Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
File: 7E-wYalCbk-yiF2CKGdXKhtYpMA.mft (raw, json)
Hash identifier: IF8eSdq+VUJwDHvXFq7ITmJ677kB/fXoNAygU6vKqaA=
Subject key identifier: 90:D9:A4:E5:2E:52:3F:EA:35:6D:19:0F:AC:31:6B:DE:16:B1:94:2B
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 01A0C0679406419D6D2B4D52DAD30A5405A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
Manifest number: 1A87
Signing time: Sun 20 Sep 2026 20:00:08 +0000
Manifest this update: Sun 20 Sep 2026 20:00:08 +0000
Manifest next update: Mon 21 Sep 2026 20:00:08 +0000
Files and hashes: 1: 0KUFbz0khMkDd6i1hVC0Gk78b8Q.roa (hash: e4QKXhdU4Y0/6TdXU9kKaC0Et/ZZz02AZrZMzhkrhqs=)
2: 4dbfLFgTwDYrqXnFB2f4xHMplQw.roa (hash: qdee12QBSfwV430rgWvKnONQnxAQwUpDJUc9sSl89Tk=)
3: 7E-wYalCbk-yiF2CKGdXKhtYpMA.crl (hash: rfc8wHt9zgB5JqI9lheQM1BtDww2AwzQxKUApKyS61U=)
4: FQNKTNWujcNGigXV8pZHkAVMNZE.roa (hash: iC6zv08D3AEY5XiwSyy8m/zH3R4QBAh7AJZZ7JpPyI8=)
5: K2LNv1z48hNFFlzRSYowSy0Ha38.roa (hash: rgP0qv2b0VyfQUIaOOjPzTbyBIqlmlW8gSl7h4qofNM=)
6: QAfMhvFz23E5j-VZNuNUHJaS27A.roa (hash: 1c6wEWGOfe30pbIdsgVXmuoN1jcDboRJaqg+bTctZUo=)
7: fScuGoqudu5TxiE70DprlLcKYsM.roa (hash: Qna0Roz67B/VzCkvRv3pYKjnRZOrhXbgEhbWUZJL9So=)
8: x_MESfhEqxOpfv7-RrmmKFZTQsM.roa (hash: CgnbbvmY6nJeIwGOkAE0qQBeAzVO6strLDPz3xd7ol8=)
9: ymuaW4C8o-lO-r5wBm-7A05dtLg.roa (hash: g3AL+YyG28zpjRvk8zWwYh7S+XChprFtrfTtHo1inzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:67:94:06:41:9d:6d:2b:4d:52:da:d3:0a:54:05:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Sep 20 20:00:08 2026 GMT
Not After : Sep 21 20:00:08 2026 GMT
Subject: CN=90d9a4e52e523fea356d190fac316bde16b1942b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8b:d2:b9:b4:84:84:c7:6a:75:76:e6:73:45:
66:ad:9e:08:fd:de:c2:ee:be:35:f9:c6:3b:ec:0d:
9d:0d:6a:e1:1d:02:df:a8:f1:e9:cd:44:f5:94:8e:
71:db:a2:ff:d7:ef:03:22:4a:08:83:30:0f:7c:fb:
03:66:bd:e5:fe:ee:c0:30:1d:ac:d3:24:29:6b:89:
2e:e9:7f:74:1b:3c:69:ac:76:4f:6e:b9:a8:67:64:
d4:68:d3:62:cd:08:66:02:f3:87:83:c4:48:73:d7:
3e:76:07:3e:d8:9d:e4:c0:4d:07:d6:b5:f2:ac:d8:
35:83:99:50:a7:56:3b:34:6e:f0:69:27:bd:4e:1f:
f8:08:49:64:94:e4:83:aa:82:c0:00:bd:b8:22:04:
f3:c7:0b:9a:e6:21:22:bc:a7:c3:b7:be:0c:84:a5:
77:66:a6:6e:83:90:9c:05:1d:09:9c:20:7c:ae:c0:
a7:c8:cf:0a:83:71:37:3b:d9:ed:38:95:dc:6a:5c:
c6:04:b1:60:b4:cf:95:33:3b:be:53:1a:f1:24:04:
30:ee:5b:bf:13:57:aa:89:27:04:5c:da:dc:eb:fd:
e2:73:13:6e:82:a9:81:13:92:cc:5e:e6:95:c1:67:
bb:37:3f:56:55:c9:0f:39:e0:11:45:58:9a:97:36:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D9:A4:E5:2E:52:3F:EA:35:6D:19:0F:AC:31:6B:DE:16:B1:94:2B
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:28:75:d8:ec:fa:15:c7:32:1a:1d:75:0d:33:79:ca:5b:bb:
76:83:47:15:81:d8:dd:8a:32:c5:b2:66:81:0a:62:7d:75:7e:
bb:cf:44:4b:57:04:23:e4:8e:83:1a:2a:62:03:68:77:82:fd:
70:8f:11:a0:c3:94:ca:c8:22:20:20:4d:14:ce:21:2e:0e:b6:
58:11:0a:84:75:ec:29:40:8c:be:ca:3e:2d:dc:a0:e2:37:01:
2e:35:82:99:93:89:96:40:11:0e:5d:39:f5:4b:97:1b:49:4a:
71:33:a7:33:3b:91:d8:10:03:f2:95:0f:88:ed:2b:27:5a:04:
eb:9c:36:30:69:51:48:a1:55:f9:22:61:7a:d7:98:8d:47:99:
9b:bf:bb:28:df:51:bb:8f:2c:7b:e1:a9:5c:4b:44:30:8e:f4:
13:e6:cc:10:56:40:5e:24:47:98:3f:a9:78:68:d6:83:77:40:
db:49:99:18:5f:ad:c1:a7:81:97:ba:b7:dd:62:53:2c:04:76:
6f:94:1a:e6:84:53:01:8f:be:ad:21:a2:9c:68:08:43:61:e4:
a9:d2:70:7b:90:29:3f:4b:80:81:30:fc:1a:bc:d5:d8:4d:81:
bf:22:80:04:43:9e:2f:95:70:0a:a9:b4:7c:c4:0b:a3:a2:29:
b0:8e:e9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:07:32 2026 by rpki-client