Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
File: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft (raw, json)
Hash identifier: rWAtWXuwwbRfYdJfhzdn4LEymvfHrX/gwHvCYBoEWXI=
Subject key identifier: DB:7D:BF:37:D4:BA:88:9E:27:DD:5D:0E:84:14:0E:5A:05:A0:87:FD
Authority key identifier: EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
Certificate issuer: /CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Certificate serial: 01A0C17ABC9704FF66A2950781D5C3897FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
Manifest number: 0EC8
Signing time: Mon 21 Sep 2026 01:00:41 +0000
Manifest this update: Mon 21 Sep 2026 01:00:41 +0000
Manifest next update: Tue 22 Sep 2026 01:00:41 +0000
Files and hashes: 1: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl (hash: 5o9oKZC51kk3UejitJ9+1ovEZcTzoCmfRC6ww4z7Mmw=)
2: HdaygFB4iSszAmMjo8uX2Se1nQA.roa (hash: UArj7jtroG3BsSDh4aM2iaAylpZS3vUew6s3b3GEueo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7a:bc:97:04:ff:66:a2:95:07:81:d5:c3:89:7f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Validity
Not Before: Sep 21 01:00:41 2026 GMT
Not After : Sep 22 01:00:41 2026 GMT
Subject: CN=db7dbf37d4ba889e27dd5d0e84140e5a05a087fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:c2:35:5c:1b:30:da:84:84:08:3b:52:b9:
7d:97:a7:65:63:34:01:2d:af:27:a1:f5:4d:ac:d1:
aa:ea:c7:5e:b6:a4:2c:5d:09:3c:0d:de:03:05:19:
0b:8f:a4:c9:fd:de:c1:88:e2:96:a5:2b:fd:28:79:
a9:04:20:a9:16:9e:11:9a:29:25:bd:54:50:31:d7:
f3:a3:33:ad:46:a9:c2:9f:97:86:99:ee:dd:42:2a:
7c:eb:29:51:b9:58:12:5f:c4:85:57:7c:39:94:17:
c3:cb:8a:64:68:a6:c2:0b:95:0f:3f:23:1c:3b:24:
ca:3c:2d:1f:07:00:8c:ff:e4:a6:a9:c6:02:8e:bf:
1a:f8:e8:64:67:dc:ae:6e:de:e3:ee:37:d8:3b:1e:
fc:54:ce:71:70:84:0c:cf:ba:cb:e6:5d:4a:dc:eb:
bf:48:2e:e9:47:b6:c4:25:df:ce:2b:fb:88:52:5e:
05:82:ad:ae:5c:ad:28:db:f6:9a:d2:df:c7:74:a1:
22:87:f7:ac:a6:7d:40:f1:44:8d:fa:95:d4:e5:e2:
6f:f2:2b:24:4d:62:6f:a5:9c:d6:53:12:83:8f:fa:
48:d8:bd:ca:1b:d7:03:98:38:a7:c9:30:ed:de:5e:
7a:4e:a5:aa:d9:02:1e:e4:51:b7:35:7b:83:45:31:
2d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7D:BF:37:D4:BA:88:9E:27:DD:5D:0E:84:14:0E:5A:05:A0:87:FD
X509v3 Authority Key Identifier:
keyid:EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:2e:4f:04:e7:66:0b:c7:e3:3b:d0:1f:72:93:14:42:3d:c9:
81:ca:f3:81:46:72:1c:c9:7f:7f:9b:25:07:03:5e:b4:d5:d9:
7a:02:ce:d7:62:0f:90:64:91:76:2f:0e:ea:45:98:97:b8:83:
92:17:65:d1:bd:ef:f8:5f:bf:59:bb:3c:ad:95:e9:fb:05:2c:
1e:8b:6f:7b:e4:2a:a0:5f:41:15:0f:07:00:86:61:75:7e:24:
01:61:c4:8b:3d:e8:f1:e7:18:71:c4:df:02:13:88:6c:e9:dc:
20:36:7c:ef:c5:46:90:f7:ba:ef:52:2d:5a:88:d3:9a:0f:40:
71:5f:2b:7f:ad:df:c6:f7:f5:98:7e:e9:57:be:62:70:27:e7:
8b:44:aa:2e:d1:34:51:58:ae:d5:57:f4:c5:00:b1:c1:75:10:
3e:22:f8:48:a8:96:57:ae:68:cd:7e:e4:7b:99:b7:6c:6b:40:
fe:a6:d2:e7:a5:b4:0f:d3:a0:5f:d0:4a:53:52:39:25:ac:ca:
e6:1d:aa:7a:93:3c:6a:8b:89:78:98:c6:2a:f1:de:4e:2e:c5:
f2:87:d8:ba:5c:db:92:a2:c0:ca:54:50:8c:21:1a:00:77:a3:
6d:fd:7f:07:cb:a7:32:80:1f:58:19:3b:dd:9a:40:2d:c0:10:
29:e6:99:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:17:59 2026 by rpki-client