Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
File: 7_ZbcAAg4w1z07HfeCceVD4wjzo.mft (raw, json)
Hash identifier: ETmmzii7rYvcpjVq6ZbfD+tj/sC4zGEpgjYFe437KGY=
Subject key identifier: 2B:93:84:3E:51:6C:76:37:ED:29:0A:47:B2:67:AA:EF:DC:86:DA:78
Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
Certificate issuer: /CN=eff65b700020e30d73d3b1df78271e543e308f3a
Certificate serial: 01A0DF17C04B9F8C96FDBADC90B2841842C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
Manifest number: 11D9
Signing time: Sat 26 Sep 2026 19:01:10 +0000
Manifest this update: Sat 26 Sep 2026 19:01:10 +0000
Manifest next update: Sun 27 Sep 2026 19:01:10 +0000
Files and hashes: 1: 7_ZbcAAg4w1z07HfeCceVD4wjzo.crl (hash: Yoef0m1HqOkRNTOsOc8PhV1hMt5vqdbT5kZnapL4R64=)
2: xWJAqfrPXr4KnkU7Qd4lSzlkp8o.roa (hash: ceeD+cwy4G4/W2RDlhQiQMMWpwCMIwxk/08X/W6eMjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:17:c0:4b:9f:8c:96:fd:ba:dc:90:b2:84:18:42:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a
Validity
Not Before: Sep 26 19:01:10 2026 GMT
Not After : Sep 27 19:01:10 2026 GMT
Subject: CN=2b93843e516c7637ed290a47b267aaefdc86da78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fa:9f:0a:75:f3:65:a0:50:d0:d0:68:84:56:
21:ca:dd:7e:21:1b:34:42:96:fd:ac:b8:b3:c9:10:
5d:17:02:a7:07:3f:ba:79:44:30:b7:2c:55:94:c0:
62:cd:1e:76:56:92:53:24:f2:75:47:ba:cd:1d:c0:
93:bd:cb:ea:04:65:19:d6:cb:aa:15:32:cc:98:44:
2d:13:a1:44:d7:3c:53:e1:93:72:61:86:50:a2:25:
d3:fb:47:3a:c1:82:40:08:9a:6e:a0:77:5c:2c:cc:
40:ab:c8:45:e0:91:ad:be:21:2c:63:76:33:3b:dc:
4f:bc:90:3b:2a:f9:6c:33:91:2f:2f:4a:85:b1:c4:
da:aa:ea:59:a4:30:5c:ec:b9:d1:f2:5a:16:42:f9:
ff:b9:88:8b:91:bf:00:ad:b6:e2:bd:6c:a3:16:80:
fc:89:e7:73:76:39:74:3d:81:b7:7d:7b:2e:56:4a:
b6:12:9e:1e:02:6d:26:f5:aa:a8:03:fb:d6:e8:fc:
a8:e5:55:fb:89:e0:95:4b:fc:bd:55:91:bd:96:75:
3b:7b:61:4b:ff:a2:cc:c2:8a:c2:39:4a:1c:59:a2:
f1:35:a5:c2:2d:7a:41:3b:0a:db:56:6c:d6:07:5f:
41:c7:9d:2f:9f:9c:74:3f:c6:de:71:64:de:68:33:
49:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:93:84:3E:51:6C:76:37:ED:29:0A:47:B2:67:AA:EF:DC:86:DA:78
X509v3 Authority Key Identifier:
keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:06:24:e4:5c:93:fc:c7:a1:33:b8:df:0d:d1:0d:e8:c0:49:
f3:46:63:95:a8:32:2f:9f:c8:b2:ba:fd:d8:06:15:be:1c:66:
48:d6:b2:eb:79:97:b9:7f:e6:95:0b:6f:fb:c8:89:83:4f:24:
e6:87:f8:be:88:02:a0:86:89:b2:c8:7b:f3:25:21:0d:ab:90:
cb:d4:9d:f0:86:04:56:2d:63:c8:b5:db:53:3a:80:0e:4b:5b:
32:fd:e7:11:16:c7:b9:c2:05:8a:8d:d1:89:4f:e9:f4:a5:0a:
69:c5:1b:bc:a0:2c:51:bd:ca:5c:8b:a8:be:6b:88:ce:13:e8:
01:88:54:40:2d:b0:be:ed:20:11:99:ea:d7:86:52:3c:0e:98:
6b:9c:10:93:a4:dc:28:16:9d:cf:79:b9:41:f0:a6:8f:f0:7e:
0a:31:f4:b3:16:89:78:27:56:76:60:f6:5c:a9:b3:dc:f3:c3:
53:c2:6a:6f:0b:6b:45:94:9d:47:4a:a0:c1:20:05:9f:9a:4e:
1a:e3:09:71:3e:d9:d5:96:4d:26:d1:f2:ff:d5:c5:81:fd:93:
30:c0:d8:c8:cb:03:97:e3:aa:19:e9:30:77:9d:34:d0:88:34:
53:d0:ed:96:83:33:fd:23:25:80:5f:a2:c6:70:e7:d3:40:40:
91:6d:5d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:30:48 2026 by rpki-client