Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
File: 7jfTSGm8YLfZ54M19KMjgftyEOU.mft (raw, json)
Hash identifier: zDlWlM54gdhS3vbEcGIk1Iu4tJlnhLEoJTNOMubCZrw=
Subject key identifier: 66:BD:12:B2:BF:F6:AD:25:3E:93:68:A7:57:F9:8A:36:69:DC:DA:CE
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial: 01A11B63AAC70B86EE43F458B09ECF864F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
Manifest number: 1A9D
Signing time: Thu 08 Oct 2026 12:01:18 +0000
Manifest this update: Thu 08 Oct 2026 12:01:18 +0000
Manifest next update: Fri 09 Oct 2026 12:01:18 +0000
Files and hashes: 1: 7jfTSGm8YLfZ54M19KMjgftyEOU.crl (hash: kph46Nx0AFrEEWiPdbZTpsrMJmY5bUL0inhIBnc+HDQ=)
2: XHVi61WiazNgcFLfPPLSGooyVY0.roa (hash: DsQUXKDSsnP3SOeoq0hMzedmYIiSFC88k9HokDNi5rA=)
3: mYTd35kRkIBF88OmyEhVri7c_EM.roa (hash: 8He+vLv80dG8+N+bwzMwaOxaSPkQw5v1/xR4GgFaHQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:63:aa:c7:0b:86:ee:43:f4:58:b0:9e:cf:86:4f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Validity
Not Before: Oct 8 12:01:18 2026 GMT
Not After : Oct 9 12:01:18 2026 GMT
Subject: CN=66bd12b2bff6ad253e9368a757f98a3669dcdace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:60:09:9d:3e:84:68:bb:eb:f8:6e:29:e7:52:
db:3f:e2:e4:9b:ac:78:ab:e1:d1:e5:60:89:d2:19:
46:55:9c:9d:a4:62:ce:df:0c:d5:f6:e2:77:13:23:
64:6d:ec:49:06:48:81:58:48:19:3c:32:f8:52:46:
77:2c:34:28:c6:a0:f2:27:c4:3d:92:1b:38:52:fc:
75:9e:56:23:96:bf:86:01:9c:f4:c1:25:85:6c:d7:
82:b5:75:05:1f:81:4f:2c:e9:24:77:49:c7:27:95:
64:88:96:6d:e5:6d:5e:59:b8:2f:fa:d9:2e:7f:55:
77:de:5b:f6:39:e2:fe:97:11:cf:5e:c0:c4:02:ea:
0a:11:6a:b6:b5:29:6e:d7:e4:b0:f1:0d:b3:7a:81:
eb:0e:ab:f3:3a:dd:71:5f:df:9e:00:59:a5:2d:fe:
09:ea:64:00:e6:69:fe:f1:85:70:f5:01:66:2e:3b:
0a:03:53:4c:a3:1a:af:1f:76:63:e4:e6:b7:53:88:
8b:14:7d:7f:b8:ad:00:8a:62:9c:9c:a5:e0:82:d1:
fd:d5:a6:f8:83:c0:7d:f8:a2:9c:57:91:54:a1:63:
c2:67:00:ba:7e:6c:9a:0e:e9:14:56:38:62:0a:11:
b1:58:b6:03:8a:79:84:c2:76:ce:91:06:88:1d:0a:
f9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BD:12:B2:BF:F6:AD:25:3E:93:68:A7:57:F9:8A:36:69:DC:DA:CE
X509v3 Authority Key Identifier:
keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c2:66:82:b8:d4:8a:68:8b:80:24:83:ac:cb:1e:e7:f4:14:
6a:2d:d8:19:e6:f4:68:bb:28:12:95:13:1d:aa:00:b5:81:84:
16:e9:c0:12:c4:70:27:66:ac:2b:c7:c5:9b:26:24:a9:db:18:
5d:76:23:95:58:3d:2d:b8:fb:75:2f:8b:91:34:6a:44:0b:5f:
59:68:43:6e:2d:70:5f:6d:24:90:5e:5f:11:a5:fe:41:a0:e9:
69:d0:d4:7e:e5:c5:31:98:1b:5e:c6:ef:18:87:0d:c2:10:1f:
4c:58:7a:8a:38:a7:b3:45:61:73:1a:70:d2:72:22:3a:05:39:
18:e0:68:82:80:fb:a3:1b:0b:87:56:d3:c4:aa:c8:24:28:f8:
84:48:15:20:f2:6c:09:19:51:af:e2:f8:18:b1:36:15:c1:72:
6f:68:c6:44:50:7f:21:49:df:82:ab:c8:e5:99:51:75:0d:f8:
57:45:19:d5:c5:a4:ff:91:99:0c:d4:99:41:52:ac:f4:32:e8:
0d:b1:58:79:a2:5e:91:49:4e:05:eb:d6:15:63:8c:1d:06:4c:
b8:de:9d:6b:ed:b5:ac:de:bc:32:09:2f:71:02:fc:e3:f6:ca:
c1:d4:9a:fa:f6:d5:df:5f:ac:b2:13:68:73:07:aa:7e:14:cb:
0f:97:43:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:00:06 2026 by rpki-client