
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.mft
File: 7gItaN8GanYaO-hkGnG7acFeJy0.mft (raw, json)
Hash identifier: aYzFzv9T2aNT4NvxAPgKm1p7KU6dgzKeeR//VLWfhgc=
Subject key identifier: C6:5D:9C:3A:D4:E7:20:54:5B:78:CA:D9:72:09:0E:CA:AC:3E:CF:70
Authority key identifier: EE:02:2D:68:DF:06:6A:76:1A:3B:E8:64:1A:71:BB:69:C1:5E:27:2D
Certificate issuer: /CN=ee022d68df066a761a3be8641a71bb69c15e272d
Certificate serial: 01A0408531D1F92E5AF7D20B088062997838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gItaN8GanYaO-hkGnG7acFeJy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.mft
Manifest number: 0153
Signing time: Thu 27 Aug 2026 00:01:05 +0000
Manifest this update: Thu 27 Aug 2026 00:01:05 +0000
Manifest next update: Fri 28 Aug 2026 00:01:05 +0000
Files and hashes: 1: 7gItaN8GanYaO-hkGnG7acFeJy0.crl (hash: qOrX3fbuVVZF64BFt8vdWFsEWWbWoZxjrl7HZCiqDq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gItaN8GanYaO-hkGnG7acFeJy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:85:31:d1:f9:2e:5a:f7:d2:0b:08:80:62:99:78:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee022d68df066a761a3be8641a71bb69c15e272d
Validity
Not Before: Aug 27 00:01:05 2026 GMT
Not After : Aug 28 00:01:05 2026 GMT
Subject: CN=c65d9c3ad4e720545b78cad972090ecaac3ecf70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:72:d9:c3:d8:4a:6b:e3:ba:3a:6d:6c:6d:3e:
65:2b:ef:95:20:e0:67:49:c9:59:1a:78:90:5d:1c:
fd:00:9e:6e:1e:f1:3a:ba:c3:67:36:a0:ff:55:94:
1e:b8:66:c0:20:f3:db:8b:bf:77:96:a6:b2:c7:6c:
7b:90:a3:f7:d4:10:04:e9:6e:d7:a4:89:43:84:af:
89:61:d4:48:dc:04:75:71:5e:54:9a:11:cd:d9:b6:
0d:da:b7:1f:71:db:5d:2c:a5:da:39:b4:2f:a7:ee:
7b:4a:9d:46:04:0a:39:04:4a:f6:62:44:f7:2e:e4:
40:06:6e:6c:3e:10:9f:b7:28:54:ae:8a:40:b5:70:
14:89:a4:e7:54:9e:e4:c6:59:f8:5c:20:05:37:f1:
bd:fb:43:c2:15:6b:fd:00:e6:b6:19:8a:fb:76:da:
e7:bf:07:82:9b:bc:74:8e:3b:5d:3a:eb:4d:4f:d2:
27:7e:b3:a5:b6:0b:8a:0f:96:e0:15:22:06:ce:d3:
ba:59:87:93:ad:ce:96:6e:5e:bc:2f:84:12:b0:06:
e5:3e:61:3c:2d:98:5f:6f:61:90:6d:4a:ae:9e:57:
59:ec:4f:32:12:b9:38:ea:df:20:50:fe:97:4d:d1:
e8:e6:86:eb:ac:c5:dc:e7:ce:0b:a3:93:6b:c1:e6:
70:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5D:9C:3A:D4:E7:20:54:5B:78:CA:D9:72:09:0E:CA:AC:3E:CF:70
X509v3 Authority Key Identifier:
keyid:EE:02:2D:68:DF:06:6A:76:1A:3B:E8:64:1A:71:BB:69:C1:5E:27:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gItaN8GanYaO-hkGnG7acFeJy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f3:3d:44:d0:15:e1:24:96:a1:e5:34:26:86:a5:56:97:fe:
69:ce:01:e4:aa:b8:4d:26:6c:78:04:1f:54:0e:d5:c6:8f:1f:
88:39:bd:34:e3:f9:d2:24:27:bd:52:ff:3f:1a:bf:87:ef:84:
42:0b:4d:59:18:4c:46:f5:a9:6a:d7:b3:46:8d:9c:95:04:03:
a9:e8:57:88:06:4b:a3:8b:a1:e5:f8:24:44:b8:30:c4:9e:df:
9a:fe:38:d3:eb:ff:1f:ea:d9:60:63:d6:b1:d3:a2:5b:71:1d:
1d:eb:e8:a3:67:61:85:d9:9a:2c:fb:07:35:9a:ea:98:fa:f6:
76:9f:ce:7d:1e:a1:14:40:06:c5:57:4e:e9:2c:5a:c4:a3:e4:
b9:2f:7e:26:39:98:86:4a:9d:fd:56:9c:35:68:eb:b6:7d:22:
f8:37:67:66:9f:b3:a0:1c:88:18:9b:41:b1:37:c6:d8:b0:72:
96:8f:d9:87:ad:fb:2c:e2:e7:cf:19:5b:1b:43:1d:4e:60:c0:
22:c0:22:11:cd:2c:18:1a:b2:c7:4d:39:29:1e:3b:a1:d3:d0:
0a:86:a5:76:79:69:20:7e:1c:ca:7b:a8:25:16:5b:12:a5:e4:
71:a0:6d:ba:57:3a:69:f4:57:95:e1:c8:d7:a7:c2:0d:47:6c:
87:95:c5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:46:45 2026 by rpki-client