Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier: nvmLLjuQZxwhZNh2npGcMR+o9RgIvl5zkXxWxGBV4j8=
Subject key identifier: 67:12:B9:55:98:E1:04:7A:B9:B9:AB:E6:20:36:D0:93:13:3E:D2:9F
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 01A183E372E93CADFE49E66993463CF076AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number: 1ACC
Signing time: Wed 28 Oct 2026 19:01:23 +0000
Manifest this update: Wed 28 Oct 2026 19:01:23 +0000
Manifest next update: Thu 29 Oct 2026 19:01:23 +0000
Files and hashes: 1: 6CjF8Jlu6tuK8zsCRGmRKkMW1aY.roa (hash: cbJEUas+h/1ENIgGWWNamGqYchFhfCj4L7NJTrlZrxc=)
2: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: 94Vx3807rluKt8/g/bQzEFnVPfk7pnUWQOJLtRr0oOs=)
3: sW8W0-8WOsG0evmu2fYzqrWdI9U.roa (hash: aDuewNAM6XmzF96K8nKeS1R/6Pbon3faWwSXg53klfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:e3:72:e9:3c:ad:fe:49:e6:69:93:46:3c:f0:76:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Oct 28 19:01:23 2026 GMT
Not After : Oct 29 19:01:23 2026 GMT
Subject: CN=6712b95598e1047ab9b9abe62036d093133ed29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3f:ad:80:25:bc:46:a0:f3:8d:15:01:88:e0:
c7:41:39:8c:9d:73:f7:96:89:ee:a1:15:db:bb:82:
8a:58:99:b0:99:e7:ca:c4:2d:a9:0f:66:17:e7:3d:
aa:f1:0b:71:e9:ac:4e:d1:63:44:b9:7e:b7:37:e7:
42:d8:98:41:ae:60:4d:10:61:04:20:cd:09:e1:b4:
af:83:88:5a:48:d5:85:43:aa:e1:0e:b8:5e:ec:f0:
f0:95:22:ca:1e:00:59:0c:0d:e0:71:78:8a:f4:83:
1b:10:d2:34:69:65:c1:74:08:05:b3:dc:ec:78:8e:
d1:54:24:80:5b:b9:e2:c0:5d:1d:67:0d:b7:9c:37:
fc:84:65:28:30:f4:52:27:33:9f:9f:88:47:a6:de:
b8:d4:1c:8e:35:9c:df:3c:6f:e8:21:ce:3d:57:a8:
c3:1b:f5:bd:c0:d4:37:dd:08:bb:3b:74:e5:db:1a:
59:bb:f8:35:3b:f9:95:d6:f6:28:15:54:36:18:56:
55:07:20:6f:0e:b8:18:87:a7:21:03:4f:bb:ac:ab:
ab:47:e9:f1:97:f8:7c:c9:07:d3:f0:6c:d9:b1:d9:
64:5e:7a:4f:84:f6:7f:95:c4:84:de:ad:d8:9a:c2:
a4:6f:43:38:c5:34:c3:64:b1:55:f1:d1:94:64:1d:
a1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:12:B9:55:98:E1:04:7A:B9:B9:AB:E6:20:36:D0:93:13:3E:D2:9F
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a5:9d:65:12:e0:fb:c5:71:f5:41:11:84:11:e7:60:a9:25:
56:94:35:c2:cc:1f:e3:43:81:a9:a7:22:78:e6:36:d4:0c:2d:
89:6d:6d:58:3a:b4:dc:b6:03:c8:3b:ea:08:9f:56:94:de:a1:
79:5c:cd:f3:29:37:ee:6b:45:96:6e:55:70:fb:85:af:51:d6:
7a:56:c8:50:c7:8b:cc:42:d8:b0:32:5d:88:7c:17:6f:a5:10:
95:22:b1:23:ab:04:52:ca:c6:3a:66:b1:8a:2b:96:1c:a1:db:
71:3e:85:e5:1e:8f:cc:61:c9:a7:37:b7:2a:a0:17:d7:6f:e4:
5b:be:1f:e8:9a:e8:2f:64:5c:24:3e:43:7b:f2:7f:47:d2:d6:
e5:98:c2:5c:cc:e0:68:2c:cc:04:16:cc:bf:d6:4e:15:ca:0d:
74:7e:a4:ee:45:00:0c:e7:e5:fd:2e:fb:f8:f2:3e:9b:b3:cc:
98:22:4c:7c:37:92:90:91:d6:09:33:ba:96:17:4b:14:7a:77:
ed:a9:fc:ac:45:4e:2c:9b:90:7f:c1:68:5f:f5:dc:61:41:fd:
8d:17:f3:64:53:2c:49:1b:86:61:0d:26:c2:d5:46:29:32:08:
ac:83:44:59:62:3b:1f:4b:77:de:36:aa:25:8c:7c:ca:79:40:
c1:8f:dd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:38:52 2026 by rpki-client