Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/ec8009-1d99-48c3-990f-2b187e703bee/1/CI3Wg9ZIlWdA7u307bvW4xqfeeY.mft
File: CI3Wg9ZIlWdA7u307bvW4xqfeeY.mft (raw, json)
Hash identifier: RjCD6hn9HXxli2IW07sbEmYIrF/fvqdzlDdD6pDqWIo=
Subject key identifier: E7:D8:CC:26:0C:E5:21:5D:10:09:A4:86:04:B5:E7:A5:B6:22:52:41
Authority key identifier: 08:8D:D6:83:D6:48:95:67:40:EE:ED:F4:ED:BB:D6:E3:1A:9F:79:E6
Certificate issuer: /CN=088dd683d648956740eeedf4edbbd6e31a9f79e6
Certificate serial: 01A0FA2241CADA53F33B329913A72AEA5AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI3Wg9ZIlWdA7u307bvW4xqfeeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec8009-1d99-48c3-990f-2b187e703bee/1/CI3Wg9ZIlWdA7u307bvW4xqfeeY.mft
Manifest number: 1E
Signing time: Fri 02 Oct 2026 01:02:23 +0000
Manifest this update: Fri 02 Oct 2026 01:02:23 +0000
Manifest next update: Sat 03 Oct 2026 01:02:23 +0000
Files and hashes: 1: 71lugQ5_7r4eLZmrofDqkyWcGo0.roa (hash: a/9q4zkTgyKqZhu+m/njxW9QDDH2cA3oCU55wTApOLI=)
2: CI3Wg9ZIlWdA7u307bvW4xqfeeY.crl (hash: z8bNywrIwZEOvFyFl9S43ghoMVVvqkKRPyWz2xDpoH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec8009-1d99-48c3-990f-2b187e703bee/1/CI3Wg9ZIlWdA7u307bvW4xqfeeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ec8009-1d99-48c3-990f-2b187e703bee/1/CI3Wg9ZIlWdA7u307bvW4xqfeeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CI3Wg9ZIlWdA7u307bvW4xqfeeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fa:22:41:ca:da:53:f3:3b:32:99:13:a7:2a:ea:5a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088dd683d648956740eeedf4edbbd6e31a9f79e6
Validity
Not Before: Oct 2 01:02:23 2026 GMT
Not After : Oct 3 01:02:23 2026 GMT
Subject: CN=e7d8cc260ce5215d1009a48604b5e7a5b6225241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:39:88:c4:86:63:37:10:ce:46:4b:cd:dc:b2:
89:3e:53:05:ad:68:75:54:69:0d:d4:b3:99:8c:2b:
01:c1:eb:19:28:96:01:de:ab:06:fd:88:cc:09:5c:
95:b8:83:20:04:35:c0:60:dc:bf:fb:30:2a:0c:17:
15:3d:af:50:3e:14:a7:e9:42:45:d1:e1:e5:00:8f:
33:8f:2c:ef:5f:04:29:e5:93:d9:7b:20:71:eb:bf:
09:0d:eb:36:f3:8f:f1:4b:46:54:95:7a:e1:30:b6:
c8:09:2b:fb:39:7f:52:55:15:ec:ab:c9:9f:f3:a2:
a2:ef:21:00:fa:8c:fe:09:e2:8b:4c:28:a3:89:a2:
8d:eb:bb:15:9f:d4:32:90:1b:4f:cf:8c:9c:5b:a2:
e3:69:0e:9c:c9:63:0f:8b:fe:26:80:7e:99:8c:9a:
17:73:ed:3d:6e:4b:0e:a4:dd:e3:88:ff:4d:19:f2:
f4:11:9b:59:e0:8b:19:1d:19:2d:51:a8:bc:ff:8a:
3e:4b:ad:fa:4b:1e:42:6e:64:d4:12:34:0a:bb:52:
e9:88:8d:25:5a:53:c4:55:55:b8:f4:1b:75:73:57:
89:da:f2:2a:f1:cb:85:ed:98:ea:8e:1b:15:42:e2:
3e:9b:95:b0:94:96:7d:a7:ef:d1:23:14:a8:29:64:
9f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D8:CC:26:0C:E5:21:5D:10:09:A4:86:04:B5:E7:A5:B6:22:52:41
X509v3 Authority Key Identifier:
keyid:08:8D:D6:83:D6:48:95:67:40:EE:ED:F4:ED:BB:D6:E3:1A:9F:79:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI3Wg9ZIlWdA7u307bvW4xqfeeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec8009-1d99-48c3-990f-2b187e703bee/1/CI3Wg9ZIlWdA7u307bvW4xqfeeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec8009-1d99-48c3-990f-2b187e703bee/1/CI3Wg9ZIlWdA7u307bvW4xqfeeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:fc:67:58:27:77:4a:2e:a4:93:59:2e:d7:b4:f3:54:fe:69:
c2:8b:68:87:59:20:19:95:77:0b:2f:08:08:10:d3:e7:ed:64:
ff:e0:49:18:36:14:b4:e9:90:ec:ba:be:07:7f:3b:13:05:bb:
0b:18:23:3b:6c:9b:51:7f:0f:58:33:07:68:24:76:1c:88:45:
8f:08:1e:0d:14:ce:e4:ac:96:2e:50:ff:34:a7:9b:a7:81:7f:
9a:c3:b8:74:01:b5:10:f5:12:24:d0:99:2f:37:b8:a7:a9:a9:
90:85:3b:aa:31:4a:63:33:13:17:1d:53:b5:d6:81:29:3b:a1:
be:8d:cd:b6:ee:d8:33:18:5f:c3:91:0d:40:08:46:45:8c:a5:
e6:f6:51:8b:85:3e:54:eb:87:cb:20:07:5a:81:ef:c8:49:fa:
cd:70:e8:a6:ca:46:d8:d3:36:d5:1b:73:b3:bd:cf:d3:0d:63:
8d:f3:5e:d9:13:e9:d8:42:4c:b4:5a:86:51:07:ad:24:b7:3b:
51:17:7d:80:4a:4f:51:d9:0a:6d:c2:31:63:ba:56:c7:eb:f6:
0d:9c:6e:9d:0e:76:e2:cb:ff:41:ed:b1:84:6c:41:fa:ee:28:
4d:95:1e:69:19:2d:c3:a9:dc:12:8a:42:8d:a5:c5:b1:f3:17:
02:6e:8e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 11:17:42 2026 by rpki-client