Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
File: 7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json)
Hash identifier: SZFoh1fOSdqkd/iT1m8igCbI6eWLusNIX9+7L4k9SRk=
Subject key identifier: 51:E0:06:DA:60:32:51:FF:1F:07:BD:65:9A:8D:4E:7E:41:03:ED:D1
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial: 01A13E95365501F259BA41951BF226E946E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 08:02:08 +0000
Manifest this update: Thu 15 Oct 2026 08:02:08 +0000
Manifest next update: Fri 16 Oct 2026 08:02:08 +0000
Files and hashes: 1: 0HZFumgyvQaDDTRTrqWFDMHfuo8.roa (hash: 99s+y069IP+8cLI0Fct7Tuh7Nr9yOVSbyI/w/nS1ohM=)
2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: Rp5ox06kjpukJt/k5DwnapRi5U0AAFoaoYjAXmC34D8=)
3: JfyoN48fk_c9ic3qKJlpVrYlm4U.roa (hash: YO7Xai4MFWdK4ki2bUDwA4JpC3JpucBc+HE0rjiH0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:95:36:55:01:f2:59:ba:41:95:1b:f2:26:e9:46:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Validity
Not Before: Oct 15 08:02:08 2026 GMT
Not After : Oct 16 08:02:08 2026 GMT
Subject: CN=51e006da603251ff1f07bd659a8d4e7e4103edd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:81:29:a8:dc:df:af:82:3a:a3:2c:13:94:d1:
0e:8a:9c:6b:cc:cb:1c:bb:57:44:75:a3:3c:92:ee:
4e:89:14:03:f8:f8:8e:98:b0:eb:62:be:5e:d0:93:
2e:cd:3e:b2:c4:b7:02:a6:e5:e6:51:77:5a:2c:f1:
70:1c:c7:97:49:cc:f9:f9:37:9a:e5:de:6e:71:d3:
e0:36:43:30:d3:e2:cd:8c:b4:28:ea:5b:4f:82:ee:
c7:4f:79:72:9e:27:7e:dc:82:95:d1:21:71:bb:b3:
8d:9a:63:9f:3c:ce:dd:35:da:b2:82:42:1a:26:87:
3c:a5:6c:7d:36:95:71:6d:a4:c0:5d:c2:21:e2:2a:
ce:5c:5f:02:48:51:c4:3d:50:4b:17:60:05:23:0a:
24:71:28:ec:fc:7c:c2:9e:05:55:86:94:d1:c8:3c:
b4:98:91:a6:e1:63:39:4b:4a:42:cb:82:46:3a:88:
45:bd:7d:cd:6f:29:80:7f:12:12:7b:d1:28:1d:85:
6f:f7:7d:67:12:e5:2f:b9:30:19:5f:1f:7a:68:fe:
a5:3c:59:87:88:19:4c:21:f8:f1:37:79:fd:5e:f3:
23:85:16:1b:fa:10:27:00:d2:d9:68:1e:48:ed:10:
6e:90:7a:01:eb:a1:53:9e:4f:ff:d0:99:e6:48:6e:
13:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E0:06:DA:60:32:51:FF:1F:07:BD:65:9A:8D:4E:7E:41:03:ED:D1
X509v3 Authority Key Identifier:
keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:31:c9:7b:e3:12:c0:62:66:45:70:dd:29:44:bc:65:df:6b:
e9:7a:28:04:be:4f:03:18:34:2c:7c:a0:d0:57:24:45:17:3a:
13:c3:d3:d1:6a:71:d8:c3:33:77:e6:a8:81:7c:eb:67:f4:75:
86:2e:d2:85:91:44:80:7b:68:1b:d9:7f:75:e6:95:ca:49:b1:
81:3b:9e:5e:ad:df:d2:74:76:d0:da:04:b2:b5:d1:76:f0:cf:
c7:7e:12:94:93:92:d0:b4:61:ad:56:99:09:27:81:56:93:13:
72:e3:5c:19:1b:4b:72:62:96:5a:2d:44:8f:0f:14:0f:51:5e:
82:24:fb:a2:cf:55:d0:0e:bb:37:f8:8d:4e:bc:5f:b5:0e:c5:
ec:6c:ff:69:b1:b8:77:0f:50:d1:bb:41:ef:d1:c7:97:9a:c2:
a8:e7:7b:8d:1a:3b:ce:2a:42:53:32:ac:ca:0f:bb:45:b1:3a:
59:e7:2c:88:fe:df:e4:80:89:34:66:c9:61:62:1e:e2:74:d7:
43:9e:15:e5:5a:84:13:2a:5a:f4:19:a6:65:2b:03:6c:52:41:
86:a2:ed:00:5a:ea:67:67:89:f1:65:65:b1:b9:00:21:5c:61:
8e:66:d7:87:54:42:95:70:fb:c3:a2:c8:c1:79:51:1b:43:84:
de:be:27:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:19:10 2026 by rpki-client