Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier: cJPFg5gNdvgZVCl3HXsQ8ux7WOrWIo8a3+Z4XDJ8hvk=
Subject key identifier: 10:A9:31:32:F6:D8:2B:7B:78:43:F3:81:98:2C:D4:EC:BB:3D:FB:AB
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 01A0024B8138E9CDB6783BF9CCB090F50EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 22:01:37 +0000
Manifest this update: Fri 14 Aug 2026 22:01:37 +0000
Manifest next update: Sat 15 Aug 2026 22:01:37 +0000
Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: ONFIrb5G6MalWxtgF0r41NCx83ycH5uS9Nc8Jx+auUM=)
2: x6n822Rpr9x_ujzRReAoyI3uWJE.roa (hash: xHlOIj9K0jyV1cDKqnDaDCInd6n4ZibqQVDDfE1qwao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:81:38:e9:cd:b6:78:3b:f9:cc:b0:90:f5:0e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: Aug 14 22:01:37 2026 GMT
Not After : Aug 15 22:01:37 2026 GMT
Subject: CN=10a93132f6d82b7b7843f381982cd4ecbb3dfbab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:63:c9:66:69:d0:f7:75:b9:c5:75:95:0a:b2:
60:19:6f:f3:e6:18:c9:94:33:c1:2f:37:e7:fe:99:
d5:f8:93:51:fc:34:59:d2:85:9b:21:8f:2e:bc:97:
af:dc:94:33:9b:24:bb:c6:2c:dd:08:92:f7:e4:52:
4f:2c:cb:d7:fb:d3:c4:1d:0c:b1:c8:6f:65:8d:64:
51:3c:9b:ba:d2:90:42:f4:7b:f7:0e:25:74:b2:c4:
ef:91:b4:59:a9:06:fc:df:5c:a9:20:bc:3f:4f:f7:
89:60:ea:9c:79:f2:50:77:44:be:36:35:0a:b2:16:
a8:11:16:14:0d:c1:96:4e:df:ac:22:bb:ac:2e:b9:
59:94:dc:db:1e:83:c2:60:dc:88:34:ac:1d:1a:91:
9e:e9:51:03:a1:aa:ec:c9:eb:72:e2:35:81:04:bd:
83:27:b3:e5:59:e0:d1:87:24:a9:e5:75:06:9f:1b:
52:19:46:fd:5b:36:af:14:18:99:7a:b5:69:40:84:
15:a2:d6:64:13:f7:40:26:cf:2e:ba:1d:3f:b1:4b:
d3:bc:04:d9:12:f5:20:57:1e:44:23:5d:9f:92:7b:
85:74:80:06:de:f5:a7:b4:fb:a9:c9:24:91:1b:6a:
a0:51:10:20:d9:58:da:8a:ad:de:7e:1d:12:8a:4d:
10:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A9:31:32:F6:D8:2B:7B:78:43:F3:81:98:2C:D4:EC:BB:3D:FB:AB
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:47:b7:b3:73:5a:28:4f:7c:99:93:e6:25:f4:29:37:79:ad:
64:33:16:f3:87:71:0a:44:67:18:46:0b:f5:a5:f1:9d:89:0d:
16:dd:e3:81:3d:3f:62:5f:12:ab:e1:bd:0b:01:d5:2f:21:d1:
ca:73:45:8e:a7:55:7c:83:5f:ae:b2:ec:72:73:e2:47:6d:2b:
42:7d:54:57:76:f5:d7:25:dc:78:26:61:22:c9:e9:63:5b:88:
0e:55:14:01:25:41:7a:12:51:4c:e9:5f:d5:c6:72:79:d8:c8:
19:5c:51:df:7b:51:f1:fe:8d:0e:df:01:8a:61:3f:8f:c7:38:
a3:69:61:9d:0c:8b:c1:27:2c:55:d0:a7:79:85:c1:32:e3:fe:
c6:9b:ad:b3:16:bb:2a:91:1a:b7:a0:f8:f5:6e:96:ca:7f:1b:
06:9a:65:c4:81:f6:98:b5:11:d0:29:51:87:29:9b:5a:6e:20:
bc:67:75:1d:6c:eb:93:54:25:ee:d4:b9:bf:97:73:52:36:5a:
6d:20:48:18:eb:0c:1b:b7:58:21:e7:a1:ab:69:68:17:7a:27:
92:b2:90:dc:88:16:aa:72:42:d0:f7:de:7d:b7:fa:54:1c:70:
82:63:b3:39:a6:44:3f:8c:b1:d9:71:68:e2:91:30:65:3b:72:
7d:5e:6b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:54 2026 by rpki-client