Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
File: 7WoxJ-11rNJGANs1qPIw4vMkug4.mft (raw, json)
Hash identifier: gm/RnyMzhx0vxbF3BOmv0stSb9QtOYaho2vy4ilo2oQ=
Subject key identifier: 8C:AE:57:A2:36:89:22:95:AB:7F:89:53:04:19:FF:89:0C:3F:BF:BF
Authority key identifier: ED:6A:31:27:ED:75:AC:D2:46:00:DB:35:A8:F2:30:E2:F3:24:BA:0E
Certificate issuer: /CN=ed6a3127ed75acd24600db35a8f230e2f324ba0e
Certificate serial: 01A03C3A0E6CF9C810274179D261B6C1BBCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WoxJ-11rNJGANs1qPIw4vMkug4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
Manifest number: 0227
Signing time: Wed 26 Aug 2026 04:00:32 +0000
Manifest this update: Wed 26 Aug 2026 04:00:32 +0000
Manifest next update: Thu 27 Aug 2026 04:00:32 +0000
Files and hashes: 1: 7WoxJ-11rNJGANs1qPIw4vMkug4.crl (hash: 7TKiZqdKwi9+CS9Z9lcQGjPs9SSImGVeU4EEIYpOp+s=)
2: RQqhLPcGGSGX-Yx2wib2KDftxXQ.asa (hash: aHQ4ca8e5T8BDTfMZOey9jkGfKWYE/aGZxfTiuf/1Ro=)
3: pCAXnejbOOJp7m5yFPm8VPwf0Uw.roa (hash: N796Zom1skp7/3+RCtSYa/r7JVVy/XIYs8YxWI+wUD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7WoxJ-11rNJGANs1qPIw4vMkug4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:3a:0e:6c:f9:c8:10:27:41:79:d2:61:b6:c1:bb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6a3127ed75acd24600db35a8f230e2f324ba0e
Validity
Not Before: Aug 26 04:00:32 2026 GMT
Not After : Aug 27 04:00:32 2026 GMT
Subject: CN=8cae57a236892295ab7f89530419ff890c3fbfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:45:10:9e:47:91:24:85:59:86:88:54:1b:f7:
e4:d5:01:15:d1:a0:74:2c:ed:09:76:20:85:14:a5:
0c:58:23:c7:ec:cd:32:b1:7f:6d:78:f4:8c:01:ff:
a3:44:c0:f6:f4:de:21:8a:f1:2d:ea:f8:99:5f:2a:
ca:73:c4:1e:30:0b:3b:0a:74:b0:c4:e1:5a:0b:92:
18:7b:34:13:e4:38:26:4d:8c:c4:e8:5c:9b:8c:18:
a3:2e:6e:63:70:96:06:cd:9b:df:5b:93:01:08:5d:
1e:14:98:77:a8:d0:f0:7d:9b:a3:e9:4c:35:46:92:
4f:93:85:58:77:f7:9a:fd:42:21:26:fa:94:f3:a5:
03:08:d9:5f:82:0e:dd:12:82:a7:45:d4:77:84:81:
72:33:b3:0d:ed:3d:c1:59:9b:2d:c4:4a:3b:ea:99:
8a:98:0a:36:e4:af:65:91:74:0b:07:72:87:b3:5e:
41:af:9c:0a:6c:db:5b:ff:3c:08:6a:9b:96:ce:ec:
43:f5:08:89:93:96:3d:20:d1:84:60:ff:69:df:09:
3d:d6:ed:4b:72:a3:29:9f:a1:3e:4f:aa:4a:1c:1b:
fc:90:08:2b:fa:22:43:39:b3:27:c8:8c:b1:6a:ee:
e4:4f:53:8e:c0:e5:bc:b1:53:7e:8f:ca:b0:91:8c:
15:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AE:57:A2:36:89:22:95:AB:7F:89:53:04:19:FF:89:0C:3F:BF:BF
X509v3 Authority Key Identifier:
keyid:ED:6A:31:27:ED:75:AC:D2:46:00:DB:35:A8:F2:30:E2:F3:24:BA:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WoxJ-11rNJGANs1qPIw4vMkug4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:48:08:ba:24:65:09:10:0a:e1:60:f5:be:c9:86:4e:1d:b2:
69:3e:ca:cf:7d:57:1f:44:51:a0:69:42:38:29:31:14:1f:8d:
bd:25:8b:be:e1:16:03:c5:f6:6c:8c:61:f4:41:9c:64:2c:7a:
0d:db:0e:94:19:a6:39:7e:83:f0:34:5b:24:a9:b5:63:d9:93:
b4:e3:1c:27:38:5b:6d:ea:fa:a7:ef:b1:6d:d8:97:43:de:29:
7a:6a:8d:10:d1:1a:68:9e:ea:35:be:8d:e7:e9:0f:7a:f1:f6:
28:0c:47:97:2d:51:48:8f:1c:af:eb:5d:28:fc:f1:f5:06:70:
46:93:b3:b2:43:7b:89:f3:62:29:0f:14:52:35:27:47:95:1f:
25:ad:ed:d4:ce:84:1d:01:5a:94:c5:cf:9c:91:37:f7:d3:90:
53:29:6a:c1:7a:c6:d7:a6:8a:93:4e:ae:29:b2:9c:a9:68:d2:
a3:49:39:9c:9b:d5:2f:11:39:0f:b4:3d:c5:42:77:c3:df:ee:
b3:36:93:6d:2d:8f:a5:d8:ec:8b:0f:1f:1a:8c:32:75:d9:6f:
2b:d7:70:7e:70:a2:c7:6c:e0:cf:5e:b4:71:90:25:ff:2e:91:
7f:50:c7:a9:8a:80:9d:b1:42:53:4e:ec:1b:f6:5c:48:22:7f:
f9:f3:0b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:37:55 2026 by rpki-client