Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
File: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json)
Hash identifier: nLGTYjxgIeGSqwj4X4vm1MSvv1pNgGYHuWSDj1172DY=
Subject key identifier: ED:5B:F7:0C:CC:2D:23:B7:BC:6B:F1:D3:74:A2:45:43:E8:5D:D6:3A
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Certificate issuer: /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial: 01A13E262CD32FB47224D0701DB6D88DABE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 06:00:51 +0000
Manifest this update: Thu 15 Oct 2026 06:00:51 +0000
Manifest next update: Fri 16 Oct 2026 06:00:51 +0000
Files and hashes: 1: 16IES9haatKMkP-HejVSazJdMkY.roa (hash: mQPtnV+K2FeabOm74g9Ubv3nHZo4wLPT4wK0cMDSkes=)
2: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: rKdwx2TpDKBuQRR395nBzZ64KChk8X+rbC2sLbloelY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:2c:d3:2f:b4:72:24:d0:70:1d:b6:d8:8d:ab:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Validity
Not Before: Oct 15 06:00:51 2026 GMT
Not After : Oct 16 06:00:51 2026 GMT
Subject: CN=ed5bf70ccc2d23b7bc6bf1d374a24543e85dd63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:25:e5:cc:23:81:9b:94:60:30:f1:24:e8:
5c:66:1c:84:e2:a9:05:3d:9d:40:49:92:f4:21:4b:
84:3a:c2:a9:8f:b7:4a:6f:62:97:7b:99:2a:dd:48:
79:d8:62:f6:73:8a:da:a6:50:d4:dd:7e:e6:8b:bc:
d6:ee:ff:16:36:b5:bf:d9:e1:f5:6a:75:bb:52:00:
26:d3:3f:b4:cf:58:aa:13:66:c6:df:31:9c:35:3a:
99:89:92:c5:f4:69:da:d5:f1:0f:c9:e7:90:4c:28:
52:c8:83:5d:bc:67:5e:b3:47:b3:6b:87:27:d1:33:
97:f5:85:e6:48:84:bd:73:45:00:a7:89:db:26:db:
5d:a8:f1:5e:19:22:97:c6:0d:22:42:c2:fd:04:52:
b6:4e:d4:7a:33:c1:bc:ea:47:1e:c6:a7:e6:5e:c3:
ac:b1:d4:fc:56:dc:7d:aa:63:e4:c5:a0:74:e5:c2:
e3:4d:66:52:28:ae:64:30:fe:d9:be:24:95:ca:61:
33:69:ad:03:18:8d:09:74:e1:44:0f:ef:2f:fd:6a:
0f:6f:80:c0:2f:e7:07:60:ea:0d:c3:25:e8:ab:71:
23:20:08:d0:ee:5e:65:ff:63:ab:a6:64:2e:39:e2:
c8:af:73:9a:e3:8b:40:d7:87:ef:35:a2:3a:1f:6d:
63:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5B:F7:0C:CC:2D:23:B7:BC:6B:F1:D3:74:A2:45:43:E8:5D:D6:3A
X509v3 Authority Key Identifier:
keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:56:f3:60:45:23:10:00:29:5c:28:cb:9a:c1:f3:a5:6e:d0:
31:37:3d:e2:ad:ba:09:e5:b5:b1:3c:3c:da:ea:2f:44:93:96:
1f:e5:41:91:6c:ad:9c:93:b7:31:85:c4:b7:1f:3f:27:40:ed:
fd:22:9e:c7:0a:96:2f:db:7b:fa:cf:70:cb:9d:fa:86:33:7f:
58:f2:71:af:1d:cc:c6:a4:35:eb:03:fe:3d:28:b5:cf:d1:45:
c4:07:ab:30:52:81:37:a2:5a:66:6e:53:ad:48:c4:16:f7:ef:
2a:37:53:8e:52:78:56:41:a3:bf:ab:4b:da:ef:8c:d4:61:e7:
7a:bf:99:f8:9f:71:40:ac:14:ee:7f:79:03:f1:7a:5f:0b:dd:
00:7d:78:f6:fb:b8:c8:e2:85:17:fc:6d:13:1a:44:21:40:9c:
de:1e:e0:c4:35:0a:eb:56:23:6b:84:5a:95:18:c0:a3:73:b4:
87:1b:b8:60:66:88:db:dc:1b:7a:04:de:52:ac:ec:ee:78:49:
19:88:e5:0a:d2:eb:77:74:96:06:c8:5c:37:b7:e0:a1:15:c6:
3d:dc:fd:12:8a:ed:45:db:53:4c:5c:0d:34:60:85:88:26:2a:
97:6e:a6:39:72:b9:68:79:fb:b8:54:74:5e:d4:7e:c3:e5:bb:
5a:38:5d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:35:09 2026 by rpki-client