
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
File: 7C6CHYjeegETQXBCAjRvfCu5688.mft (raw, json)
Hash identifier: NDZIvAz1btduB27ikAxGKeHq/iDy9i+X1s0eXLpBCjw=
Subject key identifier: 7F:12:A2:4B:76:63:F3:2B:31:81:E5:E7:3B:84:AE:54:67:9E:FF:2F
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Certificate issuer: /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial: 01A17CCF1C56A00755E85D03FA7DF13AA2F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
Manifest number: 188F
Signing time: Tue 27 Oct 2026 10:01:50 +0000
Manifest this update: Tue 27 Oct 2026 10:01:50 +0000
Manifest next update: Wed 28 Oct 2026 10:01:50 +0000
Files and hashes: 1: 7C6CHYjeegETQXBCAjRvfCu5688.crl (hash: gNuQ2aMTXMTDaKbwEVOGm81Wxq+784furqUTtseqgoY=)
2: 85hHBUSy8Y2Mc7vYU29WfYNmQrs.roa (hash: hECfZ/fS6sGLnY/Td9cShCJ8J6B4XtgL9wvigKz0Uo8=)
3: LBH8ztFntHz17Sq_yk4WOvpZIOI.roa (hash: tYe43lNMSz/FpD84gMI0wKiTsaNLmmzOrcD2RhXlgfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:cf:1c:56:a0:07:55:e8:5d:03:fa:7d:f1:3a:a2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Validity
Not Before: Oct 27 10:01:50 2026 GMT
Not After : Oct 28 10:01:50 2026 GMT
Subject: CN=7f12a24b7663f32b3181e5e73b84ae54679eff2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8d:f4:33:1a:bf:38:85:e9:81:e1:a2:18:ff:
c6:d2:cf:f1:44:85:6e:2b:47:76:99:b9:12:9d:cb:
a1:86:da:3d:14:95:c1:11:65:28:e2:f5:d8:0d:1e:
3f:6a:b9:69:7a:66:6a:76:be:46:63:da:f1:a7:a2:
17:c3:25:cf:46:ac:fa:23:05:b8:98:c2:64:b8:f4:
60:6e:51:17:e0:12:97:f4:10:d6:bc:d4:af:13:c6:
4c:a7:29:49:43:06:f7:02:f5:50:7a:ea:00:d4:ca:
7a:a8:ab:01:0d:e2:01:de:b4:c5:e0:b2:a0:90:cf:
fb:33:ed:e6:85:d4:e3:65:9b:81:09:58:e5:ec:f5:
4f:bd:7f:5b:08:b4:f6:94:58:84:2c:cd:f8:ea:06:
99:c5:35:b2:8f:ab:f7:a6:c7:d8:da:5f:39:5a:2e:
1c:0e:54:ff:95:a1:76:95:f0:40:8a:c8:78:b9:16:
2e:dc:de:2d:36:95:93:4a:c2:b0:2d:bf:dd:5b:d8:
e1:ae:7a:a2:a5:e9:0b:83:6b:9a:a8:bc:c0:2f:74:
5f:2f:44:4c:09:ae:4d:50:b5:d8:4e:38:95:00:57:
39:28:ff:9f:aa:61:8b:b3:ab:cb:a2:77:5e:1e:35:
a5:27:5a:3c:cd:52:bd:7d:0f:41:20:03:fb:18:96:
f4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:12:A2:4B:76:63:F3:2B:31:81:E5:E7:3B:84:AE:54:67:9E:FF:2F
X509v3 Authority Key Identifier:
keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f8:5e:7b:5b:8d:8a:41:ce:42:b2:d8:69:56:3e:46:64:ec:
b1:c5:6f:8e:6e:14:f7:5b:0a:84:32:5b:a6:78:f1:60:dc:8c:
e8:3f:6e:e9:dd:35:8d:bf:cf:53:c7:20:23:20:2e:e2:a3:9c:
ef:99:c7:04:b2:47:13:fd:ee:ae:78:97:d4:d9:5d:e5:34:e1:
29:d8:10:89:4f:02:18:7d:b1:1c:18:ac:2d:1f:31:ce:71:76:
3c:f6:03:a6:28:69:fb:34:1a:4c:d3:59:5b:6f:6e:39:03:29:
d1:3a:35:0e:f4:16:aa:67:f0:12:1d:03:2d:72:71:75:68:eb:
2e:02:2f:a1:16:ec:36:da:49:6b:d3:ed:69:e0:76:d0:db:e5:
46:7d:4c:09:d1:00:55:46:2e:2f:27:a0:15:ac:3e:da:4a:67:
23:d8:20:0e:db:57:47:ec:3e:b3:82:30:96:6d:0c:82:a4:00:
af:3d:28:df:20:3b:bd:0b:b2:c3:05:fa:e3:c6:3f:d9:20:ef:
b3:85:79:5e:93:7c:90:37:5b:db:55:40:dd:a0:ad:d5:95:51:
4a:66:a0:2f:b0:93:24:0a:80:88:d5:e8:9d:d9:35:8e:e9:bd:
b9:f7:80:16:f3:12:61:90:c7:8a:7d:47:6c:b1:ac:fa:71:15:
b3:1d:a0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:49:39 2026 by rpki-client