Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
File: 7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json)
Hash identifier: GFjbiv7g4xn1ebmcbXukcQiTl/OUBqK3fCRQbfFX8YI=
Subject key identifier: 1D:B3:CE:E9:99:BF:89:6C:57:67:07:03:4A:D3:0F:3A:5D:60:28:E8
Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
Certificate issuer: /CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Certificate serial: 01A169B54B2911F6DEA25CE2A3DECB24EDBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
Manifest number: 0972
Signing time: Fri 23 Oct 2026 17:00:50 +0000
Manifest this update: Fri 23 Oct 2026 17:00:50 +0000
Manifest next update: Sat 24 Oct 2026 17:00:50 +0000
Files and hashes: 1: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: BatSI0ySMoK65jS0ij3GkTczh66IrfeeXpvRXFfKYHc=)
2: nIgfPArQS9tv1SFmbcff1iaV-ac.roa (hash: LmX0nAZ4dVW7pJ2OY2bERveF61BobTLkyj91uEdpXzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:b5:4b:29:11:f6:de:a2:5c:e2:a3:de:cb:24:ed:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Validity
Not Before: Oct 23 17:00:50 2026 GMT
Not After : Oct 24 17:00:50 2026 GMT
Subject: CN=1db3cee999bf896c576707034ad30f3a5d6028e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f1:61:90:be:0c:0e:ad:aa:9c:43:75:4c:12:
f4:ef:60:5b:61:18:6a:52:a1:7f:d1:88:d1:f1:5d:
35:00:f5:8b:fd:66:c6:5e:5a:de:b8:0d:86:b8:c9:
2f:ca:da:2f:ca:df:0e:6d:62:6a:31:d8:ca:aa:fe:
cc:7f:77:a1:9b:03:6a:15:24:83:b4:20:15:b1:27:
c4:a1:df:a2:ad:74:84:5c:82:77:03:48:c7:f6:d6:
f3:d5:49:4d:0a:8a:51:fb:ba:e5:d6:1d:8b:91:da:
47:ab:df:87:8c:53:54:3c:c0:7e:ae:fc:80:89:36:
26:52:1f:87:75:4e:d0:94:d7:99:25:e4:90:b1:23:
91:eb:c5:d5:1d:7d:ef:1f:05:be:f3:f1:e6:3e:39:
7c:c8:19:dd:d2:69:34:fb:43:19:15:c2:1b:f6:f8:
31:cf:f8:78:75:33:3a:38:88:08:fa:50:c1:21:24:
40:a2:e8:f1:6e:5b:ee:0d:b8:33:39:aa:11:98:dc:
9b:16:a7:24:25:38:6a:c9:5b:38:82:0a:40:88:a2:
bb:0f:db:e8:a9:53:6e:91:f2:b7:2e:7f:ca:2d:b6:
8c:92:c4:99:4d:9d:6f:ac:f8:10:bd:6e:c3:9f:7d:
7d:85:d8:eb:a2:bf:a3:03:a6:93:a0:08:2a:7e:45:
96:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B3:CE:E9:99:BF:89:6C:57:67:07:03:4A:D3:0F:3A:5D:60:28:E8
X509v3 Authority Key Identifier:
keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b4:4b:be:86:e0:ad:1c:a1:e9:58:90:33:0a:d3:b0:bc:57:
b0:5d:d5:99:11:2f:e3:b6:bf:b8:d3:08:76:54:22:bb:0e:b7:
a0:9c:29:08:16:b8:ad:54:f1:72:99:47:52:6b:b1:36:8b:82:
7f:45:9f:ab:c7:b1:83:0f:6f:aa:fd:fe:4a:1e:e6:3a:bf:6c:
31:8e:40:13:c4:7a:be:d8:13:5d:e4:0a:66:09:79:59:3b:62:
61:29:6a:ac:6f:8d:bc:bd:22:48:5a:a7:ec:6a:86:fe:0c:9f:
2f:02:92:44:f5:6b:77:a2:d0:0f:13:97:9d:eb:bd:50:16:f4:
7f:03:81:69:50:cf:b4:6a:b3:c0:df:2e:31:f8:65:6d:ff:28:
64:6b:0b:e8:08:63:0c:94:2e:38:7c:05:7c:1c:83:37:af:c9:
29:34:35:11:02:84:29:ab:85:73:73:3c:28:5f:cc:1e:ab:71:
53:14:ac:c7:d1:f2:bd:02:b4:ff:79:7c:93:9a:d6:15:e6:36:
e0:a5:1d:91:9f:8b:2c:92:90:9e:a5:7b:7a:a4:0b:2d:f8:44:
37:30:41:bd:a4:f5:4d:02:9f:8f:e5:43:c5:0f:93:79:2c:78:
67:aa:32:ed:63:08:81:cf:31:c8:78:aa:0f:ce:56:ca:1f:81:
6f:10:c9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:48:20 2026 by rpki-client