Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
File: 7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft (raw, json)
Hash identifier: 8zcUjMKasrQyaGj4egYPT4drZdaKLBS/6wcWOZETUEY=
Subject key identifier: 02:85:37:D8:38:11:42:07:FC:6C:8B:7A:91:42:78:4C:16:3D:3F:8D
Authority key identifier: EC:E1:50:63:CB:0B:3E:78:88:8C:B4:D0:F2:2A:04:A1:93:DD:67:06
Certificate issuer: /CN=ece15063cb0b3e78888cb4d0f22a04a193dd6706
Certificate serial: 01A17FD00DC03F745E0EABD96224E323F3E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
Manifest number: 02DE
Signing time: Wed 28 Oct 2026 00:01:43 +0000
Manifest this update: Wed 28 Oct 2026 00:01:43 +0000
Manifest next update: Thu 29 Oct 2026 00:01:43 +0000
Files and hashes: 1: 2gPdkQWW9jUCbizX1SsNX62y_98.roa (hash: VSRNfwKyTAYD9LB8Wv+fsBtowZBw7KWBvIp7E5dQ+Cg=)
2: 7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl (hash: xxh+fnAKqke0r7P6wJiMMGnuS9MXpWHdN0K2t4T/fag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:d0:0d:c0:3f:74:5e:0e:ab:d9:62:24:e3:23:f3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ece15063cb0b3e78888cb4d0f22a04a193dd6706
Validity
Not Before: Oct 28 00:01:43 2026 GMT
Not After : Oct 29 00:01:43 2026 GMT
Subject: CN=028537d838114207fc6c8b7a9142784c163d3f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:53:5a:dc:34:c8:a5:20:aa:48:00:66:61:
a4:7e:ab:91:91:00:79:fb:de:28:c0:3e:63:a3:cf:
b1:b7:1c:10:87:b3:24:f1:f1:8a:c5:0f:1f:d2:09:
dd:2f:96:ab:2c:df:a4:e3:15:87:9c:ed:fd:cf:f0:
4d:a1:6b:fc:b1:1e:6d:68:c8:31:af:1f:6b:1c:19:
8b:71:c7:23:89:8f:1d:c8:09:d2:6c:67:bf:b1:bb:
e1:fb:2b:40:ba:f5:c2:8d:41:2c:68:2f:e5:7e:c9:
7f:e8:24:ca:2e:a1:ca:33:f1:78:87:e3:6c:f9:cc:
47:4b:40:cc:89:58:61:9f:3f:ea:c3:7a:a8:30:6c:
88:9b:0a:fc:d1:a5:f6:4c:fe:07:0e:9d:7f:9f:14:
8e:37:84:f5:d6:6e:21:16:3c:0a:46:06:8f:0a:08:
db:da:63:df:4e:3f:fc:df:a0:b0:ba:b3:09:3f:a3:
8b:54:ae:df:f2:62:9b:98:3a:18:f0:9d:91:08:4a:
c0:bd:4c:a0:db:f4:59:10:86:2f:22:2e:03:cf:4a:
42:09:2f:a9:43:bb:51:1d:64:a3:df:66:fc:93:63:
ac:f9:f7:19:55:f9:ff:f4:19:7e:03:c9:b8:1f:b8:
26:ac:0d:ff:30:6d:44:96:fa:04:bc:b5:38:f5:c5:
62:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:85:37:D8:38:11:42:07:FC:6C:8B:7A:91:42:78:4C:16:3D:3F:8D
X509v3 Authority Key Identifier:
keyid:EC:E1:50:63:CB:0B:3E:78:88:8C:B4:D0:F2:2A:04:A1:93:DD:67:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:aa:01:52:ea:6f:d4:88:d2:48:1c:db:39:e2:20:08:f0:da:
d9:70:97:71:67:50:9d:ff:cb:e8:6a:72:48:a3:51:82:c2:5a:
26:6b:a1:88:53:60:82:3c:24:48:c3:e1:83:6a:b4:f0:56:5d:
cf:41:10:a1:f9:bb:d3:4b:46:71:a7:76:66:fc:bb:34:c4:f3:
a0:5a:17:30:b3:ac:8c:50:bc:ef:dc:07:ed:e0:9a:a0:5a:76:
ef:fa:77:51:d0:c9:ad:4d:ad:4a:d1:bd:3d:5f:28:1f:2f:ee:
6e:6c:6f:b6:25:f2:39:77:5d:3f:d8:bf:ad:e3:9c:fc:56:64:
21:47:75:3b:c3:42:6c:72:9f:6c:7c:64:d2:e3:29:8b:06:20:
0b:35:ab:3b:6e:3e:37:0d:f2:82:cb:12:23:76:16:3b:c4:0c:
72:05:bd:e7:37:a2:f2:c9:0b:92:06:cf:01:bc:73:20:da:72:
32:fb:0a:8a:40:db:3e:cd:51:c9:d2:b8:e5:fe:1d:5a:86:18:
68:34:0e:84:20:6b:60:ca:99:61:e9:62:ac:1d:ab:fd:e9:64:
61:0e:e2:da:57:39:59:b3:65:38:84:fe:f2:46:bc:1a:76:62:
06:cb:f5:67:ca:4f:4f:93:38:fe:97:c4:8d:e4:dd:80:e5:99:
e3:3e:fa:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:23:50 2026 by rpki-client