Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
File: 7MihqtAgWUOkVyOJu3QzThyihIU.mft (raw, json)
Hash identifier: rdbB4yi49wPkl8am/ei3S0MRhkHUPDpCwRO8JUBMiqc=
Subject key identifier: 2A:BF:23:CE:7A:07:F7:8B:D8:A1:6A:AB:C2:91:18:6B:BA:B5:D9:35
Authority key identifier: EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
Certificate issuer: /CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Certificate serial: 01A0005D332FDEF1A72E35162442A9524FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 13:01:42 +0000
Manifest this update: Fri 14 Aug 2026 13:01:42 +0000
Manifest next update: Sat 15 Aug 2026 13:01:42 +0000
Files and hashes: 1: 7MihqtAgWUOkVyOJu3QzThyihIU.crl (hash: syAjujxjjjuQHE0/125rAqyVv6zCKCInds5FSDoqQjk=)
2: TPFA9ANmjeizoRraD4Ig8TEK1SU.roa (hash: kT6UPV2xN7mmP7EqC+AR1+y3Fgn76QDWPblq40BQx1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5d:33:2f:de:f1:a7:2e:35:16:24:42:a9:52:4f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Validity
Not Before: Aug 14 13:01:42 2026 GMT
Not After : Aug 15 13:01:42 2026 GMT
Subject: CN=2abf23ce7a07f78bd8a16aabc291186bbab5d935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1a:34:fe:a1:c5:95:0b:98:59:cf:a4:7f:12:
27:e0:d8:1e:bd:62:43:37:77:1a:b6:6a:fd:31:57:
e9:9b:c1:9e:35:f9:89:21:80:1e:0f:2a:4d:20:b9:
85:6e:61:72:fd:b4:32:20:72:96:06:c2:e0:c3:67:
ac:dd:b7:a9:bb:3a:67:7c:51:45:00:ef:9c:37:2e:
bd:ee:3c:b0:81:7f:52:61:55:68:fa:ee:00:ec:f2:
49:b8:d6:ee:5b:a7:88:55:30:f1:5b:2c:c3:2e:01:
fc:a8:c7:d8:ad:e0:62:e2:06:a1:9d:5a:cf:9f:1f:
58:f3:e0:8c:3d:be:42:f4:f6:8d:e3:4a:b7:5a:f6:
5d:6c:44:a0:59:0c:1d:07:1a:00:2a:c0:4b:eb:7e:
9d:5d:fd:19:a2:fb:29:ec:e3:97:64:87:c9:3f:89:
64:66:7e:f1:bb:4a:cf:a9:e2:7c:43:77:4b:38:87:
0c:79:09:fd:db:6c:c1:af:ba:a5:1f:03:14:19:6a:
09:68:c7:59:a4:1f:6d:5e:75:59:c4:6f:d9:69:06:
6f:25:4b:85:07:25:04:18:8c:16:08:1d:f0:49:ca:
37:12:66:54:b9:9a:18:30:18:7f:cf:d5:13:cc:b6:
c1:84:c2:07:fb:d8:a1:91:d3:6f:30:11:2e:41:08:
b9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BF:23:CE:7A:07:F7:8B:D8:A1:6A:AB:C2:91:18:6B:BA:B5:D9:35
X509v3 Authority Key Identifier:
keyid:EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ed:a9:6b:87:23:46:c5:f3:16:e6:b7:67:ff:8b:90:66:e5:
51:fb:90:04:1f:8f:22:92:4f:cf:ae:a7:3a:ef:c9:3b:ae:d2:
d7:a4:62:c9:32:26:85:ff:fc:e6:f2:2d:1b:d4:e6:42:85:47:
76:35:41:90:50:e0:27:54:00:96:94:ce:a0:42:f0:f4:43:75:
c4:59:38:5a:73:04:3a:07:9e:b0:d0:e9:7f:34:38:51:59:87:
0e:09:42:35:2f:9e:2b:56:63:40:16:03:a5:a6:71:cc:d3:73:
3b:ee:7b:2f:bb:2c:44:81:d3:38:4d:07:7a:84:20:aa:80:06:
a4:ef:43:a1:25:e5:e5:2f:3d:31:09:bb:74:11:b0:97:25:4f:
54:19:45:3e:9d:cc:c5:30:3b:b5:e5:a5:99:1a:81:8a:7d:d8:
b7:cb:6e:6f:ff:56:f0:d9:0b:d7:5a:eb:b7:ad:17:8d:47:ed:
58:ba:34:62:8b:e8:7f:02:a1:44:03:0e:58:34:cd:5b:03:73:
67:18:7a:2d:e8:7f:32:7e:12:8d:e1:a6:43:34:d2:9f:55:80:
7f:b9:7c:2a:4d:28:08:36:a8:71:22:2e:e6:68:03:aa:99:c8:
2c:e9:1a:82:f6:91:18:4c:50:b5:9d:71:00:85:a2:e7:b4:6f:
af:67:60:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:04 2026 by rpki-client