Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
File: 7b5zqycw806U8SDpv8Va9EBTafY.mft (raw, json)
Hash identifier: qHYWgVpXJ3JIOhEYzbqiIlI0LLAh8QfN50DxMXxQ7Xg=
Subject key identifier: A2:8C:83:AA:A2:C3:F5:E3:40:B1:17:69:06:22:1F:6D:57:A6:E9:42
Authority key identifier: ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
Certificate issuer: /CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Certificate serial: 01A0C5C506F04FED47E651C4300EF90595E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
Manifest number: 0806
Signing time: Mon 21 Sep 2026 21:00:18 +0000
Manifest this update: Mon 21 Sep 2026 21:00:18 +0000
Manifest next update: Tue 22 Sep 2026 21:00:18 +0000
Files and hashes: 1: 7b5zqycw806U8SDpv8Va9EBTafY.crl (hash: tHKM2b63gIjekHKwGKGg4HugvWItKo/Oi0zVCg2qkNU=)
2: t5LOWwENqQioKciGyoMxLyNCNN8.roa (hash: zlv1UWEx5L67DFS1Ff+3kq6sBK6VPzVmabPisFcvJBk=)
3: wiLmfdGgzijMr6H7FRSYjpbRctE.roa (hash: Z51vNTE/VSPJwzjerq5rKZBcW7aBhn2nt4GaxW27CY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:06:f0:4f:ed:47:e6:51:c4:30:0e:f9:05:95:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Validity
Not Before: Sep 21 21:00:18 2026 GMT
Not After : Sep 22 21:00:18 2026 GMT
Subject: CN=a28c83aaa2c3f5e340b1176906221f6d57a6e942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:31:a5:82:52:1a:5f:60:bc:af:e1:61:90:e9:
dd:64:29:d4:fa:2e:0d:30:2b:98:d6:c3:bf:6f:35:
dd:f9:3b:e7:51:1d:e0:cb:d5:df:c8:87:4e:2d:95:
94:57:c5:b3:36:97:37:8e:da:83:04:4c:cf:83:b9:
6f:91:f9:5a:fb:b0:09:6c:7b:2b:49:78:da:96:45:
56:3a:f0:ac:52:96:48:00:d9:fb:08:c1:6a:af:b5:
a1:16:14:1c:06:32:bb:36:9d:d9:88:5f:57:22:c4:
b0:d8:1a:39:6e:e7:1e:e0:3d:12:cd:5b:5c:1e:61:
ae:7d:e5:75:6e:79:16:58:65:ae:1d:ed:3b:64:87:
54:9d:bb:02:1e:36:04:ae:71:da:be:88:81:7e:65:
de:be:e4:d1:15:fe:b6:79:ad:f7:00:e3:5b:8a:4b:
57:49:4f:64:5a:9e:37:8d:26:9f:30:46:bb:a4:8f:
4d:76:1a:ea:fd:e9:e1:38:5b:63:28:fe:ac:13:65:
84:83:4c:74:cc:b4:8b:be:c6:ef:c2:c5:a8:fd:1d:
b8:d3:e3:28:61:0b:e8:50:1e:0b:e9:5b:eb:df:80:
5c:0d:56:59:6c:84:e4:bc:db:a0:4c:d4:c6:4d:eb:
43:df:34:55:ba:70:20:b5:11:84:28:c4:f1:d4:33:
45:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8C:83:AA:A2:C3:F5:E3:40:B1:17:69:06:22:1F:6D:57:A6:E9:42
X509v3 Authority Key Identifier:
keyid:ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:24:71:bf:88:55:3e:e5:de:27:c7:1d:be:36:55:c1:f6:ff:
06:d6:4a:ac:92:1e:57:1a:6d:51:8a:ec:d6:81:c0:69:4a:f0:
79:38:4b:a7:13:0b:57:48:69:02:7f:86:f9:c0:22:6e:3f:7b:
77:d2:30:d5:27:7f:22:36:29:a8:ee:e9:39:91:3a:c6:0c:ee:
09:4d:62:6f:02:6a:f0:16:4f:d2:0e:a0:5e:1f:29:86:28:45:
19:29:c5:4b:11:c3:49:8e:3c:bb:af:a5:2e:58:a8:a5:f4:cb:
91:5e:48:16:8b:70:4d:5d:00:8a:24:f3:16:7c:c0:4c:ad:97:
8e:6f:a7:06:49:f0:fb:6e:2c:22:76:90:16:4e:25:56:d5:ae:
bd:32:aa:b6:9e:df:7a:f5:20:26:d2:e9:00:b6:f8:61:5f:c7:
a7:14:24:45:4b:72:51:88:22:b0:df:7c:aa:2f:0a:6c:a8:a8:
da:29:0e:f9:06:6e:90:21:58:d7:06:2a:ad:17:df:4e:ed:31:
5a:67:66:c7:ad:ad:03:88:c9:03:50:23:33:99:77:a8:76:06:
3c:3e:86:11:04:31:e2:25:29:8e:b5:04:7b:f6:d6:4f:d7:dd:
99:f5:6c:aa:79:a3:cc:35:35:8e:8d:6f:d8:ed:67:fa:a0:de:
6c:6c:65:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:00:20 2026 by rpki-client