:ed:d0:fc:bc:60:b8:0b:1c:6d:16:ef:54:ac:
9e:91:fa:8b:76:64:46:5b:ac:a8:00:6c:06:89:b1:
98:93:d8:42:32:a9:6c:3b:a4:d7:7f:bd:4e:80:81:
11:35:de:73:3d:12:87:d2:eb:6a:f6:8e:b1:89:d0:
d5:ac:af:18:23:22:5d:45:fe:68:71:53:d3:d7:c3:
ec:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F5:BE:6D:32:8A:02:7C:75:C2:A0:F4:DF:DB:63:7A:E8:81:3B:CD
X509v3 Authority Key Identifier:
keyid:EC:1F:A9:CE:83:CA:14:1D:29:AA:BE:EC:00:C5:F9:F7:CB:A9:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7B-pzoPKFB0pqr7sAMX598upk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e3:b1:72:af:36:de:5d:4d:19:f7:54:df:05:70:28:ff:b3:
ad:5d:31:06:07:6a:bc:c0:ed:7a:02:59:7d:51:e8:14:75:a3:
ba:68:50:4b:18:4c:7e:94:f4:2d:02:d0:d3:1b:7a:e0:a7:cf:
89:b0:12:03:9d:5f:24:55:5a:8a:18:9e:42:96:73:fe:2e:52:
e9:c5:5d:2e:c8:85:29:78:43:b8:ba:c3:7d:b4:c5:20:aa:34:
63:67:4c:78:f9:8f:bd:2f:80:32:b5:93:64:fa:11:a2:7a:9d:
5b:6b:de:c2:fe:17:82:e8:c2:7a:d0:6c:9d:8c:98:b2:44:38:
f2:76:e7:57:8c:e6:ba:17:b9:2f:37:a7:6e:f4:9b:e2:59:80:
70:d3:4a:c3:90:09:21:82:a7:c4:42:62:45:d6:f7:63:68:9c:
42:5e:e7:6c:89:6a:a1:a3:e1:6f:fe:0c:d2:03:c4:33:77:d3:
ff:15:d3:7b:56:64:5d:1c:c8:07:10:17:f6:4d:49:2a:7d:73:
ed:7f:b9:7a:f1:67:ee:9e:a8:51:fd:62:91:ed:bb:15:20:21:
57:0d:b4:ab:43:5a:3d:79:50:93:58:7b:7d:2a:f8:f0:18:b8:
b6:05:b8:11:8f:31:d2:00:bd:57:a8:ff:e7:35:6b:a4:24:d9:
a1:b8:e6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:56:49 2026 by rpki-client