Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
File: 7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json)
Hash identifier: aWAhjo/Go0Wxsq+ypyafk+Sdlz+Qp1DBbQ9UKiINJz4=
Subject key identifier: 38:68:EA:B8:AE:53:22:47:DA:BA:E5:4F:9F:E6:AE:91:DF:09:ED:B0
Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
Certificate issuer: /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Certificate serial: 01A13E5C9A89CF98059071F61148B27D36A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
Manifest number: 0D17
Signing time: Thu 15 Oct 2026 07:00:18 +0000
Manifest this update: Thu 15 Oct 2026 07:00:18 +0000
Manifest next update: Fri 16 Oct 2026 07:00:18 +0000
Files and hashes: 1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: fh7W1bxhljNhcmpaBvU9jB186tk3O8sm9rA0jefzkkg=)
2: aO8SV7r8aRmaMsrCVn54MAITseY.roa (hash: UBYs9t/xpmJLmkQIIYwuZf57SETqiU4zYplqSc9D++E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:9a:89:cf:98:05:90:71:f6:11:48:b2:7d:36:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Validity
Not Before: Oct 15 07:00:18 2026 GMT
Not After : Oct 16 07:00:18 2026 GMT
Subject: CN=3868eab8ae532247dabae54f9fe6ae91df09edb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ac:4f:29:2f:4d:2b:fb:a4:86:ab:b7:f0:38:
89:3a:4c:c7:f9:21:88:66:8d:b1:fc:25:d0:6e:04:
0c:1f:6d:fa:99:89:79:a4:6d:fa:0e:fe:ec:03:f7:
c8:4c:ad:0e:f3:25:66:56:48:b1:22:4c:16:57:4d:
ca:e2:8a:5d:6a:97:0b:d8:b3:8d:8d:c2:42:2f:36:
77:e3:fd:6f:e5:1b:15:f4:2e:3b:8b:2a:51:3b:95:
95:40:2e:6c:8e:48:7e:c3:df:a8:42:85:25:d6:24:
3d:64:dc:4e:da:0b:66:6d:57:9a:95:b4:79:72:c5:
d3:fd:ca:7d:59:23:12:43:2d:d7:b5:d9:42:04:e3:
bd:0c:7c:66:5f:7b:bc:7a:8d:a2:4f:34:51:5b:31:
eb:7c:25:2b:29:db:eb:85:f8:f0:ee:dc:60:f2:d8:
60:36:74:c3:e3:09:bd:89:fa:df:09:7c:2c:ee:c4:
a8:68:13:01:31:b7:0b:a8:64:e9:18:82:f4:b4:fb:
f0:e4:67:5e:70:70:14:a4:26:32:3f:84:2b:0e:10:
11:c4:92:27:96:1b:6d:e1:fe:e5:17:58:37:f3:ae:
23:33:a6:20:d3:0c:96:0c:ef:70:ae:10:6f:ec:41:
2d:af:ac:c5:25:c1:49:dc:15:83:46:90:a8:3a:75:
5d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:68:EA:B8:AE:53:22:47:DA:BA:E5:4F:9F:E6:AE:91:DF:09:ED:B0
X509v3 Authority Key Identifier:
keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e6:2b:fb:a8:6b:e9:b4:d7:d4:a4:c5:e8:d2:ab:c1:03:86:
b9:f2:f1:91:7b:88:70:42:b9:ea:47:17:19:83:91:65:48:08:
43:23:dc:32:53:5b:ac:ee:46:8d:5b:ea:8e:31:d3:2c:2e:68:
da:00:41:10:8f:a1:f1:61:52:b7:2b:fc:66:a0:db:ce:d6:cf:
3d:cc:5f:80:a1:95:b8:54:d1:d9:6e:1b:b7:5c:b9:cc:10:85:
ff:e5:eb:46:45:e8:f0:4b:96:69:de:f5:cb:60:8c:93:2e:e4:
3c:91:d7:55:dc:39:c6:85:96:3f:5b:94:f4:e3:6f:72:ec:32:
6a:9c:2d:bd:89:8e:94:9c:3f:b0:1b:4f:6b:9d:e2:8d:e2:da:
ec:fb:75:ca:ba:e5:e5:80:c5:11:af:5f:ad:56:d6:9b:59:03:
f0:98:ee:36:ee:f5:2c:c3:8b:5e:30:bb:48:4a:f5:ed:f3:8c:
7f:a1:5d:12:e8:ba:ca:8b:19:d7:e1:82:b2:1a:94:a3:2c:81:
8e:1f:4b:e1:7b:ab:20:d4:71:de:da:bd:f2:7b:61:9c:34:2b:
ae:44:20:86:eb:09:0c:31:50:a4:3a:37:cb:13:71:a9:db:0c:
6d:89:7c:0d:ae:4d:5d:c2:43:12:de:92:9c:96:53:2e:2c:fd:
14:fb:39:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:48 2026 by rpki-client