Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
File: 7pzNOKXWSWiAvAlHBuaPoE-izZY.mft (raw, json)
Hash identifier: 51x57iPSj3IJDnt5WL47UOzKytn1KGEeXyIncKGsQ3U=
Subject key identifier: 41:AF:DC:45:6C:DE:8F:DD:10:F6:7E:80:94:CC:6B:A1:05:B7:44:E7
Authority key identifier: EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96
Certificate issuer: /CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96
Certificate serial: 01A03FA9B3C386A371E52D3F0919BEEA4806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
Manifest number: 05DD
Signing time: Wed 26 Aug 2026 20:01:21 +0000
Manifest this update: Wed 26 Aug 2026 20:01:21 +0000
Manifest next update: Thu 27 Aug 2026 20:01:21 +0000
Files and hashes: 1: 7pzNOKXWSWiAvAlHBuaPoE-izZY.crl (hash: 68LvDt2+0eGimSBiIdKVO600DKJtKCYg4EP0crv4BzI=)
2: ocY70Yt7qprLim2mTu297m9-o2U.roa (hash: 6sPyz7kDxqJwF7yTxqQ7gDV39uN8BMfMMUG8+PSgNKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:b3:c3:86:a3:71:e5:2d:3f:09:19:be:ea:48:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96
Validity
Not Before: Aug 26 20:01:21 2026 GMT
Not After : Aug 27 20:01:21 2026 GMT
Subject: CN=41afdc456cde8fdd10f67e8094cc6ba105b744e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:d7:b8:36:0c:25:28:26:73:4d:61:a8:e0:
bb:75:65:ed:08:b8:b0:bc:53:db:2f:0c:d8:ff:2e:
65:dc:60:9c:a1:a1:28:a3:e5:51:9b:6a:43:89:2d:
7a:f7:48:fe:87:24:e3:fe:63:58:e4:5f:9a:b5:d6:
c3:b1:d6:b9:38:ba:b9:6a:c3:f6:12:24:4e:da:3b:
95:cb:68:64:86:c7:41:0e:94:8c:27:3e:3e:c7:fb:
f8:fd:55:67:73:46:02:b7:80:03:95:9b:d3:39:5d:
81:c0:20:a8:d9:94:65:2a:fd:9a:07:ec:52:a2:e0:
a5:5f:ca:3c:69:1f:a3:6e:6c:bb:73:a9:b9:83:0d:
52:f2:c7:78:20:19:17:b5:e0:75:82:da:4d:48:a0:
38:a6:d9:df:f9:d1:f9:c0:67:05:77:e8:b5:e0:9e:
92:18:19:6d:7d:b3:fa:1f:5f:dd:4b:c2:37:8c:4f:
10:7f:a5:7e:ed:bd:ed:d2:d1:e6:81:6b:d2:13:af:
37:fe:09:87:ee:b8:cc:7e:f6:f0:25:c9:f0:63:54:
22:a3:ea:e9:b4:be:e8:c2:91:03:54:3e:d9:b2:bb:
ac:81:94:7a:d2:7e:40:06:28:c5:54:6e:31:64:db:
8c:6b:e0:3a:02:17:2a:17:5c:68:61:3e:68:66:95:
5e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AF:DC:45:6C:DE:8F:DD:10:F6:7E:80:94:CC:6B:A1:05:B7:44:E7
X509v3 Authority Key Identifier:
keyid:EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c6:ae:b6:18:2c:7c:eb:66:7b:2d:82:be:52:8d:4c:61:0f:
84:10:2e:bf:a9:9e:43:9d:0d:35:55:ce:16:a2:15:c8:e4:b0:
36:72:b3:60:9e:df:71:d1:36:dd:b0:ec:31:9c:f7:c5:19:69:
cb:dd:2c:34:ae:bf:5c:69:1f:48:87:66:50:a9:f1:22:5f:db:
f1:c0:f0:1c:e9:af:1a:be:76:0e:90:38:61:b5:f2:99:e1:42:
a8:4e:f1:d8:3e:8c:26:a4:7c:ac:05:fb:64:1e:37:16:ea:31:
d9:24:f4:00:12:2a:99:04:e5:2f:f8:57:1f:bf:06:0e:cd:77:
85:ab:8d:a2:b3:79:cf:96:1d:ae:fb:c4:22:0c:a3:2e:33:e9:
c5:20:09:39:8c:f1:17:ed:d8:c6:be:54:0e:4f:5d:a9:7c:cb:
51:44:a1:d2:0b:74:29:f5:69:76:78:e1:8b:b9:77:06:58:6b:
a9:f0:22:4b:14:eb:06:8a:ce:e6:2a:39:bf:68:0c:bd:4f:ec:
5e:65:a3:00:ef:62:d2:c4:2b:98:95:b8:d2:49:11:87:15:15:
27:ad:2f:31:7f:52:14:96:57:82:a8:3d:e1:93:ae:dc:bd:c1:
cd:9f:0f:40:3d:41:b1:f2:c3:30:e2:12:45:64:58:25:53:9d:
a4:94:e1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:20:29 2026 by rpki-client