Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json)
Hash identifier: EV+ZT1vrw0T3VLJSSNk4U8r5E+oHN8mZlXd0neORhhI=
Subject key identifier: 51:CF:4A:E8:14:01:C7:03:DB:3F:06:4E:02:D9:12:0E:EF:2E:DF:7D
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 01A1773A2890E14CEAA398E7AC333630BD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
Manifest number: 1AE2
Signing time: Mon 26 Oct 2026 08:01:02 +0000
Manifest this update: Mon 26 Oct 2026 08:01:02 +0000
Manifest next update: Tue 27 Oct 2026 08:01:02 +0000
Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: NYGU0CaA+NN55186+NVhE7ct6HFln2Gom8BZpAktKF0=)
2: Gp76Gv-eHWRgRvhEjHqJ6icn00Q.roa (hash: BmL3M6inhKtEkTbjCk7s9if8HrybG3oAFNlmaOoxF0c=)
3: JnNygfiur-rHLJuAn1hkxLz25cQ.roa (hash: CEYmgo0zOa133sbdNYSecv5niw3ZeeRwnisUaeasxBY=)
4: UV-Za1MLDNSaG4DuH_q131i6c6o.roa (hash: /nY7i2nihg09pwfCz4ZETusOQgWbnKeEZAo2lp/8PQQ=)
5: XwwEduTGUdEUmzQ6Vn1Qh0lULKE.roa (hash: yP/C4oSHOkCL3b3u7lTD0ceM0Z9V/7tsggm9f4RRupE=)
6: bc8LaOm-Ug6E5hSvds9yGbuwrFA.roa (hash: RaZzZcOTQlGar1i6XUpTh++hxvp7YrNT3WX2Bc1Xmtk=)
7: gDu74A_Z1ksatoKHQD455fxsAx0.roa (hash: 5WTnm+h2P7sppTWJRlxxAJMWxqtBVlvtcy2GltVnQig=)
8: zOmGYauNnRfV_5QaNrYyOSSrwQ0.roa (hash: QJz+FfKfespU5hmZuz01TmSY2wjv9AwO7tZKjrvrO1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:3a:28:90:e1:4c:ea:a3:98:e7:ac:33:36:30:bd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Oct 26 08:01:02 2026 GMT
Not After : Oct 27 08:01:02 2026 GMT
Subject: CN=51cf4ae81401c703db3f064e02d9120eef2edf7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:ef:c6:eb:b1:19:8b:b8:40:fc:06:24:81:
47:f1:a1:95:2a:c7:6c:31:16:aa:38:fb:24:e3:32:
0a:7e:05:73:a6:bb:ba:b0:1f:34:fe:f0:46:84:bf:
bb:8d:d9:dd:57:1f:6d:36:65:66:cf:3e:7e:f2:8c:
a4:b3:03:2a:33:7c:0d:54:d2:df:20:cb:86:77:46:
83:99:18:d3:6e:25:b1:73:cc:19:0e:99:03:fc:ba:
46:a0:da:d5:14:ee:4c:db:a9:85:1f:f9:f7:eb:48:
47:20:89:69:9e:aa:2a:40:dc:57:55:f2:79:59:8d:
f3:18:4a:42:5b:8d:2a:94:6f:d4:01:46:85:a0:62:
4c:6d:96:b0:c4:a2:b2:aa:d2:34:cc:64:38:8f:21:
f0:40:1e:14:3f:24:cd:58:54:c7:63:3a:35:34:df:
e5:6a:63:c7:1f:29:88:f4:47:3a:2a:66:e9:48:aa:
e5:0a:f6:c9:ed:35:3a:1d:61:c5:c8:32:1a:04:54:
6a:89:f4:a4:8e:df:bb:ab:cd:98:1c:cd:c1:74:c6:
f8:cb:24:86:02:dc:1d:ed:6d:57:76:01:78:6c:f1:
e5:64:32:48:4b:90:a7:27:be:19:de:63:5f:07:a7:
03:40:15:58:3e:71:89:3d:6b:67:b2:67:df:73:c9:
94:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CF:4A:E8:14:01:C7:03:DB:3F:06:4E:02:D9:12:0E:EF:2E:DF:7D
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f2:1b:c8:03:f3:fd:9d:8a:fd:33:94:4f:fe:30:b2:19:68:
31:19:d1:a8:c0:49:cd:db:62:d5:7b:4d:b5:7b:bc:33:6c:ca:
8d:3b:1b:c5:13:4c:84:7f:c4:69:d0:95:a6:a3:a7:6a:21:0c:
79:e0:89:ed:5a:b9:01:da:1d:c6:ad:ad:f2:91:6f:e0:26:e8:
79:5e:a2:8c:17:a7:5a:59:f4:1e:5e:d4:ab:12:15:e6:0c:a8:
cf:e0:29:2d:f7:40:09:8f:e2:3f:bc:77:97:e8:a6:b9:e4:55:
1a:52:bd:e7:f3:b0:08:4b:5d:67:df:5a:db:68:aa:20:5b:8b:
5b:a1:9e:e8:77:3e:9e:3f:bc:a5:08:26:f0:45:a5:d2:e4:c8:
ab:e6:e5:8a:c9:b4:83:18:c9:a6:34:eb:85:79:1d:3f:2e:74:
24:4b:99:b4:3d:6c:4b:ef:bd:96:8d:bd:97:16:bf:67:c5:c4:
b8:7a:fb:3e:3b:eb:de:9f:9d:16:b7:85:9b:fa:92:67:fd:5d:
3a:c8:f9:76:60:ee:82:89:c3:7f:69:d5:d5:90:44:5a:ce:4c:
22:a9:1e:c5:ba:d5:c3:22:b1:95:bb:4d:cf:75:26:aa:72:68:
87:42:34:2a:6b:d5:7e:be:14:4e:e1:97:a0:37:f1:ab:be:45:
0d:96:07:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:57:49 2026 by rpki-client