Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
File: 7e4lp4qBa942LEDIbjm5R9DuL_M.mft (raw, json)
Hash identifier: tbx9psNNRw94v0PFF2b9stoUVmEIQYXADjkHPWt0o8k=
Subject key identifier: B8:A0:5C:6F:6B:86:AE:63:B8:D2:05:B8:44:C6:9F:7C:2F:FA:9B:25
Authority key identifier: ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
Certificate issuer: /CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Certificate serial: 01A0C40E383C25DB47739B825C62F44DC182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
Manifest number: 17AA
Signing time: Mon 21 Sep 2026 13:01:01 +0000
Manifest this update: Mon 21 Sep 2026 13:01:01 +0000
Manifest next update: Tue 22 Sep 2026 13:01:01 +0000
Files and hashes: 1: 7e4lp4qBa942LEDIbjm5R9DuL_M.crl (hash: 0R96kGjMIDTokwkQiyaeeh3BEWtQaaUVGLjYbrOPt5k=)
2: Ro8iEiW7rbl5__Js738-X47zd7o.roa (hash: +phYjFZmxaM+pbKEjfOqXvZnYdeDvt8m3Nbx57x5ex4=)
3: xzeSROAZ4o5YtWLRSODt0z_nT28.roa (hash: ewTMl0RKi+Myrcx5oJN4DOCA09oZLzVzmbs3wk5czR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:38:3c:25:db:47:73:9b:82:5c:62:f4:4d:c1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Validity
Not Before: Sep 21 13:01:01 2026 GMT
Not After : Sep 22 13:01:01 2026 GMT
Subject: CN=b8a05c6f6b86ae63b8d205b844c69f7c2ffa9b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1e:af:fe:09:c5:15:ec:a5:0a:a9:34:b1:60:
43:23:73:5e:fc:37:a2:a5:33:9d:d0:f1:a3:d7:59:
44:3a:20:c1:f0:b9:ec:c1:a6:45:96:57:77:90:82:
8d:d0:46:93:3b:8a:9b:ca:aa:4d:5a:a6:f0:44:a9:
87:a0:ab:df:96:75:dd:c2:ef:80:1a:4d:93:03:a5:
23:5d:81:a2:44:d9:35:87:3a:ca:57:f4:e7:32:fa:
38:00:51:b3:2c:80:80:fc:d0:ce:1b:3e:5a:d3:53:
76:ff:aa:70:c5:b2:95:39:25:36:53:78:d9:a0:9e:
26:8a:28:39:fb:e3:4c:91:dd:37:7d:95:01:12:15:
95:59:59:5d:66:7b:8b:94:4c:62:51:58:24:12:d7:
ee:c9:19:df:ba:c6:db:f6:c1:6f:9d:1e:42:37:d7:
12:19:f1:b0:0b:2f:55:be:47:87:01:cd:a9:a9:6a:
14:d2:6d:ce:0b:54:89:18:52:56:71:e8:d2:33:32:
6b:f0:0b:53:45:6e:65:85:e6:ae:73:96:28:79:6f:
f7:37:91:5a:e4:12:64:60:ff:f8:f6:16:ce:f7:96:
ba:f1:97:1c:93:25:63:d5:8d:d5:f1:cb:81:b2:cf:
5c:b0:22:ff:9f:12:bd:b5:1a:88:f9:67:cb:80:1f:
e6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A0:5C:6F:6B:86:AE:63:B8:D2:05:B8:44:C6:9F:7C:2F:FA:9B:25
X509v3 Authority Key Identifier:
keyid:ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:93:49:40:1a:5c:b0:ab:8d:85:f5:0e:12:08:77:dc:53:2d:
5d:73:f8:4a:92:57:8a:90:79:92:b4:10:1d:64:36:e1:5c:85:
3b:3e:19:ba:b7:7e:4c:08:91:82:0d:43:80:22:b0:f5:b9:6c:
e8:fc:53:de:42:d7:49:fc:e0:ab:11:2c:c7:8c:15:2f:29:e6:
e1:f1:96:4e:27:56:cd:32:13:21:58:66:6f:05:b7:db:ef:43:
a6:6f:28:41:bb:3f:09:bc:ea:f1:c1:85:a6:bb:d0:06:c4:db:
d5:d1:de:7e:73:43:2b:38:52:e5:ae:21:ec:4a:d3:5e:13:13:
a8:12:6b:e2:5b:bb:33:57:e9:a7:88:3c:f2:e5:3c:74:dc:b9:
46:43:1c:74:90:df:aa:2b:d6:c2:5c:91:61:f9:9f:b7:21:48:
36:e5:42:92:72:36:43:69:04:b9:b1:a6:16:46:d3:2b:30:f3:
95:7b:0f:28:61:a4:c7:ca:41:6f:da:a7:9d:5e:f1:b9:ce:de:
bd:d2:0c:31:39:82:ed:0d:83:a3:6a:df:2f:b8:dc:a9:3d:32:
87:78:b5:25:6b:80:53:1c:ee:0c:2e:09:51:70:33:80:ed:56:
6b:81:39:eb:41:ae:07:54:6e:3c:24:08:58:97:d7:af:63:8d:
76:47:c7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:42:40 2026 by rpki-client