Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
File: 7Sj1d0agBa51qPX56S99ItYcjTQ.mft (raw, json)
Hash identifier: T34L0538vtmEpWPtyZ6r02752QHCrj+KIvdqNb2+ucE=
Subject key identifier: A0:2F:05:48:61:B7:4E:03:35:CA:22:CA:ED:9D:20:42:32:DA:C5:47
Authority key identifier: ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
Certificate issuer: /CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Certificate serial: 01A08CB1FC98F7B0067007E9C28D99616BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
Manifest number: 0B87
Signing time: Thu 10 Sep 2026 19:01:09 +0000
Manifest this update: Thu 10 Sep 2026 19:01:09 +0000
Manifest next update: Fri 11 Sep 2026 19:01:09 +0000
Files and hashes: 1: 7Sj1d0agBa51qPX56S99ItYcjTQ.crl (hash: 106n+cv4sY54EYtT3kWxuwAyI4D2eHxEjmB+i0CeIzM=)
2: UlZluMg72w3OGQ7yVXSws-uTL0A.roa (hash: ZbBL16EPSfeFJDsY/7W353hLaYPwOpiK4otGlBdRF9Q=)
3: r6bLmGYRXJA6GUfCZnH4ebCbXYU.roa (hash: Q+Z0jJyseu+MqQA03xeTfakfDGrq+7+0HE8bf99rEXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:fc:98:f7:b0:06:70:07:e9:c2:8d:99:61:6b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Validity
Not Before: Sep 10 19:01:09 2026 GMT
Not After : Sep 11 19:01:09 2026 GMT
Subject: CN=a02f054861b74e0335ca22caed9d204232dac547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:93:07:7b:18:e8:76:d6:f1:bd:53:ec:4f:
14:c8:24:87:6b:e5:28:79:4c:33:bc:5f:16:53:80:
1e:81:ba:97:62:ab:77:87:24:5d:f9:d6:de:ba:08:
7e:6a:aa:47:1a:dd:b0:25:ca:50:a3:b1:ce:53:04:
cc:69:d1:63:9b:26:28:2b:5a:66:fc:53:13:10:53:
b8:44:2a:80:c4:c4:3a:a4:c2:15:c5:72:c5:d7:77:
09:17:0d:e6:a5:1b:e9:bf:f8:dc:65:3c:0d:39:5a:
e1:2f:f5:7b:ca:e8:9a:30:6e:9f:b1:30:03:fe:21:
42:a0:1c:e9:a9:02:00:f6:79:3b:17:86:54:24:52:
93:01:39:07:53:c2:72:0b:c8:63:fe:7a:6e:83:8b:
e5:7c:c2:57:69:d2:7d:cc:c5:77:be:2d:39:75:11:
34:7b:14:2f:f8:92:a7:19:97:91:12:87:96:25:50:
64:12:58:8a:93:d6:5c:14:c3:d5:36:33:00:39:94:
2d:9a:11:a2:49:e3:f9:63:06:32:62:ce:cd:37:91:
1e:62:47:69:fd:32:da:9e:0d:b3:29:0b:a9:03:f6:
1a:8c:68:7f:2c:43:df:a7:a1:c7:16:f0:1b:39:63:
a8:42:a7:4f:6e:58:8c:dd:f7:9e:fd:f8:8d:4d:37:
b2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2F:05:48:61:B7:4E:03:35:CA:22:CA:ED:9D:20:42:32:DA:C5:47
X509v3 Authority Key Identifier:
keyid:ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:0a:a5:0b:18:fe:5e:35:88:78:32:15:20:98:97:66:66:db:
a1:07:4c:3d:41:56:21:d9:90:71:71:5b:dd:b6:c0:0b:0d:f3:
ec:52:83:4f:71:7c:87:93:e9:90:29:a1:22:bc:de:73:17:78:
df:31:1c:90:8c:8f:7e:ea:33:3f:e2:e6:34:45:3b:de:b2:00:
2b:c3:28:e0:b8:52:1b:53:14:27:a5:0c:76:f9:29:41:3a:72:
3e:ab:d5:8b:46:06:c8:8c:49:ca:67:45:99:5e:8a:64:13:14:
9c:e6:9c:83:bd:5f:a6:5c:95:78:8f:5d:04:e5:32:80:5e:20:
f3:7d:f6:b6:b5:7c:58:ed:17:39:9b:46:9b:f2:1d:62:f1:65:
29:c7:78:ed:da:42:70:15:9d:43:05:08:07:eb:8e:a1:c8:e6:
1e:1e:da:ff:c6:10:b4:02:d5:60:54:ac:f7:2a:63:97:83:a0:
5e:df:13:2d:c0:31:75:bc:18:06:c6:04:61:e1:16:84:1c:ec:
1e:0b:12:50:11:2e:e8:b1:f3:63:85:ca:11:ad:11:c3:2b:a9:
62:6b:33:5b:2d:7b:45:4b:b1:0e:c6:67:0e:33:2b:39:9e:ab:
e1:aa:b2:6a:f7:ba:6f:8d:20:a5:ab:08:cc:ca:28:ee:15:a5:
5c:cc:49:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:32:33 2026 by rpki-client