Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier: yBZbkiH4CuCTyMzgQ//FMOrdKmTgBZhkWYcCKgPzazA=
Subject key identifier: 7E:D2:E5:7F:B4:85:FE:D1:BF:1D:29:E8:04:20:CB:4B:5A:5A:CE:67
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 01A187BF983AD7D88F2765DE71DC04EE3975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number: 1ACE
Signing time: Thu 29 Oct 2026 13:00:42 +0000
Manifest this update: Thu 29 Oct 2026 13:00:42 +0000
Manifest next update: Fri 30 Oct 2026 13:00:42 +0000
Files and hashes: 1: 6CjF8Jlu6tuK8zsCRGmRKkMW1aY.roa (hash: cbJEUas+h/1ENIgGWWNamGqYchFhfCj4L7NJTrlZrxc=)
2: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: Hi9BNadvute3X2VD5JSSRuIV6pvYPhIgYY9Iw8niF1s=)
3: sW8W0-8WOsG0evmu2fYzqrWdI9U.roa (hash: aDuewNAM6XmzF96K8nKeS1R/6Pbon3faWwSXg53klfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:bf:98:3a:d7:d8:8f:27:65:de:71:dc:04:ee:39:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Oct 29 13:00:42 2026 GMT
Not After : Oct 30 13:00:42 2026 GMT
Subject: CN=7ed2e57fb485fed1bf1d29e80420cb4b5a5ace67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:37:3f:64:d7:03:89:94:94:17:d3:d6:6c:
75:e5:dc:94:95:b6:44:4a:16:05:b0:d6:d2:7f:99:
a7:30:3e:d3:ad:8f:34:9d:3e:55:28:2c:26:09:51:
8e:d6:0e:82:06:5d:35:09:07:a7:b1:a1:dc:05:1a:
16:a5:05:26:6a:2b:95:a2:3c:00:e5:8c:c6:5b:40:
01:a7:a4:64:d0:38:99:70:3c:ca:9d:e3:17:a4:d0:
65:85:08:c1:ab:e7:5e:95:18:df:6f:36:9d:9c:55:
ab:0d:77:c5:fd:63:92:69:3b:e9:d9:92:78:9c:ef:
27:1e:dc:87:84:e4:8e:be:d7:c1:33:08:49:cf:9e:
9d:13:29:41:05:fe:db:5e:ee:93:71:42:4b:37:0f:
eb:bb:9b:8a:d7:53:95:25:c7:8a:37:81:0a:f7:af:
ae:a7:58:4c:ee:fa:56:6c:c4:cb:53:8f:a6:2e:51:
0b:19:e4:96:0e:e8:55:bb:c2:67:c4:7a:5e:bd:78:
5d:30:4d:1a:30:01:50:e3:c2:e0:1a:64:91:d4:9b:
cf:59:85:2b:5b:b1:d2:b7:46:a7:e5:02:72:67:a3:
b9:86:d4:15:bc:b2:de:48:6b:d9:66:ef:10:fe:99:
a6:29:08:31:8a:ab:2a:b8:4a:bf:a1:5c:52:4b:19:
0a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D2:E5:7F:B4:85:FE:D1:BF:1D:29:E8:04:20:CB:4B:5A:5A:CE:67
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:13:3a:85:7c:57:a5:75:52:52:69:bb:6f:f8:d7:04:c6:69:
59:2a:de:ae:19:26:6a:13:12:e1:96:49:8d:45:fa:40:78:14:
94:e6:27:f0:22:4b:7e:0e:9a:40:a3:d9:c9:d4:92:b5:8c:7c:
43:48:23:3f:d2:42:85:77:bc:20:b1:67:e9:8b:39:89:97:4c:
69:44:de:ad:7d:f8:96:68:be:0a:f4:66:00:d8:4c:a0:5f:df:
3a:85:7b:2b:a0:9a:47:98:18:ff:f6:62:7d:e7:fc:b2:f1:38:
b1:42:ea:47:aa:d5:45:45:fc:76:a6:d0:fa:03:57:61:21:76:
f5:d1:8b:88:18:c3:45:64:01:01:24:90:73:9f:fa:3e:27:87:
c9:7e:6b:66:a4:57:2a:6b:78:4b:ce:52:cd:7b:12:5d:6c:25:
25:4b:89:88:9d:02:11:58:5c:df:34:a9:13:ef:ab:53:f6:29:
72:28:5a:94:8e:c3:5d:69:00:cb:76:68:c5:fe:1f:39:d6:c4:
c3:19:da:4d:d8:b5:e2:65:53:a4:a5:bc:0a:10:72:15:01:70:
43:cb:43:2c:b1:9f:00:5f:8e:34:13:f9:24:3d:a2:49:2d:95:
9c:35:43:49:8b:d5:5f:76:33:26:d4:06:b4:25:70:ce:02:b4:
d6:d7:c3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:09:06 2026 by rpki-client