Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
File: 7Sj1d0agBa51qPX56S99ItYcjTQ.mft (raw, json)
Hash identifier: xbsPnVcmuD/d8j0S582Lj4UQ62y/yRfTvK9dDACQpZU=
Subject key identifier: A1:E0:5F:83:F2:EB:29:05:F6:05:C6:5B:C4:8A:1E:E0:7F:D3:6D:0C
Authority key identifier: ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
Certificate issuer: /CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Certificate serial: 01A189AE2236EE1F269EEC474918B55B580C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
Manifest number: 0C0A
Signing time: Thu 29 Oct 2026 22:00:52 +0000
Manifest this update: Thu 29 Oct 2026 22:00:52 +0000
Manifest next update: Fri 30 Oct 2026 22:00:52 +0000
Files and hashes: 1: 7Sj1d0agBa51qPX56S99ItYcjTQ.crl (hash: NCxxQoXibFLxoZUbZzCBuzcxYIcJ+c3q5XkwbYjglcs=)
2: UlZluMg72w3OGQ7yVXSws-uTL0A.roa (hash: ZbBL16EPSfeFJDsY/7W353hLaYPwOpiK4otGlBdRF9Q=)
3: r6bLmGYRXJA6GUfCZnH4ebCbXYU.roa (hash: Q+Z0jJyseu+MqQA03xeTfakfDGrq+7+0HE8bf99rEXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:ae:22:36:ee:1f:26:9e:ec:47:49:18:b5:5b:58:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Validity
Not Before: Oct 29 22:00:52 2026 GMT
Not After : Oct 30 22:00:52 2026 GMT
Subject: CN=a1e05f83f2eb2905f605c65bc48a1ee07fd36d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:08:cb:81:df:ae:23:6e:16:03:ec:55:ea:dd:
65:85:1f:92:de:b4:3d:a2:89:b2:33:25:4c:dc:d7:
10:06:15:c7:b5:5a:f2:93:9b:a7:0c:8b:f4:e2:32:
e0:8d:b2:6e:ed:2a:e0:d2:4c:91:69:4b:b2:a4:7f:
cb:7d:41:59:f6:04:65:61:d8:2f:76:81:56:b1:ac:
d7:91:b3:70:0c:11:80:8e:f9:4b:ec:1b:6b:c5:91:
c3:30:36:83:4f:4c:fe:8e:a2:4f:80:4e:73:2d:62:
6f:55:5b:89:66:69:64:74:7f:7b:c1:db:2a:43:da:
a5:f4:74:ce:7b:a4:b7:54:e5:c8:da:9d:c4:f1:78:
6f:13:b6:87:1c:4d:2a:a8:7e:56:0a:da:7b:9d:b7:
bb:93:bb:70:2c:ee:43:88:4b:a0:9c:f1:4e:70:c4:
b3:f8:0a:9e:c0:34:aa:51:0d:01:ff:30:dd:6e:2e:
bb:66:95:e0:c4:56:a9:bb:3d:11:db:50:27:1c:c5:
55:c1:5d:ae:a4:e1:fc:c4:ac:86:05:0d:a4:a6:37:
a4:53:bb:c1:fb:9f:ff:db:75:87:6c:03:b9:cb:0d:
fc:d8:6d:73:af:a1:12:da:3e:81:bc:e9:d3:6e:39:
c2:ce:fc:a0:0e:ed:ab:28:b5:f5:21:31:db:21:72:
1b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E0:5F:83:F2:EB:29:05:F6:05:C6:5B:C4:8A:1E:E0:7F:D3:6D:0C
X509v3 Authority Key Identifier:
keyid:ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:19:fb:6c:eb:d8:4e:17:1c:5a:1d:8a:67:34:ff:ba:f1:4c:
77:0a:29:e3:15:bf:b2:33:b4:b5:23:e2:af:f0:97:29:13:77:
de:78:18:59:78:72:96:3a:b3:63:d9:49:c0:87:bf:cf:e1:de:
4d:a1:cb:e9:95:3a:4d:e0:a5:6c:99:9d:78:81:9d:db:57:96:
37:c4:fd:1a:a5:ea:6a:76:47:23:d7:40:70:33:e3:d9:8c:2a:
39:3d:a3:18:39:50:0e:b8:7e:94:54:35:e4:4b:6f:52:18:0e:
38:c3:66:a1:ac:39:7d:ce:6b:b3:3d:c1:a7:e3:f8:98:43:73:
4e:8a:a6:f7:31:64:0c:8b:e7:c7:cb:93:0a:dd:27:45:b0:f6:
8c:e8:93:d6:67:92:ad:4b:df:0e:df:4a:98:a6:f9:9a:c1:df:
51:a9:d8:49:c7:e2:90:eb:5b:e3:69:ee:1f:b9:88:e5:10:0c:
b0:9c:be:6b:84:d7:69:75:95:80:ef:f3:72:90:65:28:21:e7:
30:6f:6c:70:cd:a9:55:b3:ac:1e:08:8a:c6:7a:50:15:4c:db:
3b:34:09:f1:34:c6:6f:17:56:84:77:89:d4:b6:9d:08:c5:b1:
ee:a0:4f:2c:43:3a:8b:ad:38:65:8a:32:1a:82:72:5e:86:af:
0b:74:69:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 02:46:17 2026 by rpki-client