Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
File: 7_ZbcAAg4w1z07HfeCceVD4wjzo.mft (raw, json)
Hash identifier: KV92GHahpVxBnnEdLIZ/zDkNIYEm0rmfauCOZxF9MlY=
Subject key identifier: 13:1D:FE:E0:B4:90:16:29:57:09:E6:6D:65:89:62:FD:3F:EC:CF:3C
Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
Certificate issuer: /CN=eff65b700020e30d73d3b1df78271e543e308f3a
Certificate serial: 01A13DB7DBB0ACF46A4774997AF867E3488B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
Manifest number: 120A
Signing time: Thu 15 Oct 2026 04:00:21 +0000
Manifest this update: Thu 15 Oct 2026 04:00:21 +0000
Manifest next update: Fri 16 Oct 2026 04:00:21 +0000
Files and hashes: 1: 7_ZbcAAg4w1z07HfeCceVD4wjzo.crl (hash: anZVpdnsbw7qH2//CngHl0eos4P8aOYRSPc68WrDj/Q=)
2: xWJAqfrPXr4KnkU7Qd4lSzlkp8o.roa (hash: ceeD+cwy4G4/W2RDlhQiQMMWpwCMIwxk/08X/W6eMjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:db:b0:ac:f4:6a:47:74:99:7a:f8:67:e3:48:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a
Validity
Not Before: Oct 15 04:00:21 2026 GMT
Not After : Oct 16 04:00:21 2026 GMT
Subject: CN=131dfee0b49016295709e66d658962fd3feccf3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:4e:30:11:02:f2:e0:b7:26:b6:87:f2:36:
95:06:12:a0:e4:9a:63:10:4a:01:ef:4a:6f:72:fa:
de:15:43:a7:b4:12:93:f7:07:63:8d:19:e6:15:81:
7c:54:34:ba:c7:7e:96:82:bb:8d:f7:36:ef:7d:85:
89:25:07:64:9c:e3:2f:88:4c:74:bb:7e:1e:26:89:
c7:39:8a:89:c7:84:fa:eb:94:db:ba:1d:54:4d:4e:
8f:e4:ec:fa:50:c7:ae:b7:68:59:89:cd:36:0d:23:
7a:e1:39:bf:89:70:45:4a:4d:88:ad:25:21:39:23:
8e:e5:a0:47:f4:4c:ec:8e:c2:a1:3d:e0:9e:c2:bd:
60:4e:07:2e:53:d5:1a:1d:73:4b:48:69:83:a1:1c:
24:c6:be:22:14:1d:a3:63:01:bd:3e:41:31:07:81:
cc:50:6d:b6:fa:ef:2c:37:35:50:0e:26:6f:db:7f:
b5:49:83:93:68:2b:82:e8:d0:46:5b:e6:87:bb:b3:
89:04:85:c7:c8:e5:23:91:93:c5:15:3c:7a:29:95:
d0:31:d1:83:26:b1:5f:f1:b3:8d:85:d4:54:b7:3c:
fe:e4:30:5d:36:7e:40:88:d4:19:31:6e:ca:79:a0:
e3:1a:33:c3:c9:7a:c1:fa:bd:8d:c4:bc:4d:97:5b:
54:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1D:FE:E0:B4:90:16:29:57:09:E6:6D:65:89:62:FD:3F:EC:CF:3C
X509v3 Authority Key Identifier:
keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5b:f4:87:a5:84:59:6d:4a:01:2c:fa:8f:6b:9d:5b:57:b7:
45:72:14:20:5e:8b:8b:30:81:71:1c:60:0e:00:ae:74:17:ed:
82:8f:18:1e:4f:8d:a7:ea:fb:21:0c:3e:d2:b0:b2:25:24:e0:
f2:19:2a:5a:c3:52:6f:13:03:56:b7:f4:9a:e2:4b:4b:d0:1a:
cc:2f:dd:4a:1f:07:4b:08:7c:66:e4:d5:2c:95:7d:b4:9a:a8:
b6:d0:46:be:a6:cc:02:fc:a4:68:0b:6c:2b:56:cc:26:bf:0e:
d8:e0:e8:d4:43:bf:c0:f9:5e:6e:2c:24:93:f7:20:48:60:c0:
26:52:1c:42:04:bc:8a:26:a4:a7:15:13:31:b5:d6:e5:d6:12:
74:7b:a0:ba:c4:4e:cb:44:5f:65:4a:2a:30:30:4b:a1:92:14:
2d:6b:60:77:e9:ae:5f:ce:f4:3d:d6:d9:99:fb:bd:44:31:1a:
3a:e0:fd:4c:18:95:72:4e:2a:d8:1f:3c:d1:0e:81:63:71:be:
e5:7b:29:82:e1:2d:2b:c7:0a:f0:c7:0c:af:d1:8c:db:d3:9d:
91:25:7f:9e:01:08:29:bc:14:81:27:ab:66:45:bb:51:47:87:
8c:d5:a8:5d:6e:75:43:b3:6a:be:22:a9:db:03:5e:52:f9:cf:
12:fc:00:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:20:01 2026 by rpki-client