Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/4e1653-b9ee-41dd-b89a-0cb760d06893/1/tc7_pEFlcslb64GgD9agmpClWAg.mft
File: tc7_pEFlcslb64GgD9agmpClWAg.mft (raw, json)
Hash identifier: 4bNp8xSxttgvNCvE7TB9+f849dp/U7IQZCakHP167Zw=
Subject key identifier: 00:D2:4B:38:2E:4B:67:8E:CC:75:C6:9F:EA:5D:94:52:4A:36:3C:0E
Authority key identifier: B5:CE:FF:A4:41:65:72:C9:5B:EB:81:A0:0F:D6:A0:9A:90:A5:58:08
Certificate issuer: /CN=b5ceffa4416572c95beb81a00fd6a09a90a55808
Certificate serial: 01A12FFC9969A6BCB074091A812034D569A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tc7_pEFlcslb64GgD9agmpClWAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e1653-b9ee-41dd-b89a-0cb760d06893/1/tc7_pEFlcslb64GgD9agmpClWAg.mft
Manifest number: 28
Signing time: Mon 12 Oct 2026 12:00:45 +0000
Manifest this update: Mon 12 Oct 2026 12:00:45 +0000
Manifest next update: Tue 13 Oct 2026 12:00:45 +0000
Files and hashes: 1: huN3XZd8-ep6VLaPFRDTnPf5qiI.roa (hash: 2Atc+VaWjnlqejGp7Ofwmu5aav4aN04SS5XeGreQ09E=)
2: tc7_pEFlcslb64GgD9agmpClWAg.crl (hash: Cihk07nJC369AxFg/gDHAsbZxvnxkx6lazfHJjhcBX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e1653-b9ee-41dd-b89a-0cb760d06893/1/tc7_pEFlcslb64GgD9agmpClWAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4e1653-b9ee-41dd-b89a-0cb760d06893/1/tc7_pEFlcslb64GgD9agmpClWAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tc7_pEFlcslb64GgD9agmpClWAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:fc:99:69:a6:bc:b0:74:09:1a:81:20:34:d5:69:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ceffa4416572c95beb81a00fd6a09a90a55808
Validity
Not Before: Oct 12 12:00:45 2026 GMT
Not After : Oct 13 12:00:45 2026 GMT
Subject: CN=00d24b382e4b678ecc75c69fea5d94524a363c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2c:1b:bd:f1:3d:7c:e1:b0:42:76:05:4c:85:
eb:fe:43:3c:d9:66:9f:33:b4:09:0d:8a:3d:ac:23:
a1:70:3c:82:80:b4:36:cb:ba:4b:b5:27:aa:cb:a5:
c3:16:9f:cb:ce:d5:1c:a5:40:62:cc:51:84:a8:b3:
41:5f:d5:3c:78:d4:11:1d:68:11:25:1d:99:32:fc:
14:de:81:a9:f0:8f:18:e9:16:70:b5:34:0e:fd:c6:
fa:f4:bd:0b:99:06:9b:5b:61:ba:d9:79:9f:ed:d4:
27:da:7d:0b:08:b7:85:eb:c1:a5:4d:84:b3:89:08:
89:fe:36:89:90:38:c6:b5:a2:ea:cd:bc:11:c6:76:
06:55:37:e3:4e:69:cc:c2:13:3c:d9:89:a2:4d:1b:
50:2e:0f:41:92:de:91:d1:e2:0c:9f:0c:49:f6:dd:
ba:be:75:a7:d9:ad:28:83:c6:40:7b:70:79:40:30:
11:99:bd:eb:84:5d:e0:2e:0c:be:89:37:4c:39:c4:
82:23:45:e0:90:ad:18:ec:83:08:2e:53:d6:c0:a5:
71:06:4c:83:ed:ee:52:25:61:ea:55:d5:5f:9d:68:
e5:97:6a:53:3d:34:3c:0c:0c:08:32:4d:c0:6f:ea:
48:9f:1a:ef:a4:02:eb:03:86:97:58:d1:8b:48:81:
42:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D2:4B:38:2E:4B:67:8E:CC:75:C6:9F:EA:5D:94:52:4A:36:3C:0E
X509v3 Authority Key Identifier:
keyid:B5:CE:FF:A4:41:65:72:C9:5B:EB:81:A0:0F:D6:A0:9A:90:A5:58:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tc7_pEFlcslb64GgD9agmpClWAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e1653-b9ee-41dd-b89a-0cb760d06893/1/tc7_pEFlcslb64GgD9agmpClWAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e1653-b9ee-41dd-b89a-0cb760d06893/1/tc7_pEFlcslb64GgD9agmpClWAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e9:65:57:5e:6a:36:40:03:c9:a1:80:4f:c0:0b:dd:87:56:
c1:e4:83:79:52:2e:d1:a5:81:ff:8f:14:d1:f6:a4:68:27:57:
f5:6a:9f:57:16:3c:ab:42:58:73:69:d3:68:fe:10:2b:3a:5c:
76:2a:db:3a:9d:50:67:fb:fe:ec:70:83:6c:75:8e:9a:0b:0c:
ba:95:1b:77:31:b0:6e:12:09:e8:b8:2b:41:23:34:63:eb:da:
6b:52:e6:23:c6:e0:c0:01:14:e2:90:60:02:92:62:6a:b5:71:
70:64:b7:d8:d1:89:ce:1c:1e:12:69:f2:bb:2e:51:eb:c9:4b:
40:a3:4c:e8:b1:f0:f6:6e:7f:fb:64:76:e2:85:ae:62:22:bc:
34:70:9f:06:b8:ed:a6:14:15:c7:00:ce:5e:cc:4e:b9:e9:e1:
08:f4:98:5e:40:9c:79:31:10:ba:7e:00:27:c0:bd:e4:71:69:
3c:d5:0d:65:fc:05:88:c7:d1:b5:81:bf:72:4f:2e:4b:f8:93:
c2:f5:53:67:94:86:c0:03:8e:27:a0:bb:17:35:b9:b5:5a:2f:
00:8b:12:1b:6c:02:9b:84:35:e3:47:dd:bd:4e:f1:e2:93:c6:
9d:b9:87:52:2e:de:86:2a:24:b2:50:b8:d2:20:b9:ff:ce:06:
53:e6:d2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:26:46 2026 by rpki-client