
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
File: 7q2qYzkQO9tVZtgycdPEfABcJQ0.mft (raw, json)
Hash identifier: DADlt/FIGhnvjKvownM5sUH1sqVOnas9QHqnlKgjg94=
Subject key identifier: C1:76:CF:F6:41:AE:80:8E:32:F6:4B:BB:57:89:DA:44:B9:84:93:6C
Authority key identifier: EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
Certificate issuer: /CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Certificate serial: 01A001A5A5A4AE78E14C947DA1457A5444D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
Manifest number: 0E66
Signing time: Fri 14 Aug 2026 19:00:28 +0000
Manifest this update: Fri 14 Aug 2026 19:00:28 +0000
Manifest next update: Sat 15 Aug 2026 19:00:28 +0000
Files and hashes: 1: 7q2qYzkQO9tVZtgycdPEfABcJQ0.crl (hash: tqfeeSrIEbYtFznNQ8v1FK+JMM26tJK+B1xjZHhR7wk=)
2: Mt1633RiBIpuKnZW3jSMaHpSdRI.roa (hash: 6BNDp2CLnyhsZWA//die5Cd+w8BRp6sCkxu8tySEnX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:a5:a4:ae:78:e1:4c:94:7d:a1:45:7a:54:44:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Validity
Not Before: Aug 14 19:00:28 2026 GMT
Not After : Aug 15 19:00:28 2026 GMT
Subject: CN=c176cff641ae808e32f64bbb5789da44b984936c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:2f:a6:f0:05:a9:e8:de:77:0c:81:39:79:
4c:fc:f4:2a:b2:5f:4c:aa:db:58:9b:9e:29:13:19:
b3:37:b0:4d:32:2e:d3:4f:51:c5:73:1a:9a:db:3c:
c5:05:00:e6:ab:21:2a:66:ff:11:9c:7d:6b:c8:5b:
a6:97:0a:f8:c0:ca:b8:d1:a0:b9:9c:01:4a:3d:84:
17:63:7e:bd:17:7b:2f:2f:f0:a9:b2:33:d8:00:02:
c4:6e:7f:b5:fc:e8:63:3b:1f:b9:7f:6e:0c:26:18:
38:40:be:52:59:0d:2c:a2:bf:b2:2a:5a:21:6f:23:
d4:65:49:83:d7:98:f8:75:03:65:fc:17:18:08:26:
5f:b1:63:15:7c:b7:b3:fb:19:e8:7b:7c:69:a9:54:
85:de:e6:f5:1c:38:8b:94:62:f2:b9:3b:2a:31:cd:
1e:4e:7d:ea:20:5f:38:04:1c:3b:ce:02:ff:b7:08:
af:10:8f:da:fc:a0:fb:12:0a:02:76:df:84:ab:cb:
cc:26:33:38:43:bb:47:1e:39:f2:b5:07:f0:a0:4e:
16:a4:1b:1e:17:41:83:60:06:48:56:bb:b2:ce:8a:
0a:86:7a:04:1f:8d:ef:82:44:5f:4c:24:bc:9b:3e:
a7:ff:e8:b7:c7:be:41:bc:1b:9c:e8:f8:cb:de:b6:
ac:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:76:CF:F6:41:AE:80:8E:32:F6:4B:BB:57:89:DA:44:B9:84:93:6C
X509v3 Authority Key Identifier:
keyid:EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:74:3c:c1:07:29:08:de:a4:a0:94:a3:17:30:5f:21:ec:19:
9d:f7:37:5c:e2:92:f6:0f:3a:06:84:fc:ee:67:d2:c5:f8:2a:
bc:f0:e6:f1:49:89:5c:e6:55:3c:04:e6:f7:36:2e:64:04:e9:
6f:fd:3b:9d:e6:b0:b4:f1:3d:11:e3:d3:a4:82:e7:07:e5:d2:
9b:84:20:67:83:1a:c9:c1:71:fe:7d:15:9b:d8:04:d0:f6:c7:
b6:ad:8e:75:46:04:50:1a:63:31:d3:3e:51:30:7b:62:73:b1:
45:60:16:d8:25:46:c6:24:0e:26:32:b0:79:7d:14:8d:6c:ad:
74:0e:09:38:c6:df:9e:45:b2:4a:91:cf:91:f0:19:8d:4f:b6:
c2:ae:83:ee:7d:55:4b:65:20:69:7a:61:0f:f7:e4:e2:ca:9a:
4e:03:36:98:f1:c3:1c:76:76:ae:bf:ec:6f:0c:af:fc:48:5b:
f3:04:52:ed:ed:2e:99:52:43:9e:40:d7:73:d6:a8:54:c3:7a:
b3:85:35:ee:e2:77:43:ad:08:2a:b8:cc:e6:b4:7b:47:97:f6:
c8:fa:08:f9:17:2f:0b:4b:77:a0:13:95:09:27:47:e3:1a:83:
59:2e:47:f1:cc:08:36:1b:d8:48:62:74:4b:6b:d1:e7:4f:ae:
a8:81:0d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:06 2026 by rpki-client