Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
File: 7CSoJiAgkayDGfDwbreW_YJCKw8.mft (raw, json)
Hash identifier: Lqs6GoGtDZC0kyAmlxcbUqCNQoQ/8D4ATmqKYoyvtog=
Subject key identifier: D9:30:0D:28:96:20:82:91:30:B9:21:9B:A2:8C:76:85:D4:C1:11:47
Authority key identifier: EC:24:A8:26:20:20:91:AC:83:19:F0:F0:6E:B7:96:FD:82:42:2B:0F
Certificate issuer: /CN=ec24a826202091ac8319f0f06eb796fd82422b0f
Certificate serial: 01A119E288472C870F0FED86A8F1E7C792AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
Manifest number: 0432
Signing time: Thu 08 Oct 2026 05:00:38 +0000
Manifest this update: Thu 08 Oct 2026 05:00:38 +0000
Manifest next update: Fri 09 Oct 2026 05:00:38 +0000
Files and hashes: 1: 7CSoJiAgkayDGfDwbreW_YJCKw8.crl (hash: NJKE6yYQVZ6tjyQ9ZWawfD0i0biPj/wz0vSe/EchK04=)
2: NV3f3XuOFAsDnfAaCg6nF83CLX0.roa (hash: gLitDvaGVXpGQdqcXcYcXVG4iAgjgIJ9u8eaDv8Xduc=)
3: XHsv6tidd9i-2RRz-dH5aTG8xDM.roa (hash: mc5VNfZqvrFRMc92AfbsJY+NZvDvOSGlYFhOV1FglZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:e2:88:47:2c:87:0f:0f:ed:86:a8:f1:e7:c7:92:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec24a826202091ac8319f0f06eb796fd82422b0f
Validity
Not Before: Oct 8 05:00:38 2026 GMT
Not After : Oct 9 05:00:38 2026 GMT
Subject: CN=d9300d289620829130b9219ba28c7685d4c11147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:69:c2:ba:3e:07:6d:25:99:d6:ac:0e:8d:10:
57:e3:59:68:27:36:b4:f3:e0:da:07:eb:77:8b:1b:
c5:ed:13:30:f8:cf:d7:7a:e1:70:d7:fe:80:9f:a1:
a9:fd:f7:fb:af:f2:a3:42:7a:e5:72:17:47:04:5d:
16:2c:0a:f6:a4:ee:3d:bf:0b:97:a1:76:ef:c9:2d:
56:99:97:3f:a1:e1:a6:0a:a3:16:9a:d6:17:93:42:
14:51:09:31:c9:fb:0e:26:1c:d3:73:a0:a8:da:28:
a9:bc:91:58:db:52:f0:99:80:88:1d:4f:f2:f5:c5:
40:29:60:85:96:dc:49:e4:de:36:3c:d6:1e:6a:a1:
72:01:e6:85:f9:2c:b1:74:c5:41:fb:a6:c0:2e:ad:
aa:90:3b:1e:8b:44:8e:25:4d:15:aa:c8:1c:ef:4b:
7b:c1:c5:53:a5:1a:20:6f:33:ec:4c:23:10:30:d8:
e4:21:06:4c:28:03:79:3c:35:0d:63:57:16:53:8e:
45:41:ab:22:8c:b0:f1:e5:bc:78:cf:63:85:32:6e:
de:fc:69:f9:21:6c:13:5b:b2:19:87:91:5b:dd:c8:
c4:e9:15:9d:6e:91:93:d1:8b:f3:28:6c:c0:e5:71:
90:80:f2:79:46:79:94:c2:0d:b4:45:15:c0:a5:1d:
c8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:30:0D:28:96:20:82:91:30:B9:21:9B:A2:8C:76:85:D4:C1:11:47
X509v3 Authority Key Identifier:
keyid:EC:24:A8:26:20:20:91:AC:83:19:F0:F0:6E:B7:96:FD:82:42:2B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:d5:e1:40:c6:c7:70:dc:ba:a2:e9:70:59:21:07:bf:31:5b:
46:88:d6:79:45:0e:31:b9:92:1c:8e:08:e7:e3:55:0e:8a:fb:
48:38:f9:cb:f4:ad:45:5f:30:9a:06:a7:77:63:be:3e:db:ae:
c3:b5:a4:e7:9e:db:ba:cd:87:7a:78:e0:f1:b1:5b:7e:99:ea:
0c:4d:06:de:4f:cc:4c:71:0f:66:53:76:c0:88:98:94:c7:0d:
93:c2:98:6f:5c:bb:ef:b4:dc:47:3b:9d:5c:24:cb:70:95:e1:
2c:72:6a:b0:38:fb:80:69:19:1b:b1:dc:82:75:dd:28:22:30:
f9:8a:f6:62:39:7a:86:ef:d6:c9:79:9a:11:24:2a:7c:d2:9b:
27:95:63:32:a4:06:05:bd:1e:b5:6d:21:81:8f:d9:e9:28:df:
9b:02:cb:2c:e1:0b:87:0b:c3:ca:68:30:c8:27:30:d2:df:1f:
73:e3:94:61:34:36:77:d4:61:98:31:76:49:f8:79:1d:04:72:
a9:73:18:ed:e7:d2:83:11:62:37:10:ff:0f:d9:53:de:18:54:
36:5f:c4:25:ea:68:2a:84:15:32:cc:28:0a:2c:81:81:9a:a8:
05:51:34:42:50:42:fa:b8:62:2d:0c:0d:f8:37:00:d7:9b:43:
79:46:f3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:59:21 2026 by rpki-client