Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: VRsfZuVJz9dMjUoCtwNyJtIltKT/23kaJjdGs3eJp9I=
Subject key identifier: 90:D5:34:13:5B:7B:BC:51:DE:2F:5E:63:BC:5B:38:4A:70:16:84:42
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 01A10D39496ED45D9BA46A29925DCEA4B199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 1874
Signing time: Mon 05 Oct 2026 18:00:20 +0000
Manifest this update: Mon 05 Oct 2026 18:00:20 +0000
Manifest next update: Tue 06 Oct 2026 18:00:20 +0000
Files and hashes: 1: 5wBvYH18mnYKydx8H19r86HtE0Q.roa (hash: VUGd6jaGsjCSaa2yqTqiiqwge8OaZ7jM3DegnmT+3+Q=)
2: 5zuquzvoPSv-HJr2QhNMX3OYMgA.roa (hash: bcYgeaY8QXTzK+9kyXA0UgosAczZtORy6M/Ez+Fizn8=)
3: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: 27XqLJLf9e0eD8tsdncr1pVx+cuxVVmSF5RH9NEOto4=)
4: kgnu5UR9Ocl-BiVCaC6wT07shm0.roa (hash: FpIRHnwVZMdLfpDIL1lnVTw2bZIMLJe4K4qr7pxMTCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 18:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:39:49:6e:d4:5d:9b:a4:6a:29:92:5d:ce:a4:b1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Oct 5 18:00:20 2026 GMT
Not After : Oct 6 18:00:20 2026 GMT
Subject: CN=90d534135b7bbc51de2f5e63bc5b384a70168442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:5a:d5:90:07:8f:5a:e3:15:84:61:4a:a0:
bf:49:0e:38:cc:31:f3:fb:0d:24:1a:b9:f2:04:c8:
95:50:6e:d4:f8:6d:a4:26:e1:c5:e8:f6:d5:a2:a0:
f1:e4:8f:2a:01:9d:23:8c:d5:a4:ee:ca:30:6f:46:
ae:54:72:30:ec:7d:96:60:11:62:84:8b:0e:58:35:
37:e3:ed:c2:7f:6e:ff:87:70:c3:23:26:26:4e:58:
9f:46:a1:0e:42:a1:ff:a6:19:62:42:42:48:b4:07:
aa:59:4f:ff:c6:0d:bd:a7:d0:72:b7:16:cf:71:d2:
e6:95:b8:b5:93:08:9b:52:b4:2f:82:2c:7b:ee:14:
6e:57:4c:7c:54:42:85:3a:87:40:dd:2e:23:01:0e:
96:8e:ee:fe:70:0f:de:b9:89:6f:86:08:9e:e1:47:
0b:00:e9:39:ee:80:a7:d0:ba:0c:c8:c0:13:48:46:
34:8c:59:4a:c5:b3:d9:3f:79:ea:96:0a:50:49:0d:
5c:e2:2a:34:e3:5f:4f:a0:19:38:5c:6a:ab:8a:57:
bf:a6:84:48:90:2e:87:0d:65:01:97:73:b2:5d:55:
e8:89:75:1e:73:13:66:06:52:bb:ca:d4:c5:9c:9a:
7d:f6:df:70:5c:6a:83:cf:69:a3:8a:b6:ea:1b:83:
5a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D5:34:13:5B:7B:BC:51:DE:2F:5E:63:BC:5B:38:4A:70:16:84:42
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:15:7a:92:af:41:b0:b4:ab:2a:05:fb:f7:e6:c8:c6:b7:4c:
42:f2:e0:68:eb:eb:3d:46:48:36:ae:42:ef:2e:86:7c:7a:d5:
f1:12:5d:a8:18:14:64:a1:86:01:fa:29:0e:f6:ce:0d:8d:6d:
ef:94:81:58:6c:61:a0:8a:52:a1:05:c8:9b:c4:f9:62:f0:46:
22:d4:5b:ee:95:0e:cb:0c:09:11:78:6d:bc:8c:48:5a:3b:42:
8c:3c:50:bf:08:8b:92:4c:a8:fc:35:ba:2f:b8:ac:24:f3:ca:
4a:a1:75:a1:fb:6d:f8:3f:bf:3f:37:91:a3:47:e5:3f:c1:8b:
53:51:c0:75:b3:ae:f4:ce:7f:2c:63:8f:a3:8e:c6:55:dd:18:
a0:26:fb:2f:31:5e:8f:65:54:1f:c8:38:05:f8:4c:33:78:a9:
4d:77:01:9c:18:0a:e7:02:28:ef:7d:29:6f:dd:0f:5c:58:94:
1f:90:2a:7c:a0:bc:ea:b9:04:fe:ab:cb:e7:50:cf:ee:aa:49:
b3:6a:c2:1b:cc:97:93:1e:7d:a2:48:08:69:b7:d0:ba:af:ea:
95:ee:30:fe:71:92:37:2b:88:ad:a9:79:05:bf:56:bf:11:86:
5e:01:3f:c3:f2:a4:b6:c0:62:10:07:5a:11:1a:f4:c6:98:07:
d5:6a:cb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:27:39 2026 by rpki-client