Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: m3Qo6UcXcrblZeCf9Y95kxVfUXZ1QYuo9B1Ca7LYM98=
Subject key identifier: 74:4B:6E:16:31:48:BB:86:FC:DA:1E:4C:93:8B:22:89:75:58:84:F6
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 01A0D91747F6349E62037A1A7673B0AC77EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 1859
Signing time: Fri 25 Sep 2026 15:02:56 +0000
Manifest this update: Fri 25 Sep 2026 15:02:56 +0000
Manifest next update: Sat 26 Sep 2026 15:02:56 +0000
Files and hashes: 1: 5wBvYH18mnYKydx8H19r86HtE0Q.roa (hash: VUGd6jaGsjCSaa2yqTqiiqwge8OaZ7jM3DegnmT+3+Q=)
2: 5zuquzvoPSv-HJr2QhNMX3OYMgA.roa (hash: bcYgeaY8QXTzK+9kyXA0UgosAczZtORy6M/Ez+Fizn8=)
3: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: 95CHijeTX4svBTwzj1E7luMOP1DX3A2OZHwpCvXwCZQ=)
4: kgnu5UR9Ocl-BiVCaC6wT07shm0.roa (hash: FpIRHnwVZMdLfpDIL1lnVTw2bZIMLJe4K4qr7pxMTCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:47:f6:34:9e:62:03:7a:1a:76:73:b0:ac:77:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Sep 25 15:02:56 2026 GMT
Not After : Sep 26 15:02:56 2026 GMT
Subject: CN=744b6e163148bb86fcda1e4c938b2289755884f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:3b:e2:d9:97:6d:88:20:25:e6:6f:25:0d:
74:b3:03:9b:22:19:79:a9:c3:0e:3d:8c:59:32:b9:
e8:01:31:09:79:99:2f:c1:14:0a:38:ed:ac:4d:66:
d0:d6:f7:ae:04:af:2e:ea:b2:7d:6f:c9:a2:b3:8d:
2d:df:45:a5:1e:be:d2:c8:4f:2b:73:80:68:6a:15:
57:ee:3b:bb:66:78:85:7a:47:e6:f6:a7:a0:37:85:
8a:65:a7:5f:45:86:c0:dd:0a:88:3c:48:07:17:cb:
10:23:9b:9e:28:99:c2:12:35:75:63:a5:9e:82:41:
b7:ca:23:0b:84:4b:f8:d1:7b:62:ba:66:70:e7:f5:
a3:60:c6:60:ce:22:79:8e:76:99:8f:48:08:52:c8:
24:f5:f1:94:47:dd:c2:ad:3f:46:6f:ab:5d:84:08:
4c:4f:e2:d4:6f:e8:f5:ad:a8:86:c1:ae:b5:59:2c:
f9:9b:3b:3e:8b:91:62:04:99:ea:4a:c5:5a:83:66:
bb:e8:c9:eb:7f:9a:ad:14:92:8a:f0:91:b7:84:78:
35:65:4d:04:ce:f5:cf:3e:ba:c3:53:a8:66:d2:b0:
53:e4:88:03:b7:69:ce:a0:f2:6b:9d:f7:d1:e9:03:
51:47:fc:20:70:3b:2b:a3:12:be:d1:61:2d:4c:0a:
81:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4B:6E:16:31:48:BB:86:FC:DA:1E:4C:93:8B:22:89:75:58:84:F6
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6c:34:f2:01:8c:41:ff:a8:e4:14:86:1e:e4:1d:39:59:c5:
da:94:5f:15:f5:f6:6a:c6:d7:0a:f2:4f:ea:81:44:a9:8d:8d:
ea:18:08:4f:ee:36:ce:51:9a:db:64:ec:8d:24:24:83:8c:d2:
fd:b8:87:2f:65:9c:47:4d:1b:c5:02:24:3d:bd:23:c1:bc:d7:
4d:21:24:55:ea:35:cc:80:56:1a:f6:ef:43:fa:e1:8f:a5:b1:
96:e8:aa:87:04:03:2f:57:a2:2e:67:d0:25:a5:6e:a5:6d:aa:
4e:13:96:fd:a2:73:e2:1a:0e:76:d7:1d:34:14:14:dd:66:d2:
20:ae:bd:0c:1e:43:a8:72:24:34:30:5f:ee:a4:78:8f:70:9b:
97:49:b5:74:58:a4:4a:c8:a2:8a:c7:85:b5:10:e3:fa:35:04:
7a:63:e8:42:aa:fa:0b:d2:cc:db:b2:e5:72:ce:dd:33:66:6a:
7f:e8:8e:0b:f6:39:f0:2b:5c:5c:00:fa:74:08:9f:67:77:76:
78:7f:13:02:f5:d7:57:a5:b1:bf:44:af:ea:e9:31:95:1e:3d:
60:36:2d:db:68:e0:51:cf:4a:66:e9:8c:c1:10:08:14:ff:81:
25:cd:6f:18:c9:f8:f4:5c:bf:bc:02:22:55:cf:eb:27:68:48:
08:73:4c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:26:22 2026 by rpki-client