Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
File: 7MihqtAgWUOkVyOJu3QzThyihIU.mft (raw, json)
Hash identifier: Sj43L0xU6biai1XpTtnrwms1o6uAZrXi4uVwW5hY3po=
Subject key identifier: 2A:61:0E:22:84:6F:4A:BE:98:A8:09:88:C5:0D:C1:FA:33:4D:29:DD
Authority key identifier: EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
Certificate issuer: /CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Certificate serial: 01A14C8700B7A8BD99C9A2C788FC1FD52D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
Manifest number: 1AAE
Signing time: Sun 18 Oct 2026 01:01:18 +0000
Manifest this update: Sun 18 Oct 2026 01:01:18 +0000
Manifest next update: Mon 19 Oct 2026 01:01:18 +0000
Files and hashes: 1: 7MihqtAgWUOkVyOJu3QzThyihIU.crl (hash: T3bteAmZ6okl6BxtxGLu+owxapPpko0vILRQ/GvD89I=)
2: TPFA9ANmjeizoRraD4Ig8TEK1SU.roa (hash: kT6UPV2xN7mmP7EqC+AR1+y3Fgn76QDWPblq40BQx1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:87:00:b7:a8:bd:99:c9:a2:c7:88:fc:1f:d5:2d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Validity
Not Before: Oct 18 01:01:18 2026 GMT
Not After : Oct 19 01:01:18 2026 GMT
Subject: CN=2a610e22846f4abe98a80988c50dc1fa334d29dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fe:47:5a:d7:d2:4a:c2:06:51:d0:d2:9c:df:
60:06:2d:15:c2:97:79:d7:ce:73:eb:0e:dd:2a:46:
3f:cb:b3:68:17:0d:d7:ac:f5:ec:a7:0b:3f:fe:fd:
d9:5f:54:97:e1:85:43:47:15:c1:f6:44:81:1c:fa:
b6:ad:c0:69:e3:83:23:74:9f:a6:9a:83:78:23:5c:
64:27:d1:a9:68:aa:dd:5a:9f:7d:5c:68:c1:b3:5b:
c5:0c:a5:56:ea:4f:69:ef:4c:7c:e8:f0:38:91:8a:
62:b3:13:29:aa:00:f2:26:f4:5b:52:11:98:59:14:
0c:cd:b5:aa:ed:6f:15:c3:1a:5e:5d:f0:ed:2e:a7:
b5:8d:34:47:13:60:6a:c4:01:e6:7e:8a:4a:4b:40:
46:1b:df:f2:60:1f:e8:3c:fa:94:50:04:be:a3:a0:
2c:37:9a:4a:70:cb:af:12:98:c7:34:2a:88:2e:9f:
a6:6a:fb:65:15:cd:9e:8d:c0:98:46:c9:7f:18:ae:
89:ed:a9:ea:46:cd:6b:8c:de:31:c7:75:fb:84:99:
89:a4:70:10:80:a6:8c:34:07:e0:43:86:79:8d:a7:
a7:4f:6d:f6:c4:90:70:d0:08:70:fd:d4:70:3c:80:
e8:fb:a0:8c:96:ef:01:db:20:a6:77:8e:1f:13:cc:
4a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:61:0E:22:84:6F:4A:BE:98:A8:09:88:C5:0D:C1:FA:33:4D:29:DD
X509v3 Authority Key Identifier:
keyid:EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:37:5f:6b:61:cb:b1:2f:98:bc:2c:82:9e:67:cd:3a:6d:94:
34:ab:68:c7:8f:41:6b:0d:73:e2:3f:15:c7:c7:6f:20:a9:d3:
a7:2a:67:17:76:7d:94:b1:5f:cd:e0:34:b3:50:0f:f7:ea:86:
93:1e:62:a9:bf:54:ae:42:fd:4f:73:01:ca:37:1a:15:c4:ec:
45:a9:93:12:da:f8:42:ac:ea:8c:71:19:19:53:35:60:3a:3f:
2f:4a:62:47:08:9c:4a:f7:4a:b4:3f:67:1e:3d:8c:6c:ac:7c:
59:51:11:9c:31:a7:88:f1:e7:cc:b2:cb:bf:b7:d8:a6:2d:70:
03:87:8d:0d:b0:d5:36:98:5b:c3:4a:8d:b3:c2:5a:fd:2d:2c:
b6:2e:e8:f1:61:b5:80:6c:fc:c5:a9:46:02:ef:08:d2:50:f8:
7c:8e:63:c1:89:23:97:c2:92:3c:12:47:f8:61:a4:d5:d5:11:
71:40:d4:ba:aa:d9:eb:a1:22:b3:b5:59:76:4a:fe:3f:e2:59:
f6:3f:6f:1f:a8:0c:a1:f8:2c:57:0a:91:e1:8c:9e:3d:9d:17:
da:5d:6f:16:78:e4:17:61:2d:c1:85:91:41:ef:14:d6:a9:e2:
96:b8:f0:a6:ee:42:6a:1b:04:ad:b3:19:68:9d:34:8f:27:b5:
e2:7d:73:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:16:27 2026 by rpki-client