Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
File: 7qR10Itvi3jtEbDKTRNt6zi8mRs.mft (raw, json)
Hash identifier: pfUhff6fXmrsgT10lRfl5lMoM8z9wkCOiZfym4h+kvE=
Subject key identifier: 60:D7:0E:3E:F1:53:D6:F9:37:2C:D6:92:E0:E2:12:67:3D:0D:60:41
Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
Certificate issuer: /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Certificate serial: 01A0CE242F7FE473053D9FB9358019B2B7B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 12:01:12 +0000
Manifest this update: Wed 23 Sep 2026 12:01:12 +0000
Manifest next update: Thu 24 Sep 2026 12:01:12 +0000
Files and hashes: 1: 7qR10Itvi3jtEbDKTRNt6zi8mRs.crl (hash: AsU17eY7WmqZCjrDkl2QuYoCJBBUKpo4wcTA4v5EFIE=)
2: Uzq6jnjiBmJhQ77sdYIGU3rtoW8.roa (hash: TaYrbh565HuhRP+MsEApRFlphctYPIuvYOeurCpD+fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:2f:7f:e4:73:05:3d:9f:b9:35:80:19:b2:b7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Validity
Not Before: Sep 23 12:01:12 2026 GMT
Not After : Sep 24 12:01:12 2026 GMT
Subject: CN=60d70e3ef153d6f9372cd692e0e212673d0d6041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:91:31:aa:12:d1:bc:91:52:3e:de:7d:8c:9f:
df:d8:ae:0f:b2:13:e2:10:21:c7:4e:19:97:ae:4d:
1b:12:21:5f:bf:da:29:d2:3e:8b:1f:57:02:37:18:
68:ef:7f:44:6e:93:15:69:60:3b:ea:72:ab:a5:00:
ce:2d:ca:84:37:bb:55:6b:9d:e6:f7:1f:ce:55:f0:
0f:88:cf:6b:0f:bb:e9:dd:ac:e8:cb:46:b7:96:fd:
1f:7a:ee:59:99:51:70:95:9c:56:ef:5f:ee:92:ad:
a6:27:ad:be:11:36:b0:2a:96:d5:eb:f7:e2:7e:f1:
a8:cd:fe:9c:95:26:a5:2e:c9:06:20:01:5f:62:35:
cf:4e:99:d3:76:1c:26:87:8e:53:f5:09:3e:1b:9e:
24:09:9a:98:e6:da:bd:15:4a:a8:60:9c:9d:ea:12:
1e:cf:5d:00:c3:26:e5:cc:80:09:b0:2c:0e:7e:19:
7b:25:fb:a4:46:e4:d9:cd:3c:ab:81:90:e1:e7:e2:
56:63:69:64:bf:0d:32:c0:66:c4:8c:c9:a0:2f:7a:
ec:ee:a8:14:e2:2a:b9:7a:73:0b:af:84:b1:51:4f:
08:fb:ae:8f:ba:9e:69:fa:b4:cb:b6:56:38:8b:b5:
0f:a5:9c:97:75:c2:a8:f3:83:fd:43:2d:0d:a5:29:
4c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D7:0E:3E:F1:53:D6:F9:37:2C:D6:92:E0:E2:12:67:3D:0D:60:41
X509v3 Authority Key Identifier:
keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:bc:7c:c4:e2:d5:e9:6c:fe:52:62:d8:10:1c:fd:bb:77:74:
d5:e6:76:08:67:0c:fe:08:0d:e6:8f:17:3f:fd:a4:3a:92:db:
f3:39:c0:fc:8f:39:a8:ee:46:14:4c:9a:ee:f6:99:2a:6a:55:
45:60:99:6c:74:fd:44:03:61:0a:d1:ab:cd:35:53:17:83:f6:
a3:96:0c:34:5f:53:b4:c7:12:ce:52:ba:7e:0d:6e:30:06:73:
3a:f6:96:8e:71:56:cf:ad:e6:ac:26:ec:67:ff:47:86:c0:d9:
06:22:65:26:fa:2f:44:3a:fb:57:ab:7e:53:57:60:08:bc:f8:
43:de:8d:81:0f:ae:94:62:4d:53:12:ae:17:63:2d:93:e3:b4:
03:e8:b0:92:62:b3:74:7e:e9:4f:96:10:a7:4d:55:a6:f1:f9:
5d:39:ac:97:68:b9:8e:f3:39:e2:ae:4e:56:5a:89:98:0a:6d:
bf:01:66:da:18:e3:5a:e6:be:42:bf:58:67:e9:3b:c3:18:89:
75:86:48:e6:56:d5:8b:b3:ff:29:f7:e1:e7:c5:0f:f6:86:3c:
2e:ba:b1:88:af:9c:ea:2e:b6:ce:a2:6b:d3:c6:35:27:f1:db:
fb:0e:11:b2:a7:bf:41:23:1d:17:80:b9:76:0d:31:dd:ae:2e:
1f:c7:5d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:56:34 2026 by rpki-client