Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
File: 7E-wYalCbk-yiF2CKGdXKhtYpMA.mft (raw, json)
Hash identifier: 1QCTibksULCtxp1ESgrLJn8IVFLQuvy13XOABesxzWc=
Subject key identifier: 42:00:CC:A5:40:25:0B:D1:A3:F4:47:41:51:EF:A7:95:A4:03:6A:C3
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 01A1A970BD2678A965BD9ED9E2B44F0F35A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
Manifest number: 1B03
Signing time: Thu 05 Nov 2026 02:01:40 +0000
Manifest this update: Thu 05 Nov 2026 02:01:40 +0000
Manifest next update: Fri 06 Nov 2026 02:01:40 +0000
Files and hashes: 1: 0KUFbz0khMkDd6i1hVC0Gk78b8Q.roa (hash: e4QKXhdU4Y0/6TdXU9kKaC0Et/ZZz02AZrZMzhkrhqs=)
2: 4dbfLFgTwDYrqXnFB2f4xHMplQw.roa (hash: qdee12QBSfwV430rgWvKnONQnxAQwUpDJUc9sSl89Tk=)
3: 7E-wYalCbk-yiF2CKGdXKhtYpMA.crl (hash: lx4mO/yINoKRH2WPs6hVSivVfcwsBLdUad1kwLFICbQ=)
4: K2LNv1z48hNFFlzRSYowSy0Ha38.roa (hash: rgP0qv2b0VyfQUIaOOjPzTbyBIqlmlW8gSl7h4qofNM=)
5: QAfMhvFz23E5j-VZNuNUHJaS27A.roa (hash: 1c6wEWGOfe30pbIdsgVXmuoN1jcDboRJaqg+bTctZUo=)
6: fScuGoqudu5TxiE70DprlLcKYsM.roa (hash: Qna0Roz67B/VzCkvRv3pYKjnRZOrhXbgEhbWUZJL9So=)
7: hHb0-5eJztinpzqAO5Okf57AMAw.roa (hash: 8Ig5ookt52nRfFS0NFm7oUCTb6Nq+zYlT9v56LZnErI=)
8: sXv4yTCQKiNUOrpbmKWCXNXg3xc.roa (hash: jHHmRZILy0R6mXXAGfwH6kcUvYINSdcCe6jkirPdDKI=)
9: x_MESfhEqxOpfv7-RrmmKFZTQsM.roa (hash: CgnbbvmY6nJeIwGOkAE0qQBeAzVO6strLDPz3xd7ol8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 02:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:70:bd:26:78:a9:65:bd:9e:d9:e2:b4:4f:0f:35:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Nov 5 02:01:40 2026 GMT
Not After : Nov 6 02:01:40 2026 GMT
Subject: CN=4200cca540250bd1a3f4474151efa795a4036ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:28:9b:78:8d:a9:67:f9:89:2f:c5:98:55:15:
f8:14:6a:a5:f4:d3:5e:4b:ec:92:a3:39:9f:be:54:
c4:f2:93:74:a8:ee:d1:b4:9d:60:f0:5f:9e:14:d4:
49:18:c6:64:52:01:71:3a:07:ff:ca:46:2c:d3:74:
9c:bd:d1:8f:22:b3:a6:d2:7e:1e:95:44:b8:4a:76:
42:b6:cb:94:58:d0:c3:f3:36:79:46:03:3a:8f:b6:
12:05:ee:ab:5a:7f:ac:6c:05:e6:c5:b7:c4:86:33:
5c:21:27:24:ac:8c:be:3b:82:b3:19:7c:d5:29:d3:
e8:91:90:eb:31:f5:62:5b:a5:0b:74:53:e9:be:15:
77:5d:a4:c8:aa:c9:c2:de:62:5a:70:a4:72:83:f8:
1c:16:c9:54:e1:3e:a8:33:e9:c3:10:09:5e:ee:78:
e5:01:22:db:3b:40:fe:83:55:80:f0:6c:26:2d:54:
35:18:fd:49:f0:06:4a:31:61:15:31:05:f7:f6:98:
57:30:85:8f:91:40:99:59:ba:65:98:27:06:f3:f9:
8d:0e:1e:2c:94:2a:15:c1:0f:d0:ac:37:98:58:5b:
e7:dd:f8:c3:8e:7f:25:6b:88:1c:1d:43:3c:9d:03:
80:a1:2c:a5:8e:5a:1d:1a:e8:f9:6b:b0:36:8f:e8:
2e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:00:CC:A5:40:25:0B:D1:A3:F4:47:41:51:EF:A7:95:A4:03:6A:C3
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0c:ed:e3:e3:8d:2e:cb:15:49:13:81:a8:eb:48:a3:b0:a7:
7e:89:f9:29:8c:d5:23:51:8d:c1:c0:f7:57:10:cf:10:85:0a:
bc:4e:0e:41:b2:92:fe:5f:7f:6e:3a:ff:79:15:f8:d9:0a:78:
da:7b:35:cb:69:c6:36:31:4f:59:98:a1:a4:21:16:7f:45:01:
5f:0d:1f:86:8c:fe:f7:05:45:ee:1f:d6:5e:49:d4:4c:9d:48:
40:16:fb:04:0f:96:16:71:d0:7f:c1:47:8d:ae:2d:ba:b0:2f:
80:c4:56:32:2e:62:37:a2:7f:77:ea:bb:a1:f6:f9:ed:84:6c:
96:df:fa:a5:58:ca:1c:ed:a2:f1:ea:6e:92:4f:d7:87:6b:c9:
7f:51:fb:b1:34:c9:96:30:f2:15:be:1e:df:ae:ba:47:be:da:
06:3b:ff:1e:cd:49:12:e2:6d:66:38:33:34:d2:c2:01:f2:f1:
2f:30:07:f6:09:df:c8:9e:ff:51:18:c8:28:85:74:8c:c6:c0:
de:53:8e:1d:5f:b9:76:81:b8:3b:92:22:bd:c4:1c:58:7c:93:
b7:6f:ed:4d:13:d2:0d:d1:79:54:f6:dc:62:09:b8:bb:2f:80:
45:41:e4:b5:5a:57:29:9c:d1:65:8b:34:ec:a6:d8:aa:41:f7:
b7:ce:6c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:40:32 2026 by rpki-client