Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
File: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft (raw, json)
Hash identifier: MGgaGfvFPR1RuX5wPDZatc6dGiNOTrMa7egwJmgAmx0=
Subject key identifier: F6:D7:DD:D3:9B:CA:7B:08:E2:51:C2:24:19:7A:A7:7E:66:C0:B5:F2
Authority key identifier: ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
Certificate issuer: /CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Certificate serial: 01A0C2FB5C31B1AE31BB7E0BF9E98171FA5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
Manifest number: 0823
Signing time: Mon 21 Sep 2026 08:00:48 +0000
Manifest this update: Mon 21 Sep 2026 08:00:48 +0000
Manifest next update: Tue 22 Sep 2026 08:00:48 +0000
Files and hashes: 1: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl (hash: GYWWT73Rk7RSid0379V2J2HQRZk7XguzrOjgIcICwCU=)
2: DBz0WhaRA9wNrK9K1etEW30ajBM.roa (hash: TIvrus04yBKxsgpsBLzS8XeHM34FR+aAzVV81lSqNzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:5c:31:b1:ae:31:bb:7e:0b:f9:e9:81:71:fa:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Validity
Not Before: Sep 21 08:00:48 2026 GMT
Not After : Sep 22 08:00:48 2026 GMT
Subject: CN=f6d7ddd39bca7b08e251c224197aa77e66c0b5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e5:57:4c:c6:bd:b6:4a:38:3a:9b:8f:5e:f7:
3f:bc:d5:fe:61:bc:0a:a3:c3:b1:f4:17:37:1e:65:
58:10:4a:ac:61:bd:b8:61:e3:2f:27:59:50:d6:d5:
34:18:47:46:3e:b1:e1:ea:e4:2e:d4:ef:d8:4c:e0:
d0:73:68:64:b6:71:e5:f7:37:f5:ec:20:0f:f9:12:
2d:62:fe:37:ae:9f:87:09:46:85:92:b7:80:2d:b9:
09:82:36:16:86:96:66:ac:8d:f3:a9:05:d7:1c:a9:
73:a8:a4:69:f0:85:74:87:f9:cd:e2:7e:32:fe:cf:
b8:b4:5a:7a:cb:85:d4:33:4a:9e:f6:28:fa:ea:28:
c4:c0:b3:3f:a4:17:64:30:64:fe:c3:70:95:27:eb:
b4:61:d9:92:b6:29:2c:54:88:22:09:c8:27:31:51:
7a:79:fe:58:e3:e6:1b:3d:0d:cf:80:f9:7e:8a:bf:
df:48:fd:cf:c5:e4:c9:c8:55:e7:4d:2c:bb:5b:21:
93:69:1e:44:d2:f8:96:8d:ca:0d:b4:87:0f:7b:83:
5d:18:48:62:ac:95:8f:4b:22:f9:38:5b:cd:81:5d:
a1:12:08:49:09:eb:90:4c:d3:bc:aa:99:8d:69:5b:
32:39:db:19:2e:06:ca:34:b9:23:2a:12:13:04:76:
22:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D7:DD:D3:9B:CA:7B:08:E2:51:C2:24:19:7A:A7:7E:66:C0:B5:F2
X509v3 Authority Key Identifier:
keyid:ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b3:f0:15:dd:3c:f7:13:1b:77:4f:f2:c4:c5:0e:c0:1a:08:
a0:5d:89:eb:d2:6f:05:c0:20:52:a5:db:b3:58:b4:08:ae:8f:
f0:e6:b4:d1:2a:1b:77:59:1c:d4:97:86:b3:13:f3:ef:5a:d6:
f8:a9:0e:59:80:06:11:52:99:1e:db:3f:5f:ed:90:dc:29:76:
dc:22:38:03:da:04:cd:0a:07:5c:f3:03:e3:41:68:13:b0:c4:
ba:06:c4:1f:bc:dc:a9:5f:29:0a:a1:ed:b5:7d:b9:b5:79:37:
79:56:fa:23:4a:2a:1e:5c:a0:e9:82:83:d0:b5:fd:ce:83:99:
57:ab:83:83:3e:42:9d:a7:19:24:e0:8a:92:64:c1:8f:11:b0:
f6:ca:d1:13:c5:81:07:1c:60:bd:4f:c7:95:d8:8e:cc:36:7c:
1b:d3:d7:c1:b8:be:8c:04:21:04:03:d3:08:a5:32:1c:93:ea:
ce:34:11:8a:a2:1b:12:3f:5d:d9:eb:04:76:16:df:3d:57:27:
3c:18:31:12:85:6c:5e:a5:48:f5:55:db:2c:f6:17:14:36:54:
ce:0b:23:f2:0b:e3:46:41:e9:fa:2a:fc:6d:b7:81:0d:9c:f3:
8c:cd:cd:1d:a1:83:51:0c:28:06:10:3c:6e:6d:c8:63:aa:03:
b7:b7:6e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:39:17 2026 by rpki-client