Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
File: 7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft (raw, json)
Hash identifier: XaCn2JmdIC50AuuI6y2opiiJyJTyl914ZGrcRAhvp+8=
Subject key identifier: 41:69:CF:B4:47:41:48:2E:05:DF:A6:D4:3A:6D:7B:21:DE:C9:5F:68
Authority key identifier: EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
Certificate issuer: /CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Certificate serial: 01A029FE158FC51D53CCE28D333DFB6CE7CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
Manifest number: 1A14
Signing time: Sat 22 Aug 2026 15:01:52 +0000
Manifest this update: Sat 22 Aug 2026 15:01:52 +0000
Manifest next update: Sun 23 Aug 2026 15:01:52 +0000
Files and hashes: 1: 7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl (hash: ZBTBny53N+wemPW3FGRUQ703joAM4EY/nejgCjd6p6g=)
2: 7ymJo6ToPK4ZRuDJzRSPCXxaPm4.roa (hash: ytpfJ9vNS5JwRc89yU0uWlEyTvzj77675KecMolldFc=)
3: Es0ua-vxyxjcsLvaoi1mzGRFLDs.roa (hash: f1TQFLKcOmbSU1W2vbI+gyaehRaTN+oWeXN0L2tAh3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:fe:15:8f:c5:1d:53:cc:e2:8d:33:3d:fb:6c:e7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Validity
Not Before: Aug 22 15:01:52 2026 GMT
Not After : Aug 23 15:01:52 2026 GMT
Subject: CN=4169cfb44741482e05dfa6d43a6d7b21dec95f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:e1:c3:5c:10:6b:46:ab:13:db:01:e4:ac:
a4:2b:23:65:93:2c:18:6e:6c:4c:59:44:5b:47:00:
3d:e1:46:47:3d:c6:3a:39:e0:a2:5f:8f:01:02:4a:
51:79:db:a5:64:14:b6:9c:be:92:92:32:e7:22:05:
05:27:d8:86:8b:af:fa:66:8c:41:57:0c:12:f4:f3:
9b:e0:70:5e:93:10:5e:6c:21:07:8c:ef:2b:22:b7:
5f:1a:f1:fa:da:17:0b:54:b5:fe:ca:b8:6c:4c:4c:
93:7f:d6:1f:57:c4:c5:26:3b:4d:ca:94:14:c5:58:
65:ee:de:18:6c:23:5d:37:4b:18:5f:2a:bb:4f:3a:
97:08:94:6f:5c:5e:31:e3:ea:2a:8d:70:2e:c4:91:
32:a1:57:37:44:b7:95:c5:68:f5:c0:11:fb:a2:83:
64:08:ec:52:84:85:49:d4:fc:cd:e1:11:96:4e:20:
63:e0:9b:37:60:7b:50:72:ee:d4:48:12:86:88:59:
c4:05:05:32:f9:43:8f:ff:b9:7b:9c:68:aa:ce:31:
51:6b:3a:a3:1e:00:c4:70:e3:a8:21:fd:22:78:26:
1f:19:6a:de:d2:5b:0c:f8:55:2d:a3:e9:f8:ea:74:
6c:c4:e8:e4:27:9d:4e:05:b8:f9:92:b8:1d:15:9f:
25:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:69:CF:B4:47:41:48:2E:05:DF:A6:D4:3A:6D:7B:21:DE:C9:5F:68
X509v3 Authority Key Identifier:
keyid:EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:30:fb:a4:f4:4a:6c:03:4d:b1:5e:88:27:9b:6b:c5:8f:e1:
91:d1:2b:44:28:21:fb:b7:23:68:69:ed:8c:ac:3b:27:07:7d:
5a:0d:25:4a:69:a3:62:57:e9:36:84:42:5d:ef:96:f1:bc:b0:
d2:d2:79:2d:95:45:74:59:cf:ce:d4:1e:b8:3f:f0:2c:20:24:
f3:c5:7b:b8:7b:fc:90:8d:33:ad:4e:16:13:7e:5c:ca:b6:56:
e6:18:cd:ee:c0:ff:19:c8:77:f4:40:5c:91:38:6c:69:93:43:
df:9c:2e:f3:2c:57:02:7d:a9:d8:43:c3:d2:a0:1a:2b:33:da:
be:98:81:ee:78:9d:73:c4:bc:11:29:b1:d5:78:78:46:14:3f:
1e:ab:f2:92:f8:60:66:ee:a7:d8:25:5f:d0:08:fa:49:03:72:
4d:d3:e6:d9:8c:f1:4c:93:09:28:9a:12:7f:5c:65:15:56:e1:
0a:dc:f0:32:db:49:9e:02:8f:0b:3d:b2:10:f7:d4:61:6c:0b:
0a:47:3a:ed:a6:13:d1:f0:7a:11:40:7c:3b:df:f2:18:5a:7c:
21:eb:d1:f4:d2:e1:05:18:dc:b3:8e:3c:a7:80:bd:f9:1c:be:
82:d9:02:89:87:5f:b6:f2:e8:03:f9:49:3b:a8:2d:94:d6:2b:
a4:56:09:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:36:28 2026 by rpki-client