Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
File: 7T_3g2Uw0cR09NCItrNiJPv2mC0.mft (raw, json)
Hash identifier: EKVsbK7jTgRES9kGFl1UN0kyr38lZYuDDlvUo3LncJ8=
Subject key identifier: 84:03:02:61:A9:17:0E:9A:6A:3A:26:2E:6C:4C:E6:4F:F7:60:94:E0
Authority key identifier: ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
Certificate issuer: /CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Certificate serial: 01A154409B63F9AE673C0E6C2E10DE2E74C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
Manifest number: 1AAF
Signing time: Mon 19 Oct 2026 13:01:22 +0000
Manifest this update: Mon 19 Oct 2026 13:01:22 +0000
Manifest next update: Tue 20 Oct 2026 13:01:22 +0000
Files and hashes: 1: 7T_3g2Uw0cR09NCItrNiJPv2mC0.crl (hash: 1HvW5fQ09ZDI7pD5n5rs5oTjXT+I47KAsYrDdsBJo3E=)
2: dDrbN1EnOvhkFc0_xZRFXvcNr40.roa (hash: 4F6zFoAlaZyrQw6r2Sapl4Rve7y38xHZ2sxhWgQcUxI=)
3: vqQIJ63USJ6tNbfIvkmeDNaWV-8.roa (hash: OsN69G3y8PdNZsFJ8bznX8F2lLtEi2mXTwt/+VGM68k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:40:9b:63:f9:ae:67:3c:0e:6c:2e:10:de:2e:74:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Validity
Not Before: Oct 19 13:01:22 2026 GMT
Not After : Oct 20 13:01:22 2026 GMT
Subject: CN=84030261a9170e9a6a3a262e6c4ce64ff76094e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:45:a7:26:9f:33:96:62:25:17:c4:58:b8:0b:
2e:e2:e3:b7:38:96:59:79:41:ed:e6:09:20:79:e3:
51:4d:73:47:d0:cc:23:ba:c9:c2:75:94:a9:be:8e:
a9:d2:88:70:3b:bd:f7:d0:10:a8:b8:76:c7:98:df:
21:21:da:9f:0a:4f:74:77:e2:64:76:72:aa:b5:70:
0b:ba:06:b7:fe:73:f0:24:80:53:3e:70:80:af:29:
02:73:ab:bf:95:00:03:84:cc:84:5b:a9:f4:c4:19:
fb:bc:fe:ef:d8:7d:8b:2d:7b:1d:e5:5c:0d:22:39:
15:06:68:42:cd:cd:d5:4c:22:68:a7:29:86:c5:bc:
1a:65:ce:34:4a:0a:51:f2:ef:07:66:5a:3f:59:99:
41:cd:be:96:88:1d:d5:d6:11:82:d8:74:f7:82:c1:
2c:0b:76:a8:be:dd:8a:a6:10:88:c7:37:3a:d1:a8:
7e:75:f4:66:a3:de:b7:9d:61:f2:90:59:e9:b6:54:
f5:f7:09:27:c1:08:86:4d:9c:13:47:c4:62:44:5d:
f1:bf:cd:9b:57:b5:c4:c2:c1:06:ea:4a:d1:6a:77:
af:6a:bd:10:25:51:2a:a2:76:6e:3b:07:47:eb:fb:
a7:7e:d5:b0:ad:92:7c:d9:9a:3f:c9:6d:56:1a:28:
ab:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:03:02:61:A9:17:0E:9A:6A:3A:26:2E:6C:4C:E6:4F:F7:60:94:E0
X509v3 Authority Key Identifier:
keyid:ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:04:61:ee:0b:76:4c:da:cf:b8:a5:9d:cd:b3:6b:0e:66:1d:
50:c3:47:ea:7c:4e:9a:86:96:45:f8:f7:00:4d:6e:7c:8e:0f:
a1:72:fc:c6:95:77:a3:26:40:25:9a:dd:f7:34:b8:2d:68:85:
88:c1:0b:99:4c:26:05:2d:78:98:35:18:3b:f3:55:89:59:dd:
4f:48:0f:66:ec:c8:5b:d4:86:3b:54:fe:33:07:92:8f:01:e6:
7f:3e:75:c7:fc:ff:fa:46:21:29:5b:b6:e3:5f:68:e5:e1:6a:
e4:71:5d:1f:9c:15:f4:4a:5f:ba:d2:66:00:4a:63:df:bf:fb:
75:12:e3:76:c2:fd:d1:9f:b8:dc:e4:7b:eb:39:fe:58:f3:9c:
16:e4:63:35:16:d1:06:f1:21:09:57:c4:7a:b9:b9:a9:f4:c0:
42:5e:ac:86:1d:19:8b:8b:05:08:25:e6:48:c2:8c:aa:e0:89:
d7:00:d9:d2:c5:e9:80:db:2f:e4:c0:57:33:d8:13:8c:db:77:
30:26:a9:4c:02:a0:70:ab:fa:5b:a9:be:20:1d:0d:c0:9e:54:
fe:22:ca:bf:91:bf:be:c9:63:85:14:a9:71:69:6b:60:97:22:
13:bf:f1:bb:68:d8:e7:dd:37:a9:e4:99:ca:11:61:c0:0e:30:
a1:b3:e4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:09:36 2026 by rpki-client