Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
File: 7ixIe2tr3aIheQctkqjwHo5zZjQ.mft (raw, json)
Hash identifier: lTdBG4MIn1qjNnHSI1MR25hBx+MWJL7GhCTp6IxOI8k=
Subject key identifier: 34:AF:AA:59:CE:26:4A:A9:D3:58:E6:02:0F:BC:FF:CC:AE:39:A6:0E
Authority key identifier: EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
Certificate issuer: /CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Certificate serial: 01A13CA6033A03004BC30A45DE5FEA617620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
Manifest number: 1AA3
Signing time: Wed 14 Oct 2026 23:01:15 +0000
Manifest this update: Wed 14 Oct 2026 23:01:15 +0000
Manifest next update: Thu 15 Oct 2026 23:01:15 +0000
Files and hashes: 1: 7ixIe2tr3aIheQctkqjwHo5zZjQ.crl (hash: czyN9iF89QCo7DdNiI3sdGDWbh1rixp4X5rRcZ9jCRM=)
2: _osGDzZycVvwVO8jk7tST0-kMuc.roa (hash: V5At1uVjWkeBJy6WzVu631/zeJQGqErhpfeeQ5kY2uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a6:03:3a:03:00:4b:c3:0a:45:de:5f:ea:61:76:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Validity
Not Before: Oct 14 23:01:15 2026 GMT
Not After : Oct 15 23:01:15 2026 GMT
Subject: CN=34afaa59ce264aa9d358e6020fbcffccae39a60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:78:da:ca:5e:f8:96:97:9f:d3:27:97:15:92:
e2:3b:69:11:61:c0:fc:69:a0:36:dc:58:aa:c8:22:
a2:55:2a:20:26:f2:2e:42:f2:49:a0:42:40:b0:db:
50:9b:4c:e9:3d:0c:f4:2f:a5:84:2d:70:72:ad:bc:
86:ec:2f:85:60:52:21:f6:c7:c5:43:12:fa:c7:7b:
b0:0d:a0:48:d8:37:41:6f:ce:ae:dc:45:49:3c:fb:
bc:58:47:5a:10:e5:4a:48:f3:6f:ab:d2:20:c0:76:
1c:37:c5:7d:0b:68:2a:25:37:71:38:a4:77:08:8f:
fe:fb:18:3c:6a:1b:3b:22:96:52:4d:c8:8f:49:df:
13:b3:48:72:b8:8b:38:04:f2:c6:45:fc:52:64:2c:
f8:e5:ad:45:b9:3e:92:58:92:69:d0:10:1f:55:4a:
a3:12:23:1c:5b:9e:04:42:ff:0e:c7:db:0a:d5:74:
70:f3:cc:c7:34:e0:ce:6c:2e:be:40:dd:d9:56:36:
0d:fb:69:1f:30:6c:eb:80:ae:d9:a3:2a:86:d7:0f:
b4:7b:ca:70:93:cb:92:d7:5a:8b:82:48:f0:4f:93:
6e:e5:25:cc:14:27:e8:05:51:82:90:d0:35:b9:9b:
ff:51:00:bf:89:dc:42:f5:80:4b:30:49:58:ba:00:
ac:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AF:AA:59:CE:26:4A:A9:D3:58:E6:02:0F:BC:FF:CC:AE:39:A6:0E
X509v3 Authority Key Identifier:
keyid:EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6d:57:02:80:77:0e:72:d6:b1:39:ea:d2:31:b1:53:4a:13:
90:6b:64:7c:e9:1c:d5:db:5c:1f:6e:b4:1d:be:a9:6f:b9:a3:
9d:c5:24:db:fe:17:90:6b:81:86:59:af:ea:61:ad:a9:2d:15:
2c:dc:3e:12:5b:6a:fe:49:48:cd:ca:78:1a:55:ea:a0:f4:90:
77:ea:77:b7:78:dc:a5:8a:20:c6:cf:28:aa:ab:26:30:38:01:
38:09:2d:ef:8f:f4:63:76:d3:32:0f:70:cb:86:ff:0f:7d:f5:
c7:73:e2:08:40:99:80:06:85:8d:70:f3:ce:7d:71:27:c4:de:
f7:ff:9d:ac:3c:16:71:1b:c0:1b:ed:69:d0:a4:4f:24:79:49:
b4:18:cd:56:d7:4d:11:af:fe:11:ee:25:b4:bd:e9:4f:d2:e4:
29:1d:04:23:a2:10:41:0f:7f:39:ba:56:0d:85:50:9c:1b:92:
fa:13:b9:67:95:bb:44:e9:b2:0c:66:9d:4f:fd:53:18:85:d3:
75:d6:3b:cb:0c:9e:55:1f:e0:ac:da:1a:c7:b9:08:e7:69:75:
4b:79:9d:d2:14:e2:92:1c:c1:ed:e8:d2:95:b8:40:5d:42:70:
ce:cf:24:ed:54:aa:43:95:10:02:f5:cd:e0:12:34:0c:8e:48:
43:75:ab:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:57 2026 by rpki-client