Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
File: 7iUCbllV3N0RFHb5toSdcoGFRps.mft (raw, json)
Hash identifier: 3nrlNj4DSpazWBrQr4gMJ1d7cRWy56Y9PNebHDAiP1s=
Subject key identifier: 3B:3A:F1:C9:82:9F:22:77:88:86:8C:1E:82:DA:C6:1E:AD:14:DC:4A
Authority key identifier: EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
Certificate issuer: /CN=ee25026e5955dcdd111476f9b6849d728185469b
Certificate serial: 01A00101A222C4738EFB8A7247DB6D010196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
Manifest number: 086E
Signing time: Fri 14 Aug 2026 16:01:19 +0000
Manifest this update: Fri 14 Aug 2026 16:01:19 +0000
Manifest next update: Sat 15 Aug 2026 16:01:19 +0000
Files and hashes: 1: 7iUCbllV3N0RFHb5toSdcoGFRps.crl (hash: S9EMJYrSUxkxwcv83c3XT6A35sNPgX7oRjePyWevXKk=)
2: JU735praQ5D7ZouW4n12dU9bM-4.roa (hash: dXXp6fBpmMfrGgRgIwTGPcESSVbHsTgXLylCNhPpDJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:a2:22:c4:73:8e:fb:8a:72:47:db:6d:01:01:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee25026e5955dcdd111476f9b6849d728185469b
Validity
Not Before: Aug 14 16:01:19 2026 GMT
Not After : Aug 15 16:01:19 2026 GMT
Subject: CN=3b3af1c9829f227788868c1e82dac61ead14dc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:88:4a:1d:45:05:dc:0f:19:22:18:eb:cc:ae:
03:76:a9:ee:26:72:5f:a8:51:09:a4:cd:b2:44:1d:
30:ad:f1:92:db:36:90:31:ef:b5:d0:09:58:c0:48:
a9:80:be:ec:2c:11:7d:24:e1:56:3d:c1:80:1b:e3:
62:1e:39:0a:f2:cc:22:a8:7a:81:fe:19:f4:19:6b:
46:97:a8:f7:c7:a3:a0:a6:9c:59:0f:98:24:f0:cb:
99:e7:88:29:cd:34:52:1f:86:6c:0f:9c:42:fa:10:
75:a3:ae:a4:8c:40:b2:de:c0:5c:48:08:51:54:8c:
06:f6:cd:61:2f:82:80:9e:9b:88:c2:59:d6:c7:2f:
c6:1f:9d:4d:9e:5b:c5:7d:bd:dd:91:9a:97:0a:d4:
b3:b8:57:26:64:16:ce:b9:0d:48:cc:54:a8:34:5c:
d7:30:ed:0b:19:21:f2:90:73:11:65:eb:94:e6:2a:
36:ca:1a:b6:f9:71:94:08:12:e7:dc:64:37:88:f3:
6a:4f:6b:2c:47:74:c2:b5:22:25:4f:96:a5:2e:5b:
41:86:a5:2e:52:a0:ff:d8:f6:59:5e:f5:33:a6:9c:
3b:20:f0:a4:e3:2b:32:98:ce:d7:d4:41:c0:5c:5a:
8a:86:a8:24:89:cd:71:ec:7a:96:e5:0b:9e:7e:28:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3A:F1:C9:82:9F:22:77:88:86:8C:1E:82:DA:C6:1E:AD:14:DC:4A
X509v3 Authority Key Identifier:
keyid:EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7f:b9:1c:51:74:56:b2:72:57:74:6d:fa:da:f3:2d:39:ab:
a9:41:57:af:33:dd:fe:2c:26:6b:2b:53:42:7c:46:59:6a:6f:
f5:2f:49:a1:45:72:26:48:28:96:ac:12:18:db:3b:cc:c4:6a:
d2:c0:e7:06:f4:e5:50:c0:09:85:f8:57:9b:76:cb:0f:03:ff:
05:2a:d6:d2:9c:d8:8c:92:ca:cd:a3:62:46:2f:80:86:a4:77:
93:34:58:a6:db:1e:1f:80:a0:bd:d9:f5:ae:da:fe:74:12:38:
2f:b2:aa:48:1e:7f:3b:45:03:45:c4:b8:c0:8d:b7:19:0b:1c:
58:50:f9:ff:dc:2a:37:57:f9:a5:04:d7:d0:6c:86:a5:64:f7:
94:bc:6e:9c:b0:c3:a8:1a:ce:e6:69:09:18:3b:49:e8:6d:56:
ea:9b:98:41:7c:12:24:03:86:d2:85:47:f7:99:10:1d:56:2f:
54:7b:59:0d:0d:ad:9e:04:19:19:03:c5:54:e2:57:4f:fe:83:
79:b9:ea:19:69:8a:ec:1f:c3:6b:93:da:90:4b:8d:f4:65:e5:
74:fd:f6:83:95:eb:2e:28:32:bd:ff:c5:0f:1b:fd:82:2e:25:
be:33:f5:cc:c6:54:b1:8a:97:7d:0f:25:5b:4a:23:8d:48:1b:
8c:4c:6f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:23:52 2026 by rpki-client