Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
File: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft (raw, json)
Hash identifier: uLUN1nCW0RNVgaQiWiWnxT8vgD1fOLe6kRn0+HrR5NU=
Subject key identifier: 59:03:86:F4:53:FF:3F:8A:6D:2B:CD:72:7E:A4:36:08:4F:50:92:09
Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Certificate serial: 01A0811C039A36A96106D9D00B33D7A494BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
Manifest number: 1A47
Signing time: Tue 08 Sep 2026 13:01:31 +0000
Manifest this update: Tue 08 Sep 2026 13:01:31 +0000
Manifest next update: Wed 09 Sep 2026 13:01:31 +0000
Files and hashes: 1: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl (hash: C0kDON3ccGdnzveU07PFARVSEp5oAN96ODtFFdGSBVg=)
2: Y1SgnZdGMmo9fGpuJl7wUQaxlkc.roa (hash: c5a6z6fFSi3Ksmn1qg/vCHzequVOvVzrYowSPYYXoZY=)
3: zgjOZSAzojMMAhNOHNiG97-1lKs.roa (hash: 9AqyfTSVIr04hBsXGR4iW4XjBoNFR8P2652xVPdhD0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:1c:03:9a:36:a9:61:06:d9:d0:0b:33:d7:a4:94:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Validity
Not Before: Sep 8 13:01:31 2026 GMT
Not After : Sep 9 13:01:31 2026 GMT
Subject: CN=590386f453ff3f8a6d2bcd727ea436084f509209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ff:55:61:4f:0e:f0:43:20:90:69:5e:05:d2:
57:3a:72:24:04:b1:80:7b:89:1a:8b:0a:57:f1:87:
f2:0b:90:3d:7b:e2:83:44:58:c5:5e:e8:ec:0c:3c:
d5:50:19:7e:1b:b6:dd:d3:db:41:f0:28:26:18:59:
49:f0:c3:bd:62:c0:c0:d2:e4:72:0c:8c:8c:b3:cd:
96:f7:98:57:62:fd:52:9a:fe:29:9e:6b:96:f3:45:
11:37:d8:57:0c:a4:60:3b:6d:2d:0a:3a:a7:54:94:
73:b9:8b:f0:27:f1:9e:0e:42:9d:ac:4e:53:f2:ef:
a9:30:ae:c8:9e:18:46:45:f5:fa:0d:e7:d9:e3:bc:
e6:38:2a:51:17:1d:1e:7f:bd:f2:c0:f9:cd:f1:fa:
be:66:36:fd:9a:14:2d:02:c7:97:fe:ad:a2:e8:b5:
61:16:de:49:27:3b:2b:7d:27:5d:8d:32:b4:98:02:
13:0b:62:9b:72:a4:98:6b:cd:bd:6f:ab:fa:c0:8e:
2d:3e:44:5e:fe:5c:81:2f:4f:18:cb:d5:b5:50:89:
8f:9d:c4:55:13:60:44:2c:75:8b:09:3b:56:04:a8:
af:34:d8:75:15:43:6c:5e:16:49:88:d0:f0:d7:17:
01:43:85:11:14:ec:ea:d3:fc:93:86:b1:ab:c8:67:
d4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:03:86:F4:53:FF:3F:8A:6D:2B:CD:72:7E:A4:36:08:4F:50:92:09
X509v3 Authority Key Identifier:
keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:17:b9:c5:3b:ab:28:ad:37:9c:59:68:a0:aa:c3:24:35:26:
e9:db:88:cf:91:24:f2:e4:49:8a:19:cd:bc:32:5f:8b:93:01:
44:3a:95:9b:57:48:ae:d6:05:c3:f8:ff:6f:74:ed:17:25:65:
36:51:93:de:62:94:43:08:fb:67:60:ac:15:50:43:30:c8:a1:
7e:9f:04:35:3b:df:0d:c8:d4:f7:ce:71:51:90:dd:47:54:44:
05:ec:81:f5:c9:95:2e:cb:e6:2c:62:56:86:d1:d1:8e:3b:16:
29:d6:05:f1:74:cd:4a:90:23:10:45:f0:53:4a:61:28:06:04:
9b:c3:64:84:6a:d9:30:a0:a8:25:00:ae:17:0c:f7:ac:59:a0:
ef:56:fb:7d:fa:62:28:72:b7:4d:79:68:65:5a:3c:47:f4:07:
37:f2:3d:c0:fa:45:6d:dc:c1:b2:71:40:91:f5:a0:f7:5f:0c:
36:e6:ec:cc:01:f7:a6:79:8d:24:3e:65:ae:3e:a5:b8:0f:24:
39:8c:fb:7f:7b:ca:ac:17:de:57:be:c4:08:24:dd:75:aa:94:
54:3e:ad:2d:b7:a1:83:04:0c:d5:23:c9:a3:58:f1:84:d1:13:
51:eb:d5:da:94:08:09:81:bd:4f:a5:40:20:33:5a:97:ce:9a:
69:1c:d5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 23:59:37 2026 by rpki-client