Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
File: 7iNCg3Pc6KX5f0XvxsKLn7581U0.mft (raw, json)
Hash identifier: JPoJHY2u5nUj30Kr9j6vExAUh4y8jkHi/zd0Zg2Gi0c=
Subject key identifier: 8A:92:3C:84:B1:B0:68:91:F9:A3:C9:DC:96:39:94:43:7F:6D:AE:A5
Authority key identifier: EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D
Certificate issuer: /CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d
Certificate serial: 01A0B6F7635AA839B5F4B2DFAFAD2A55EF54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
Manifest number: 03C6
Signing time: Sat 19 Sep 2026 00:01:01 +0000
Manifest this update: Sat 19 Sep 2026 00:01:01 +0000
Manifest next update: Sun 20 Sep 2026 00:01:01 +0000
Files and hashes: 1: 7iNCg3Pc6KX5f0XvxsKLn7581U0.crl (hash: qG3hHD4fyxPjTyg7+HsESGNEhUc3DK8YJF9sPIWOpn8=)
2: qwQxCub0ZLxdSIPTyyt0hid0rjE.roa (hash: 45em9x7vt23Yzt9V9VCNiHhaJfkIP4nZW7OBnn0WqDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:f7:63:5a:a8:39:b5:f4:b2:df:af:ad:2a:55:ef:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d
Validity
Not Before: Sep 19 00:01:01 2026 GMT
Not After : Sep 20 00:01:01 2026 GMT
Subject: CN=8a923c84b1b06891f9a3c9dc963994437f6daea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:33:62:9b:2d:de:db:16:b7:fe:a9:4d:4a:66:
f6:6b:99:27:88:e7:ec:45:4b:0d:7d:97:65:24:bd:
c5:51:30:6a:3f:e0:41:1f:f1:6c:fb:a2:5d:c6:73:
10:52:c8:f1:53:bf:19:71:4a:ec:d6:3a:d2:d8:8a:
bf:e9:04:59:b1:0e:82:59:a8:6a:6f:c4:fb:68:ad:
21:8a:71:8a:28:36:a4:2f:37:2e:1b:8d:2b:5a:d5:
d0:43:1e:80:69:47:d2:81:2c:3b:a6:42:10:30:a1:
b4:81:86:66:64:f8:94:f0:2b:23:1d:23:58:9d:b8:
c4:d7:8a:42:b7:e8:50:f8:bc:31:5d:15:8b:e8:9b:
ad:36:03:75:78:c1:6c:07:6b:94:9d:87:c8:e4:2b:
13:4a:f3:72:23:50:7c:be:f5:55:92:e3:a8:49:00:
b6:cc:38:8f:dc:e8:62:f5:f7:bc:36:18:28:70:90:
90:11:c9:6c:3b:cf:a0:4f:0f:0a:28:78:5a:02:1b:
1e:0a:55:fb:41:d6:c0:11:86:47:5b:40:e7:8f:ec:
9b:56:18:15:2a:b3:23:bc:cf:fc:8a:70:bd:57:53:
67:fc:6b:5f:43:ff:2e:8c:3e:88:5e:2b:39:4e:39:
a7:f6:f1:fd:45:17:0c:65:2c:dd:0e:28:d4:f7:95:
b1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:92:3C:84:B1:B0:68:91:F9:A3:C9:DC:96:39:94:43:7F:6D:AE:A5
X509v3 Authority Key Identifier:
keyid:EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6a:c8:fb:f4:f1:f6:45:e2:85:fb:02:a9:83:02:45:f0:c8:
bf:18:1c:d6:a9:b0:32:50:8f:b5:b6:3e:2c:3b:b0:f8:f1:58:
0a:49:ae:67:b9:7c:6c:99:9a:4d:42:f1:f1:c4:58:25:12:6e:
e3:45:84:b1:4d:cd:b3:91:8c:76:7a:30:8c:84:35:79:9d:25:
ef:90:e6:61:e5:8f:84:14:5b:e8:7b:75:0b:65:72:3a:93:64:
26:0c:72:2e:38:43:32:7d:3b:43:8e:5a:f5:1e:ae:06:af:b8:
f6:00:c2:ee:df:d5:fb:22:35:d7:25:87:51:cf:a6:b4:4b:6e:
3a:60:69:92:ff:b4:a5:4c:b5:7f:f6:64:01:6e:50:01:3b:c5:
93:28:be:d7:96:18:06:f0:7c:7c:86:a2:86:65:d0:e8:82:f8:
36:e0:d8:26:ef:be:1f:01:7b:8d:e8:d2:7c:5d:f6:98:91:9e:
53:f1:b0:d5:39:44:02:09:54:1f:fe:9f:eb:30:2a:f7:0d:1a:
1e:86:dc:b7:75:a6:b8:86:ab:3d:33:09:03:35:59:75:db:dd:
e5:da:e7:5d:e5:a7:ae:10:71:7c:ee:25:98:38:15:a6:81:de:
89:dd:7d:6c:ca:0c:b8:a1:e7:4d:bc:17:b8:f2:80:da:7d:33:
83:2d:7c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:35:31 2026 by rpki-client