Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
File: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft (raw, json)
Hash identifier: eq7U7mMPMsxVFJCUeEIxg7fYF3ZrmvrWOWhsz6De+Dc=
Subject key identifier: E4:A8:47:58:F9:1D:44:DF:1E:78:E9:A3:D0:7D:CD:8D:3C:64:E9:38
Authority key identifier: ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
Certificate issuer: /CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Certificate serial: 01A13E950494A33DA4F3553BF05EB7F39ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 08:01:55 +0000
Manifest this update: Thu 15 Oct 2026 08:01:55 +0000
Manifest next update: Fri 16 Oct 2026 08:01:55 +0000
Files and hashes: 1: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl (hash: wTURGx+jNSNwIU5bS5+stfqn9ddLqKf2MDP4LR6fWnM=)
2: a7s6-pLwoiyrezAHz-CEXmLAi28.roa (hash: nhlHfUNEeKi77QockWWhGxaJn7C3J9whAR6snvDoVtM=)
3: ds5dJRDzI4acHa9XOzintQa8R70.roa (hash: NSHUOHDDYeCqlj4/tHZIL/eLYAJljLX9kfG+BuqGIqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:95:04:94:a3:3d:a4:f3:55:3b:f0:5e:b7:f3:9a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Validity
Not Before: Oct 15 08:01:55 2026 GMT
Not After : Oct 16 08:01:55 2026 GMT
Subject: CN=e4a84758f91d44df1e78e9a3d07dcd8d3c64e938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0b:0a:e5:94:c2:32:7d:5a:09:f9:22:a1:7c:
5a:93:f6:df:d1:75:57:08:0d:2d:b2:e0:fa:3e:87:
29:b3:ac:ef:03:6a:a3:a7:3d:fe:cc:99:78:51:a4:
2b:51:dd:0b:b0:85:23:f9:72:9e:9c:50:94:24:c9:
19:14:f5:01:7b:fe:3c:80:65:1f:bd:4b:9a:ab:f8:
83:d4:b3:f3:79:1a:c6:23:15:c9:66:e7:32:4a:8a:
24:cb:10:31:f8:07:56:4e:a4:6d:dd:1f:e2:5c:29:
fe:54:7b:29:f0:99:e4:9c:5d:56:cf:6e:18:6f:2a:
be:20:6d:65:9c:1e:90:56:e4:5d:1c:f2:15:08:6d:
37:73:91:64:e5:84:8d:c9:59:f4:58:49:57:c3:0c:
8b:d4:f5:76:53:ac:bb:45:10:ab:ae:6d:1b:5d:c2:
42:fc:6f:c7:82:51:51:76:b2:00:74:63:f0:ea:1f:
37:99:96:2d:c6:3a:02:22:c1:c0:d9:2a:74:8b:af:
cf:59:17:0c:02:19:30:b4:19:9f:9a:2a:02:ad:23:
9c:5b:4d:da:de:e3:90:51:9f:5a:a4:35:b9:16:f5:
5f:cc:61:40:e4:9e:c7:ac:0f:6e:12:cb:c8:fa:d6:
6a:56:69:bb:a1:95:11:27:66:7d:a2:67:03:72:5e:
d1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A8:47:58:F9:1D:44:DF:1E:78:E9:A3:D0:7D:CD:8D:3C:64:E9:38
X509v3 Authority Key Identifier:
keyid:ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:59:d5:a9:5b:ab:0a:87:bc:cb:8e:d3:84:30:d1:06:d5:13:
45:52:fe:4d:67:0d:3b:f0:be:9f:27:21:21:d4:94:25:0b:b4:
2d:ab:10:c2:48:68:fc:12:86:7e:bd:7e:d8:27:47:da:5f:c3:
ed:a3:82:38:96:e4:e9:cd:cb:3d:63:cf:b9:23:bd:15:be:18:
1e:45:43:c4:23:aa:28:8b:8e:3a:d1:aa:f5:86:4a:65:94:35:
c3:cf:1a:08:b7:4b:19:f1:b8:fc:f8:86:93:0c:30:f7:a1:82:
94:76:41:52:e1:6b:e9:45:cd:9d:b3:24:a3:1c:77:fc:75:8f:
69:39:a1:6b:a4:43:62:8a:37:c7:21:87:b5:92:20:2b:40:c6:
71:1a:10:b8:5d:40:eb:a8:42:f6:de:48:a1:1a:3b:df:f5:7d:
4a:17:49:57:26:b1:e5:a1:f6:0c:c7:8b:b0:2b:75:a9:b9:0b:
a9:77:e6:cb:1c:9c:37:53:44:ce:a6:f5:4b:46:6d:83:ca:15:
33:47:ed:38:7f:49:38:0e:41:9a:7e:5d:e6:90:c0:7e:26:c6:
ab:8c:f3:52:f6:1e:41:24:32:e2:f2:e1:ea:6f:80:8d:26:0c:
1e:23:cc:d4:33:1c:9e:42:31:91:4a:5e:58:54:ab:a9:0d:a6:
72:a8:30:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:23:38 2026 by rpki-client