Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
File: 7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft (raw, json)
Hash identifier: fbCtGATTjEkcmwDrkZzKRup8C3xSX6YCKYQtDLrWkMU=
Subject key identifier: 01:FC:97:17:49:6E:D9:B5:0B:0A:0C:A7:8A:19:8C:56:85:1C:D2:74
Authority key identifier: EC:E1:50:63:CB:0B:3E:78:88:8C:B4:D0:F2:2A:04:A1:93:DD:67:06
Certificate issuer: /CN=ece15063cb0b3e78888cb4d0f22a04a193dd6706
Certificate serial: 01A08C7B59C701A23446A7087DC3AC4D4026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
Manifest number: 0260
Signing time: Thu 10 Sep 2026 18:01:29 +0000
Manifest this update: Thu 10 Sep 2026 18:01:29 +0000
Manifest next update: Fri 11 Sep 2026 18:01:29 +0000
Files and hashes: 1: 2gPdkQWW9jUCbizX1SsNX62y_98.roa (hash: VSRNfwKyTAYD9LB8Wv+fsBtowZBw7KWBvIp7E5dQ+Cg=)
2: 7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl (hash: +NC/hypLiatlq2Q/nXI0t72HQuF/Z/hVkNuoAIFKv0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:59:c7:01:a2:34:46:a7:08:7d:c3:ac:4d:40:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ece15063cb0b3e78888cb4d0f22a04a193dd6706
Validity
Not Before: Sep 10 18:01:29 2026 GMT
Not After : Sep 11 18:01:29 2026 GMT
Subject: CN=01fc9717496ed9b50b0a0ca78a198c56851cd274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:66:7c:dd:94:7c:7c:c3:92:bd:f7:a7:30:6f:
02:c6:c3:a6:f4:a1:d0:57:e2:c7:a1:6e:2a:5b:3c:
57:90:41:f4:17:4f:20:d4:8a:53:c7:01:e6:57:24:
80:39:da:c1:9e:4e:6f:71:14:2a:1f:f0:24:b3:0e:
39:68:99:de:82:b8:30:3b:5f:0e:af:8e:32:07:fc:
a5:72:3a:34:d7:96:b8:ac:ef:12:f7:72:b4:d2:f8:
e8:5a:80:1f:b7:7d:da:c7:5c:59:d3:5c:7b:f8:92:
ff:c1:85:81:fc:6c:e6:13:5e:66:13:56:12:e3:64:
b5:d7:8b:70:6e:d4:60:92:03:36:c5:1e:1c:c8:79:
88:5a:c2:d7:f3:9f:07:19:78:ca:0d:56:29:d7:31:
f1:07:d1:6d:b0:91:49:c0:59:97:71:e2:f5:62:c3:
4a:e7:a1:38:60:e3:87:e1:d7:c0:f7:61:3e:f0:36:
43:56:7b:d8:48:83:c3:1e:01:2a:44:e1:23:2c:dd:
52:59:61:52:9d:12:c2:8f:93:d1:f0:f2:87:96:c2:
77:af:ce:6c:b6:c3:7d:75:0f:d8:53:22:00:ca:87:
24:c4:ed:64:64:43:5e:34:2d:9c:ed:30:9b:ae:a3:
ff:15:a6:14:8a:ea:1c:a1:a5:6e:6e:76:fb:d2:64:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FC:97:17:49:6E:D9:B5:0B:0A:0C:A7:8A:19:8C:56:85:1C:D2:74
X509v3 Authority Key Identifier:
keyid:EC:E1:50:63:CB:0B:3E:78:88:8C:B4:D0:F2:2A:04:A1:93:DD:67:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d5:ac:3b:0e:84:c3:2a:01:06:8a:8b:b9:59:ee:66:84:a8:
85:ca:71:e4:19:ce:00:ea:56:32:34:f7:64:4b:e4:a5:19:d7:
ba:36:91:2d:2a:94:c0:8c:c1:90:f9:77:18:e3:0a:b8:b2:12:
d8:b3:92:6d:67:2c:00:62:83:27:f4:8e:7f:59:ed:6b:2c:dd:
f5:c6:50:ca:de:b5:ea:10:a9:a6:35:74:ed:2e:d1:47:4d:fb:
db:98:9e:4b:3d:0e:9b:b4:9f:58:e3:9a:9e:36:72:ef:e9:8e:
51:49:a4:8f:b4:75:2a:d8:37:f6:cf:e0:b8:bd:48:4d:e4:56:
4c:79:19:61:e4:3b:91:85:e6:5d:e6:a7:13:cf:62:32:fc:18:
60:b3:2d:94:22:f4:9a:4b:b5:23:1a:38:f7:49:b9:a8:ae:99:
c2:ae:5d:81:18:10:28:5c:65:28:f9:4f:28:23:c2:65:9a:75:
5c:85:05:a2:b0:5e:4d:3d:ca:dd:b0:ed:86:4e:eb:81:17:40:
92:16:fe:92:bb:1e:da:67:d3:0f:d2:54:b2:88:6d:0c:3f:d3:
28:f9:f3:3d:7e:e0:90:f8:01:55:cf:2e:28:15:ff:ca:b4:3c:
f8:4a:bd:d5:f5:5d:34:24:7e:08:7a:d6:95:ba:6f:d6:0d:d9:
07:b1:14:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:13:18 2026 by rpki-client