Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
File: 7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json)
Hash identifier: fyMzIT1bbf93UHoIY/Juo3WLo3eOk3Ilq3kgTr9V2xM=
Subject key identifier: 0F:BC:92:E8:11:11:81:6E:65:A9:A0:E0:B2:C9:E6:81:82:4B:91:A4
Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
Certificate issuer: /CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Certificate serial: 01A165D8E40ECA0ED9AE0D9686FBE551E652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
Manifest number: 0970
Signing time: Thu 22 Oct 2026 23:01:15 +0000
Manifest this update: Thu 22 Oct 2026 23:01:15 +0000
Manifest next update: Fri 23 Oct 2026 23:01:15 +0000
Files and hashes: 1: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: u3euzexKA2Ozy8aqJwkrwxEPJjTt431Z18j/gI61vp0=)
2: nIgfPArQS9tv1SFmbcff1iaV-ac.roa (hash: LmX0nAZ4dVW7pJ2OY2bERveF61BobTLkyj91uEdpXzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 23:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:d8:e4:0e:ca:0e:d9:ae:0d:96:86:fb:e5:51:e6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Validity
Not Before: Oct 22 23:01:15 2026 GMT
Not After : Oct 23 23:01:15 2026 GMT
Subject: CN=0fbc92e81111816e65a9a0e0b2c9e681824b91a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:46:fa:1d:c8:a9:d6:54:1f:85:f9:0e:34:c2:
43:7e:2f:a2:23:ac:74:3b:f8:cc:47:3c:31:9f:59:
bc:d8:de:3b:5c:5f:85:43:e5:5b:1e:2c:15:7d:dc:
dd:39:88:08:3b:5e:d7:20:7d:92:fb:5a:d6:03:1e:
ba:15:ae:c7:6e:79:f1:12:f1:5e:1e:21:2f:b4:12:
51:f0:2d:a5:75:bc:cf:6a:47:40:03:88:bf:ee:9b:
c7:41:13:88:8a:60:5b:b2:af:1e:dc:fc:a3:df:5c:
66:f6:e4:2c:eb:89:82:0c:4a:47:dc:9c:26:a8:65:
0e:1a:f7:2f:58:92:58:82:8f:bf:87:30:9f:33:4e:
74:bd:3d:19:42:81:ff:4d:bb:38:c3:1c:38:4b:05:
46:fe:ba:26:9b:23:8d:d6:57:bd:1c:63:1c:ba:ad:
a7:b2:bd:54:96:ff:4c:0a:e7:9b:61:c9:8a:93:d4:
9b:c6:36:d5:7e:b8:c4:b1:ae:3e:21:71:c3:6b:19:
89:2c:d3:59:c3:75:87:b4:b2:30:6f:e7:1d:a6:da:
9a:86:3b:68:46:6a:4b:8f:b8:29:db:dc:77:d0:1b:
71:65:f8:af:3b:a2:1b:7f:4f:ab:d6:ff:f9:31:a9:
00:31:f3:3e:6e:2c:f0:0a:18:f7:4f:80:4b:8b:df:
84:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BC:92:E8:11:11:81:6E:65:A9:A0:E0:B2:C9:E6:81:82:4B:91:A4
X509v3 Authority Key Identifier:
keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f6:aa:44:a7:d7:e7:f1:ea:0d:26:e5:04:90:39:27:e0:0e:
9b:ff:f2:a6:02:cf:e9:80:ba:df:d8:43:5a:d3:f3:bb:70:f5:
89:6f:ef:bc:07:f7:29:23:4b:a8:e7:ba:84:89:bf:6f:e0:04:
da:23:c3:35:9b:4e:05:cc:22:f1:e4:68:5e:d3:fb:b3:38:6b:
50:b2:f0:f9:df:ae:76:47:8c:ba:ea:f2:27:d0:2c:10:63:56:
bf:31:c8:37:51:53:f2:0b:3c:0a:6e:c1:d2:d3:ca:07:1a:0c:
48:ff:b2:a7:1c:ed:6c:82:44:c8:ac:66:e7:bc:ce:e5:d7:4f:
80:04:99:48:a4:d2:ef:86:b4:24:29:73:e5:0e:94:55:e7:fc:
b6:f7:68:35:6f:c5:b1:1b:28:df:45:4a:ab:e1:49:3e:1d:38:
34:bc:09:f9:f9:f7:a9:48:28:ba:27:e5:83:c9:43:c1:e4:ff:
4d:6b:fd:2c:63:b3:9b:ca:cb:ba:5b:12:64:cd:d9:f4:c7:1e:
48:01:d0:c7:79:13:ca:02:45:d1:3b:79:57:e0:39:5d:62:58:
70:5f:c6:f3:12:bc:81:ef:36:61:86:0c:20:ef:0f:8b:62:89:
aa:82:64:d9:a2:d7:90:a6:fc:77:19:5a:f4:e7:dd:4e:7c:7c:
18:cd:42:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 09:53:29 2026 by rpki-client