
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
File: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft (raw, json)
Hash identifier: ie1yQ2/XtfNh8XuiySsM9t4PMFHSskzRchuFVm8pXNk=
Subject key identifier: ED:B2:E7:BE:03:E9:15:AE:63:1B:D8:9B:C7:97:46:B9:F4:60:7B:98
Authority key identifier: ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA
Certificate issuer: /CN=ed32ef0caf0a057529fb928f76962a7425390dba
Certificate serial: 01A08AFB0FFEDD8BCC254E57D6BA80D3B025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
Manifest number: 04FD
Signing time: Thu 10 Sep 2026 11:01:44 +0000
Manifest this update: Thu 10 Sep 2026 11:01:44 +0000
Manifest next update: Fri 11 Sep 2026 11:01:44 +0000
Files and hashes: 1: 4ck5stj-Nruh5mOMgR2qNBplGK4.roa (hash: pnWvPZcJH3rubSBQDARfPzyblV+Aac+zG4Cuud9DAE8=)
2: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl (hash: r7kbITvLg0GSSJt4ImhOn49t4bCiDLMIeo7kPsmLeL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fb:0f:fe:dd:8b:cc:25:4e:57:d6:ba:80:d3:b0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed32ef0caf0a057529fb928f76962a7425390dba
Validity
Not Before: Sep 10 11:01:44 2026 GMT
Not After : Sep 11 11:01:44 2026 GMT
Subject: CN=edb2e7be03e915ae631bd89bc79746b9f4607b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:d2:9b:33:36:45:21:23:a8:a3:88:69:05:
11:37:eb:f2:75:57:9c:c5:12:b9:b4:16:49:65:49:
db:ac:d0:2a:4e:bd:0a:a0:ab:8f:de:84:a9:1f:41:
81:85:2e:b5:b2:3e:4c:76:78:7a:62:25:ab:9a:05:
ba:60:8a:dd:1a:57:cb:c4:4f:b7:df:88:92:5c:f5:
14:ef:e0:94:b8:bb:1c:89:02:a5:85:7c:6b:db:73:
cf:6d:78:b5:d9:35:9e:cf:49:de:21:c8:ac:51:f6:
19:61:e1:b0:06:e6:50:69:a7:68:6f:05:04:39:e2:
de:0d:c7:82:36:4f:51:b7:62:ab:ac:e7:2b:96:29:
05:08:09:80:ef:db:af:99:14:12:22:02:ea:9d:ba:
ab:ab:c1:4f:a0:71:01:57:f5:79:9d:d7:94:c4:a3:
76:61:91:55:c1:c8:f5:07:0f:69:ab:a0:f5:0d:8b:
b1:8a:a8:2e:68:f6:9c:01:ab:34:a4:0a:26:18:fd:
cf:d7:73:c9:c2:c5:29:43:88:0d:c5:55:45:8d:7d:
57:aa:87:f8:5a:e9:fc:ef:bc:89:bf:39:b0:4d:a3:
d1:d7:69:f3:68:cd:02:54:05:08:13:07:30:85:8e:
40:65:9e:84:d3:55:e9:f8:ce:3b:b5:53:de:b0:02:
b6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B2:E7:BE:03:E9:15:AE:63:1B:D8:9B:C7:97:46:B9:F4:60:7B:98
X509v3 Authority Key Identifier:
keyid:ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:46:78:d7:2f:47:31:39:ac:89:63:e2:dd:6d:2f:0c:1e:0d:
39:b2:5f:1a:bd:cf:23:2a:24:d8:2b:65:70:02:e8:27:fb:bc:
c1:cf:9f:a0:a8:05:05:23:69:a6:ac:81:a6:84:1c:6d:27:b8:
98:d7:b1:42:2a:48:15:46:5b:33:6f:a2:37:51:00:05:9f:3f:
d8:80:5f:71:e9:4a:70:05:8c:90:01:ba:f3:ea:cf:aa:47:e2:
ce:6a:a5:da:3e:16:11:52:1d:0c:e3:10:5b:32:a1:c9:82:8a:
71:4d:c0:2e:a7:66:72:0e:ed:c6:ed:58:a8:31:bf:a3:04:b0:
30:9a:33:02:3e:1b:59:88:44:d7:7a:4b:11:a8:e0:fe:ef:8a:
0e:75:29:12:44:e0:e2:4e:e0:49:48:10:57:27:3c:3a:fe:c3:
5f:2c:db:1d:53:9f:83:05:26:a9:c3:bd:c1:a8:11:06:0f:2e:
53:0e:18:b6:95:84:ab:20:5f:ad:18:b6:26:d2:a0:ce:10:78:
c1:97:86:55:34:f0:6b:8d:b2:a7:6c:aa:95:f3:d5:2a:23:54:
9d:2a:b9:e3:8f:69:78:5d:5c:d7:af:d6:e8:8e:c2:2e:42:64:
26:fa:13:88:06:15:b4:72:37:29:ce:d2:8c:97:23:ad:0b:90:
31:59:72:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:04:27 2026 by rpki-client