Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
File: p-7aZdzUOH1yJwBcHhOgbUSHe28.mft (raw, json)
Hash identifier: ogsM0TJxEpKAoAPsrfdumIBnSQUbsarNiOadDhiqVe4=
Subject key identifier: 43:C7:AB:21:7E:8D:2E:C0:92:17:59:C6:D9:39:6F:D6:88:41:97:EE
Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Certificate issuer: /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Certificate serial: 01A0B5AD686A11B52AE9A2638CA4F734EDCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
Manifest number: 176F
Signing time: Fri 18 Sep 2026 18:00:35 +0000
Manifest this update: Fri 18 Sep 2026 18:00:35 +0000
Manifest next update: Sat 19 Sep 2026 18:00:35 +0000
Files and hashes: 1: 2U0mDkF6k188FlI68TZ1uJWmy1k.roa (hash: 7JEOUa3UIN+/J9E0Zd5VhYU2fI+uSkBnOTYRU58DUPc=)
2: p-7aZdzUOH1yJwBcHhOgbUSHe28.crl (hash: 3wN7yHseNuYVv0gcRgOixnggD3WWhGSbzHOskfvUSro=)
3: tBq-qaCe3hrl4_W-MDsRfd4wxUc.roa (hash: LU9RPoPeOkovwLTGRp1rw5FM6GQYSbQNsjGB+DdEmmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:ad:68:6a:11:b5:2a:e9:a2:63:8c:a4:f7:34:ed:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Validity
Not Before: Sep 18 18:00:35 2026 GMT
Not After : Sep 19 18:00:35 2026 GMT
Subject: CN=43c7ab217e8d2ec0921759c6d9396fd6884197ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:af:85:80:84:d3:c6:13:00:ba:51:6f:fd:
14:17:a4:db:1c:70:5c:3b:04:b0:5f:3a:e8:9f:d0:
78:a7:5e:0f:42:ba:96:57:de:fb:c3:f5:a6:25:83:
18:54:e3:c6:b1:4e:21:e8:cc:b5:9b:1d:09:ce:bf:
f7:1a:2c:92:ac:17:0c:69:90:9c:85:36:4a:80:c7:
a7:14:82:0b:39:a0:41:a7:78:7c:91:09:c3:78:70:
a6:46:f9:5d:8d:99:c4:b4:35:c7:c2:57:c9:5a:69:
1a:e3:aa:b4:b4:0c:eb:7a:1f:03:d1:aa:de:67:5f:
37:69:b1:8d:35:01:90:18:bb:85:7e:ba:e4:0b:83:
59:3e:f8:6e:ec:8a:87:59:a1:a1:22:13:1b:63:9b:
ce:6e:31:00:5e:50:23:6c:22:6a:59:29:ed:36:99:
a7:8b:52:30:1a:7f:be:78:ed:da:e8:6e:86:1f:67:
c3:05:2f:38:5c:87:a6:9e:29:17:be:0d:c7:60:b3:
95:40:eb:72:67:92:51:47:ee:d1:53:7f:32:2f:16:
77:7f:71:eb:e5:d6:57:9c:18:e0:20:86:da:af:7d:
97:ff:25:f4:a0:2b:b4:f8:09:6a:87:0d:2b:40:3e:
f3:15:48:21:61:f5:27:05:ee:70:c7:b7:68:25:08:
41:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C7:AB:21:7E:8D:2E:C0:92:17:59:C6:D9:39:6F:D6:88:41:97:EE
X509v3 Authority Key Identifier:
keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:60:8a:2b:76:59:87:05:d9:7d:7f:f4:4a:16:9c:d2:78:68:
3a:8b:01:99:e3:24:f2:a8:ab:1f:af:37:18:0f:ac:5f:61:56:
e1:a2:f8:22:60:05:92:6c:4a:63:57:83:2f:ec:87:c8:f0:57:
35:f1:bd:6f:40:02:19:e1:0c:e0:ae:1e:bd:2b:5b:8c:1d:f2:
1b:a1:c9:f6:85:d2:f9:8d:c0:18:df:fd:ac:ce:00:1b:dd:0b:
e0:78:8d:23:e6:48:37:5a:e4:74:ca:5e:8e:19:52:03:40:3e:
51:b2:2b:29:22:4b:56:c4:92:88:0d:36:ee:7e:57:8a:7b:0d:
cc:4e:04:03:ac:6b:12:ca:58:db:2a:4a:07:10:46:a1:a9:fe:
ac:55:4a:41:68:6d:1d:0d:26:0f:fe:84:80:5a:35:2a:da:25:
45:d9:c6:1e:f5:8c:61:01:11:ec:54:4d:91:c3:bf:b6:af:4e:
71:16:6f:90:d8:e3:7e:66:66:6d:6d:82:67:3e:e9:8f:c5:08:
02:55:6c:b1:5b:a8:33:94:ed:08:5b:3a:ff:dc:d8:3c:a2:92:
ff:0a:98:fd:c5:7f:84:42:1d:bd:40:ae:95:0f:c3:c2:40:0e:
1c:bb:a4:ad:63:97:99:9c:b9:61:e1:f1:44:dd:e7:78:61:bf:
7f:b1:fb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:55:19 2026 by rpki-client