Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft
File: n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft (raw, json)
Hash identifier: eVMaa7ZsUxFMM9+1CmUvVhrUIrc3fFuKQCE7Gm4lLuQ=
Subject key identifier: EE:B0:FB:6C:04:27:DC:11:92:6A:01:01:91:96:F8:E7:A5:E3:8D:3F
Authority key identifier: 9F:B1:F5:0F:BF:83:94:88:29:2B:96:FD:93:21:6F:20:01:19:75:46
Certificate issuer: /CN=9fb1f50fbf839488292b96fd93216f2001197546
Certificate serial: 01A0262090EFE1722A0090CD49948BEF1F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7H1D7-DlIgpK5b9kyFvIAEZdUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft
Manifest number: 8D
Signing time: Fri 21 Aug 2026 21:01:03 +0000
Manifest this update: Fri 21 Aug 2026 21:01:03 +0000
Manifest next update: Sat 22 Aug 2026 21:01:03 +0000
Files and hashes: 1: Ts__go_5kraAxg_xlkVG1jwWF4s.roa (hash: SzNoYDdJ9H0cE2yBXjlxrXi58YXnSypRhyX9GFV3rA4=)
2: Ybqwvgb7jCczdCb2Qu8qDoLA0po.roa (hash: 93kNfuvYg28fBjqCkSjdY9sAKzd0yWZzLdceU613wsQ=)
3: n7H1D7-DlIgpK5b9kyFvIAEZdUY.crl (hash: /aTSLxykoeL5D6sUosQRjE+u33gmlezyIlUHSOrdJg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7H1D7-DlIgpK5b9kyFvIAEZdUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:20:90:ef:e1:72:2a:00:90:cd:49:94:8b:ef:1f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb1f50fbf839488292b96fd93216f2001197546
Validity
Not Before: Aug 21 21:01:03 2026 GMT
Not After : Aug 22 21:01:03 2026 GMT
Subject: CN=eeb0fb6c0427dc11926a01019196f8e7a5e38d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c4:a7:60:fc:b5:84:1f:da:c2:99:e4:40:da:
84:58:26:76:eb:18:70:b4:f6:58:f1:97:79:b9:59:
76:27:4f:5d:b7:e2:6c:99:29:be:54:ce:a4:52:8e:
b2:96:a0:93:e0:77:7a:79:0c:b5:56:68:38:93:d4:
9e:71:69:3b:91:f7:d9:41:76:01:9d:a5:36:25:fa:
e9:00:77:16:bc:7f:d7:99:1f:b0:5e:5f:96:b4:97:
d9:37:55:be:a6:94:c8:08:b7:e8:0b:30:02:1d:74:
6e:58:5f:a7:f4:c1:73:d6:15:f8:9b:9a:eb:03:07:
a6:04:0d:9b:2e:a0:da:6a:ef:b0:8f:6e:87:c0:cb:
9f:63:e2:36:67:40:33:52:f0:7b:74:40:79:d8:5f:
58:74:7c:45:2f:59:e4:91:4d:b3:88:72:6e:ff:84:
45:96:0f:ab:6a:c5:1b:66:63:4f:87:63:11:be:e9:
01:d8:b2:90:c7:32:8f:da:e5:60:b4:52:88:c6:a7:
bd:3c:12:61:3f:e2:a8:d6:4f:32:88:bc:59:d0:0b:
c1:0e:db:cc:f6:db:1f:a4:83:af:97:f6:db:bc:42:
7b:d2:42:cf:24:a4:43:80:b8:57:fa:93:ca:93:c2:
1b:8a:9c:f4:6b:7d:f6:40:04:d4:8a:67:b7:17:3a:
35:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B0:FB:6C:04:27:DC:11:92:6A:01:01:91:96:F8:E7:A5:E3:8D:3F
X509v3 Authority Key Identifier:
keyid:9F:B1:F5:0F:BF:83:94:88:29:2B:96:FD:93:21:6F:20:01:19:75:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7H1D7-DlIgpK5b9kyFvIAEZdUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:10:92:81:65:ab:48:05:f9:a1:2c:6b:40:0b:74:cf:93:0b:
b3:7c:0a:16:f5:fa:04:ac:76:df:2a:21:bf:50:ec:11:e6:81:
cd:7a:2e:9e:2c:b2:5c:65:33:14:7c:d9:a6:99:96:53:81:c0:
d6:df:71:75:e8:88:38:35:24:c1:64:06:b1:d3:41:d1:46:4d:
0a:98:cb:fd:8f:23:59:88:84:b0:bc:53:9a:19:d6:06:ee:8e:
23:e5:97:58:7b:d3:31:9d:6e:f7:6d:fb:ac:ab:4b:14:c3:6f:
db:61:38:b5:00:ab:30:01:37:13:7b:ae:67:57:a1:f9:aa:35:
76:98:db:2c:14:29:f5:dc:c6:30:b6:f6:ad:c2:d8:46:e7:23:
e5:f9:1b:92:08:b3:36:bc:35:bc:c3:e1:fc:6d:05:a1:b2:67:
cc:24:12:e1:6a:4b:5a:15:48:bf:5d:39:e9:47:ab:09:fd:c5:
e9:10:ff:08:f6:33:cf:10:53:a9:a3:63:ab:29:60:0c:50:ca:
52:b6:cf:e6:89:03:52:29:76:97:a8:fa:78:b5:a6:83:51:bf:
26:72:d8:96:3b:b0:ee:47:5f:39:65:93:ad:2f:ff:e2:8c:33:
91:0e:1a:82:4d:39:6f:e4:ac:2b:a4:92:eb:cc:00:ed:2c:72:
c5:4d:80:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:02:20 2026 by rpki-client