Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.mft
File: 7gItaN8GanYaO-hkGnG7acFeJy0.mft (raw, json)
Hash identifier: PTe/hb9dnW8CnuUGUlgR62i2Ys1eC/9QZh4tYvwzBYc=
Subject key identifier: 06:B6:CB:7B:A8:F0:A3:C8:98:E3:6B:7D:40:50:32:B0:09:E1:3A:75
Authority key identifier: EE:02:2D:68:DF:06:6A:76:1A:3B:E8:64:1A:71:BB:69:C1:5E:27:2D
Certificate issuer: /CN=ee022d68df066a761a3be8641a71bb69c15e272d
Certificate serial: 01A0C0681C22A1AAB7F4BBB88D692BA6D17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gItaN8GanYaO-hkGnG7acFeJy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.mft
Manifest number: 0197
Signing time: Sun 20 Sep 2026 20:00:43 +0000
Manifest this update: Sun 20 Sep 2026 20:00:43 +0000
Manifest next update: Mon 21 Sep 2026 20:00:43 +0000
Files and hashes: 1: 7gItaN8GanYaO-hkGnG7acFeJy0.crl (hash: pZm3fOmXsSVL+1jAQPpwuB35Dl4cZdS1YXGXElTVfCk=)
2: ZWrLA8P4cNDYX7LqyBxM_pLC7jw.roa (hash: zGPBTIivjfCbBMOh6eYhny8i23uv7HAM64XuSqL1vqw=)
3: cMACCsbnonO7iXHmw3M200GS5Wg.asa (hash: 1uxo5+YyjU4+znAYLYt5OXwAZIxOVUqUGmeGGSOspdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gItaN8GanYaO-hkGnG7acFeJy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:68:1c:22:a1:aa:b7:f4:bb:b8:8d:69:2b:a6:d1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee022d68df066a761a3be8641a71bb69c15e272d
Validity
Not Before: Sep 20 20:00:43 2026 GMT
Not After : Sep 21 20:00:43 2026 GMT
Subject: CN=06b6cb7ba8f0a3c898e36b7d405032b009e13a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:4e:58:35:72:35:05:db:35:8b:2b:27:a6:
0b:47:d3:18:f3:c6:50:33:fd:bc:7e:2b:36:28:ea:
15:12:34:92:a8:c6:10:35:5b:68:06:78:56:30:2f:
18:cb:8c:bf:5a:f6:4a:49:2e:9d:25:8a:0d:b0:fa:
b0:a4:99:71:c0:76:d6:a8:ee:41:e8:65:dd:0a:da:
82:eb:be:77:e2:61:fe:6a:44:3b:37:d1:02:30:00:
fc:b0:9e:c1:76:54:5a:5b:d9:08:e8:18:5f:b7:13:
d9:0d:e3:ad:18:d3:e8:f7:a4:59:07:6d:78:d7:81:
9e:66:69:a2:74:74:92:95:d8:92:5e:d6:b3:d1:ae:
ef:4a:fc:46:69:aa:c2:c9:d8:a6:60:93:df:d1:52:
1b:6d:90:c5:16:31:fc:44:3a:10:bb:4c:d1:8a:69:
53:e0:4b:d6:9c:2f:a3:14:68:03:5a:29:d1:94:8a:
da:ee:8d:34:ae:e0:6e:01:34:76:ac:78:c0:b1:69:
5a:d0:87:fe:db:ab:32:7c:a4:3a:df:00:c4:74:ed:
2e:cf:5a:83:81:05:27:c1:d4:7b:f7:77:f8:16:1e:
be:1f:c1:7b:eb:19:c5:26:ce:07:02:09:f0:8d:c2:
4b:65:72:bc:3b:29:8a:d1:8e:d0:3d:f7:43:b3:c1:
6f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B6:CB:7B:A8:F0:A3:C8:98:E3:6B:7D:40:50:32:B0:09:E1:3A:75
X509v3 Authority Key Identifier:
keyid:EE:02:2D:68:DF:06:6A:76:1A:3B:E8:64:1A:71:BB:69:C1:5E:27:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gItaN8GanYaO-hkGnG7acFeJy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9e:4b:72:4b:44:fd:7c:50:38:da:25:de:a8:53:0b:da:18:
9f:da:a5:35:3f:19:86:b3:90:78:e0:c3:6a:c8:db:6c:88:b0:
0b:9d:a2:bd:51:b8:29:1c:6d:ca:1b:f1:7b:4a:96:87:ce:6c:
54:67:03:6d:37:16:82:04:d4:96:c6:76:a0:2f:b5:70:8c:b3:
1f:c6:02:6e:7b:13:7b:53:13:e4:8b:e3:0f:7b:fa:60:f2:d8:
21:e3:94:29:2f:24:30:74:17:f6:c5:af:d1:4a:f0:39:8d:49:
45:42:0d:e9:74:a7:d1:b0:88:fe:f1:b9:af:c9:f2:5b:52:d4:
6e:ae:70:5d:07:23:1b:bd:cf:37:f6:70:7b:a2:a2:0d:7f:a5:
81:c0:d8:fd:41:3a:b9:ea:0a:17:06:52:12:69:f4:07:85:db:
88:24:23:eb:49:8e:2c:06:48:70:fe:a7:ab:37:a5:a6:7a:a5:
ab:01:ec:2a:83:84:ae:a0:fe:48:df:72:5e:82:ef:f1:70:54:
3f:be:79:ab:5b:6c:1f:9b:7e:0c:48:10:09:25:f9:7e:7a:cf:
a4:1a:a0:cc:7c:1a:47:dd:df:1f:7f:91:a4:2b:93:d8:9c:c8:
cc:b9:dd:05:24:d1:ce:92:be:6b:7a:46:e9:ad:aa:05:ef:0d:
d1:21:85:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:08:26 2026 by rpki-client