Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
File: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft (raw, json)
Hash identifier: TeSDlTcDT29EKAZYS/TPWEUExamddPjE5zfl+f8WmU8=
Subject key identifier: E4:53:69:6A:3F:86:F3:A5:33:9A:33:D9:D7:28:00:01:66:52:C0:C2
Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
Certificate issuer: /CN=321ec4626ecde25335aff088b04c71395ae6bc24
Certificate serial: 01A05AB330ABE7A242BDB5284AFC09002A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
Manifest number: 1A2F
Signing time: Tue 01 Sep 2026 02:01:27 +0000
Manifest this update: Tue 01 Sep 2026 02:01:27 +0000
Manifest next update: Wed 02 Sep 2026 02:01:27 +0000
Files and hashes: 1: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl (hash: ojajhZZHTgx3raSbhl1elLkcnyUa96dWSfQZlq3G5qA=)
2: TDkaS-JTvMNiWICWG4ymOlGuWbk.roa (hash: rdEwK1puUd5tKIYhWm5xSUw39iHc4PHVAw0g6tLwiHU=)
3: xfHjlvR4GqmLKHrBF2UQj5zlnl4.roa (hash: 8M7wSB8jbbP+DfjlEMm6KSFYNEcYB3CLaxYLFnfuaa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:b3:30:ab:e7:a2:42:bd:b5:28:4a:fc:09:00:2a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24
Validity
Not Before: Sep 1 02:01:27 2026 GMT
Not After : Sep 2 02:01:27 2026 GMT
Subject: CN=e453696a3f86f3a5339a33d9d72800016652c0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:ba:55:96:c0:7f:d6:c2:be:58:f2:42:23:
1d:d0:34:c5:e2:d8:c3:12:1f:3d:b9:c4:17:58:bf:
ae:ac:91:72:40:1a:14:9c:19:9e:a0:f5:7e:65:78:
06:8e:b4:cb:52:c1:47:52:b0:4c:35:5c:70:86:81:
94:81:b3:62:1d:90:41:57:ac:a9:49:63:6e:10:d8:
d7:6c:bb:6a:65:87:b8:bf:ad:10:d6:fe:dd:d1:08:
cf:c1:f5:bf:d1:cf:bb:0b:01:5b:84:3c:b6:c6:f5:
dd:d9:dc:a6:15:90:03:f3:4f:ba:ad:6b:4d:b7:97:
66:21:a6:a3:2f:40:06:b1:5b:e3:39:31:37:78:db:
94:bf:aa:1e:f9:f6:1e:71:4c:48:cf:d6:e4:e8:d0:
07:66:b1:de:28:c1:ea:82:63:5d:e6:2a:b2:33:05:
96:52:63:90:c5:8c:81:dd:cd:4e:56:29:98:a9:fa:
2e:8f:ba:a1:ee:8c:0b:49:5c:45:9f:24:5f:80:cc:
f2:89:09:48:89:e7:c4:cb:a6:9a:66:b4:f6:7d:26:
f6:39:99:9d:7c:f4:96:64:b7:26:ac:84:80:07:a1:
2f:77:ac:84:b1:ca:8f:93:96:95:5a:1a:e6:6d:bf:
6a:2e:72:23:04:fc:21:45:48:33:2c:ec:ea:ad:91:
57:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:53:69:6A:3F:86:F3:A5:33:9A:33:D9:D7:28:00:01:66:52:C0:C2
X509v3 Authority Key Identifier:
keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:fb:16:a6:49:9c:a5:68:25:26:ee:a9:81:04:26:ac:3c:86:
70:1f:cf:62:0f:f9:af:b5:d2:b8:b7:13:07:b7:1c:9f:09:c8:
98:14:9f:61:1f:d0:df:d5:d2:07:42:b0:9d:12:ae:6d:e0:bb:
a6:d9:f4:79:ab:51:8b:6b:7e:a9:2a:96:0a:19:c2:9c:52:66:
bc:e8:5a:a2:97:b6:a1:71:80:5b:10:34:86:e3:3b:79:8d:ea:
8c:6d:db:9d:c1:cc:a7:86:d0:6b:f1:20:31:25:63:21:15:42:
09:c2:d0:f1:78:90:9e:a8:ba:e3:de:a3:c0:d7:8e:80:63:0f:
83:93:53:de:9d:eb:ac:5b:2f:87:61:4e:0c:ea:ca:e1:b9:a3:
ed:46:88:cf:e3:04:b9:ef:ff:36:8b:6c:8f:ef:23:ed:58:c3:
6b:c3:41:de:b7:56:8f:80:e9:a2:cb:88:fb:2e:7a:3e:08:37:
9e:f8:5d:8b:f5:b9:30:a9:4e:6e:7a:3b:49:55:45:d4:e6:15:
e9:bc:d3:e8:cd:e5:73:ac:8b:47:04:39:ae:b3:15:5a:f7:b1:
a0:da:fb:33:f2:1d:bc:3f:c6:02:d9:a2:eb:e5:91:ba:82:db:
6f:95:7f:6e:b0:f7:cf:f8:fa:94:e9:82:87:4f:b5:80:51:52:
38:0c:f4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:52:19 2026 by rpki-client