Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/7sBlrFvrrKEGl1MM5JJI1dptoQc.mft
File: 7sBlrFvrrKEGl1MM5JJI1dptoQc.mft (raw, json)
Hash identifier: DbmmbSyWr6WsKkqGb6X4wEQ9U/w39/P7O/HxRTEEl2M=
Subject key identifier: 02:52:1F:65:58:BA:4E:CB:FF:C7:B9:FE:3A:C0:77:FC:33:14:B9:AE
Authority key identifier: EE:C0:65:AC:5B:EB:AC:A1:06:97:53:0C:E4:92:48:D5:DA:6D:A1:07
Certificate issuer: /CN=eec065ac5bebaca10697530ce49248d5da6da107
Certificate serial: 01A08A8CBC5CA226D941CCD2C2DE281E2E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sBlrFvrrKEGl1MM5JJI1dptoQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/7sBlrFvrrKEGl1MM5JJI1dptoQc.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:14 +0000
Manifest this update: Thu 10 Sep 2026 09:01:14 +0000
Manifest next update: Fri 11 Sep 2026 09:01:14 +0000
Files and hashes: 1: 7sBlrFvrrKEGl1MM5JJI1dptoQc.crl (hash: wEgvE2JtHgPK/FTyVfUZeO20qQ0wGuSDoCBzywHfhwY=)
2: EjuWCIO7Su2NnfM_TKSm6cVJS2E.roa (hash: lDPHJWEQfEmp7NBAGbbbMceakMklzS1moiIjqevgRr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/7sBlrFvrrKEGl1MM5JJI1dptoQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/7sBlrFvrrKEGl1MM5JJI1dptoQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7sBlrFvrrKEGl1MM5JJI1dptoQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:bc:5c:a2:26:d9:41:cc:d2:c2:de:28:1e:2e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec065ac5bebaca10697530ce49248d5da6da107
Validity
Not Before: Sep 10 09:01:14 2026 GMT
Not After : Sep 11 09:01:14 2026 GMT
Subject: CN=02521f6558ba4ecbffc7b9fe3ac077fc3314b9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:f6:ec:25:5a:29:3a:9f:ff:e4:4f:f0:e3:
0e:d6:fc:11:14:f5:4a:d3:80:b5:a7:2d:dc:7f:0f:
4e:ae:c1:b3:4f:f5:6d:86:2b:64:62:29:e8:e9:18:
59:5a:6a:b5:dd:1f:19:f2:61:21:46:55:6a:ba:f2:
95:1e:e3:35:a2:3d:35:32:1e:6c:55:bf:9e:d8:68:
7e:6c:5b:2c:67:86:3b:d5:e3:57:36:9b:1f:09:42:
8e:3e:56:2c:de:50:56:bb:b5:19:62:3a:82:be:a1:
65:27:be:40:c8:b6:92:77:14:7a:73:90:a6:e1:43:
6e:7b:38:42:86:48:df:67:18:4d:18:75:e9:26:74:
ef:7a:48:d8:c6:61:2a:9d:86:51:d1:48:59:b1:02:
3a:e2:6e:cb:0a:df:38:42:ba:9d:c0:7d:bf:cd:8e:
1e:ac:71:67:b7:fb:77:a6:e8:cb:a3:94:43:37:d9:
e6:1e:2b:9e:de:6c:7f:4e:6b:12:91:3e:0d:3c:2a:
9e:39:76:5c:77:89:53:4d:aa:3c:14:2b:7d:e6:76:
3e:f9:8c:27:31:b5:29:ed:9b:d2:87:8e:a6:b4:c1:
20:25:b2:7e:f0:87:c2:d3:b9:16:03:b6:8c:6b:08:
59:0f:fe:75:c0:6e:2c:24:9d:e5:6a:80:56:a5:dd:
0a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:52:1F:65:58:BA:4E:CB:FF:C7:B9:FE:3A:C0:77:FC:33:14:B9:AE
X509v3 Authority Key Identifier:
keyid:EE:C0:65:AC:5B:EB:AC:A1:06:97:53:0C:E4:92:48:D5:DA:6D:A1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sBlrFvrrKEGl1MM5JJI1dptoQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/7sBlrFvrrKEGl1MM5JJI1dptoQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/7sBlrFvrrKEGl1MM5JJI1dptoQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:fa:93:de:9f:f2:13:bd:ab:a7:33:b0:5e:b2:5c:22:bc:6c:
c6:e1:ad:c9:81:60:0e:43:15:e0:74:18:60:58:b4:f0:80:1a:
7c:4f:c8:17:62:af:34:ab:f9:89:39:be:bf:3b:3c:0e:46:94:
23:a5:8f:7f:c1:6f:12:10:ce:ad:7a:23:70:c8:5b:c8:45:fd:
62:4b:f7:03:e7:d4:ad:77:96:cf:66:b4:56:09:2e:88:18:7d:
8b:d4:93:0f:34:ae:dc:fd:83:18:1e:ec:83:72:3d:a1:a2:dd:
cb:88:13:01:e7:50:d2:3f:1a:47:3f:69:ea:73:0c:86:14:ca:
ee:83:25:80:1e:90:e9:b6:8a:98:be:f1:04:44:eb:1a:f7:83:
a4:d8:1f:92:3f:98:1a:d9:f6:82:f0:c2:05:07:f6:24:1e:ef:
a9:4c:a5:9b:3d:5b:1b:ea:a8:3e:ac:b7:3d:d6:c6:8b:51:76:
e9:38:bc:13:01:f8:58:ea:19:3c:31:76:9b:84:4c:ab:32:53:
6a:e4:81:a9:33:e8:e8:d1:a8:ad:a6:3d:a8:9d:91:72:44:c3:
de:d3:0a:67:e1:b3:3a:fc:93:84:42:97:cb:dc:30:e1:b9:0e:
ff:b2:84:f0:5a:63:c9:da:9a:ec:b2:27:9f:24:da:54:16:10:
a1:f8:4d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:18:53 2026 by rpki-client