Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
File: 7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft (raw, json)
Hash identifier: +kRPkfC+/BE04aR/kkJD3yS7pOshEbaebVIzIArlbik=
Subject key identifier: 35:F0:17:09:8A:80:A8:88:D3:74:E2:A9:BC:EB:45:13:BD:63:1F:10
Authority key identifier: EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
Certificate issuer: /CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Certificate serial: 01A13DEF4AE6E0F20DC4C7E99F857B8B701A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 05:00:54 +0000
Manifest this update: Thu 15 Oct 2026 05:00:54 +0000
Manifest next update: Fri 16 Oct 2026 05:00:54 +0000
Files and hashes: 1: 7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl (hash: zzRYidJJxsRBdAw7RATxMNXsW5Kr7sQMIlz4zRfqG1Y=)
2: aTDLH8OzshREg-8mq0j-dLNvoVA.roa (hash: bWxd+gcoFiIXVBKwuiK0uKoGEVScpNqYAsExPghzTho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:4a:e6:e0:f2:0d:c4:c7:e9:9f:85:7b:8b:70:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Validity
Not Before: Oct 15 05:00:54 2026 GMT
Not After : Oct 16 05:00:54 2026 GMT
Subject: CN=35f017098a80a888d374e2a9bceb4513bd631f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:ee:a8:ea:a5:44:f7:18:52:28:d6:f1:5c:
88:40:d3:2a:2d:42:24:5f:54:d4:e8:e8:9a:0c:93:
5c:84:bc:8e:a6:06:aa:03:2c:30:2b:ca:75:48:ce:
aa:68:d4:1d:c4:4a:58:f1:e4:83:1d:1f:7d:27:2f:
a7:24:d4:c3:14:65:23:c0:9c:22:4e:90:6c:d9:49:
08:ca:0c:ea:33:e7:d0:01:fc:85:5e:3e:ad:78:f1:
9a:fe:35:e9:06:18:58:90:0b:88:10:00:03:0e:f0:
92:ea:b0:6e:10:06:41:e8:b7:86:80:31:b0:f1:cb:
df:a7:80:71:ad:5b:e4:e9:ea:bd:dd:33:cf:b4:3b:
87:a8:33:de:2b:0f:05:89:29:10:67:92:1c:93:73:
d8:4f:bb:d7:88:6b:3d:dd:2e:11:54:c6:0b:f9:27:
39:aa:2e:97:2a:da:f0:3f:db:f7:64:7e:8d:8e:93:
45:2e:dd:9c:21:21:bd:3a:6a:dc:7c:b7:72:4f:f6:
c0:ee:08:1f:ea:ca:04:9d:9d:7d:20:6f:50:4a:c3:
13:d0:0f:79:41:0e:c2:db:86:d0:5e:54:12:c1:4c:
e4:12:84:06:ae:fc:36:65:d1:a9:d1:ce:83:ac:cb:
e7:c0:eb:72:92:50:f4:81:1a:25:09:03:ea:ce:b3:
d4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F0:17:09:8A:80:A8:88:D3:74:E2:A9:BC:EB:45:13:BD:63:1F:10
X509v3 Authority Key Identifier:
keyid:EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0e:f3:b1:d7:1b:76:2b:08:62:8a:af:b5:35:5c:fe:2a:61:
b4:ed:5d:70:b5:30:13:de:6a:b2:f2:aa:72:95:d2:f5:5c:19:
88:3e:39:05:06:ec:fd:39:f3:eb:27:c5:54:fc:0d:13:c8:0d:
37:80:08:51:c3:db:52:6b:17:19:9e:50:c7:5f:27:21:46:9f:
7e:78:49:a7:b2:e4:25:3d:d8:6a:a0:fe:05:91:d4:91:f7:d3:
eb:c5:a0:c3:f3:0d:89:70:67:ea:47:e9:9b:42:53:15:8a:6a:
90:2b:8b:6f:1a:68:f0:0f:1f:86:d6:59:06:2c:44:99:b4:1d:
a1:68:ab:5a:7c:11:95:4c:a8:c4:ed:84:02:5b:f9:2a:2c:33:
ba:f1:6c:cd:8d:d8:41:4f:55:f9:a3:86:f1:3b:7c:97:0f:e7:
76:1e:b2:0a:71:2d:62:8a:8c:de:80:4d:dc:b1:3d:95:82:13:
4e:aa:de:5b:ef:97:b4:82:f1:ae:25:ae:ca:4e:42:41:60:2f:
a7:48:da:92:ab:21:e4:63:ec:8b:be:b9:c3:0e:3d:01:b9:fc:
ba:eb:43:d9:5c:a5:2d:2c:19:93:c3:7b:48:c9:24:f8:a3:ea:
98:8a:16:bd:8c:09:d8:95:98:9a:fd:25:c6:5f:b8:d2:01:4d:
15:15:34:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:26:56 2026 by rpki-client