Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
File: 7jfTSGm8YLfZ54M19KMjgftyEOU.mft (raw, json)
Hash identifier: vmNdqBHjDpcl1meS2nIlDlk/wPbkRLZUV6ajEO+djx0=
Subject key identifier: 24:BB:35:B8:93:AB:90:08:54:C9:3B:8D:CF:0A:8C:69:CD:2B:5A:BE
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial: 01A0016ECAEF8BA2EF57AC5612F314042096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
Manifest number: 1A0B
Signing time: Fri 14 Aug 2026 18:00:33 +0000
Manifest this update: Fri 14 Aug 2026 18:00:33 +0000
Manifest next update: Sat 15 Aug 2026 18:00:33 +0000
Files and hashes: 1: 7jfTSGm8YLfZ54M19KMjgftyEOU.crl (hash: UJFvaeUEL0KVqL/9Pexbzk2tiLqMLqW88bJxCbFshvM=)
2: XHVi61WiazNgcFLfPPLSGooyVY0.roa (hash: DsQUXKDSsnP3SOeoq0hMzedmYIiSFC88k9HokDNi5rA=)
3: mYTd35kRkIBF88OmyEhVri7c_EM.roa (hash: 8He+vLv80dG8+N+bwzMwaOxaSPkQw5v1/xR4GgFaHQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6e:ca:ef:8b:a2:ef:57:ac:56:12:f3:14:04:20:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Validity
Not Before: Aug 14 18:00:33 2026 GMT
Not After : Aug 15 18:00:33 2026 GMT
Subject: CN=24bb35b893ab900854c93b8dcf0a8c69cd2b5abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ce:91:a9:0e:00:7a:11:87:4f:17:24:12:93:
ad:7e:a1:36:91:45:b6:61:59:04:e4:bd:76:4d:e1:
c2:9a:d1:16:bf:a6:34:1e:51:0c:9e:9d:44:27:1e:
ac:de:a9:3d:67:e6:ed:ff:ed:7e:44:94:3c:24:91:
c1:75:45:23:d2:a2:ae:e6:40:be:42:81:25:fe:02:
e8:94:87:4b:7f:fa:b1:2a:c1:37:9f:22:48:22:86:
9f:f2:51:c2:aa:9c:91:7e:dd:c1:2a:33:8c:27:a5:
6a:c5:2b:f5:5c:d2:e1:2b:db:68:44:44:6e:d4:53:
65:2a:4a:a0:5c:31:c5:ad:23:df:5a:07:95:0f:e1:
45:6c:3b:4e:d1:6b:ab:80:7c:9c:7e:9d:dc:47:98:
01:96:cd:20:1c:c1:43:6c:50:93:58:ca:81:f4:7d:
91:09:59:07:b6:e5:90:38:4b:3e:21:34:f3:bc:52:
73:2a:f1:a3:13:6d:08:08:ef:de:9e:d6:17:f0:ff:
13:ad:a8:13:ed:63:28:11:f5:87:fb:4e:df:05:64:
76:18:8d:8b:33:7f:d8:2e:c3:6b:02:d9:d0:8a:bc:
7e:06:65:1e:4f:3c:9c:0f:dd:89:46:b4:25:53:04:
5f:d2:bb:02:da:61:0a:72:6a:24:7b:3b:7e:60:04:
77:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BB:35:B8:93:AB:90:08:54:C9:3B:8D:CF:0A:8C:69:CD:2B:5A:BE
X509v3 Authority Key Identifier:
keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f8:1e:5e:b1:cb:a1:6d:05:a6:54:30:b9:89:05:3a:46:5f:
80:9e:bd:16:13:87:67:a7:d2:47:e3:e3:c1:18:5d:22:48:4f:
85:6a:ad:c4:7e:ca:0a:4f:ac:de:23:0b:12:8d:f6:48:5d:4a:
88:cc:31:5a:1a:ce:9c:c3:3e:3e:19:98:e0:46:f4:f1:1e:b8:
d0:09:d9:54:85:f1:b0:cf:35:e8:cf:08:62:dd:dd:9f:bc:e1:
6e:ab:ac:9b:9a:a3:54:1c:bc:51:77:44:6e:b1:ec:09:e0:31:
cb:6b:52:6e:52:f3:97:48:fd:2a:02:56:46:0b:f3:9c:bf:5a:
c9:1c:6c:ff:02:2c:e7:85:4d:1b:da:02:6f:f3:11:20:3c:3e:
c4:30:2a:a8:8a:86:e4:fd:eb:70:22:be:ea:28:93:0b:b2:7d:
39:f1:f4:da:89:3d:2f:18:08:1e:63:e7:2f:e9:1f:b1:33:c2:
23:3f:fd:0a:46:bd:05:81:52:cc:ad:8c:96:65:8d:8f:8c:d9:
66:83:3d:4d:8b:85:1c:6b:a1:d8:da:9c:15:c6:5a:e1:db:ab:
23:80:aa:5c:c0:af:03:b4:6f:d5:44:2a:90:9c:09:0f:ba:36:
f0:58:c3:f4:31:98:ff:fd:e3:53:85:14:5f:ea:29:e0:b9:cd:
c1:34:c1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:12:47 2026 by rpki-client