Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
File: 7jfTSGm8YLfZ54M19KMjgftyEOU.mft (raw, json)
Hash identifier: 3R/JsaN8n1msjktcII/lP5m56uXZtv97uTNgCVTE6W8=
Subject key identifier: 2E:FB:6C:CD:AD:0F:19:C3:6C:65:AE:FC:D0:68:22:A7:2E:2E:99:DA
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial: 01A0C47B63AB6529AA95CFF7DFF7292A7EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
Manifest number: 1A70
Signing time: Mon 21 Sep 2026 15:00:15 +0000
Manifest this update: Mon 21 Sep 2026 15:00:15 +0000
Manifest next update: Tue 22 Sep 2026 15:00:15 +0000
Files and hashes: 1: 7jfTSGm8YLfZ54M19KMjgftyEOU.crl (hash: iGIuyIcs250mlEEXSJtrZyp76NJlTqX/mHhbsLDihgY=)
2: XHVi61WiazNgcFLfPPLSGooyVY0.roa (hash: DsQUXKDSsnP3SOeoq0hMzedmYIiSFC88k9HokDNi5rA=)
3: mYTd35kRkIBF88OmyEhVri7c_EM.roa (hash: 8He+vLv80dG8+N+bwzMwaOxaSPkQw5v1/xR4GgFaHQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:63:ab:65:29:aa:95:cf:f7:df:f7:29:2a:7e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Validity
Not Before: Sep 21 15:00:15 2026 GMT
Not After : Sep 22 15:00:15 2026 GMT
Subject: CN=2efb6ccdad0f19c36c65aefcd06822a72e2e99da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5c:59:ae:d5:f2:cb:f2:24:76:c4:f5:2d:c5:
94:85:a0:64:13:c1:25:72:39:a0:0b:3a:cc:49:63:
c5:c9:13:f5:5f:42:d3:27:c5:09:7a:81:9b:d0:bb:
7e:cb:1c:1d:bc:0d:fb:3b:ae:30:00:bc:24:78:50:
a3:5e:c1:b5:4b:ec:4a:af:85:20:72:6d:26:5e:a3:
43:92:d7:1b:8f:96:96:1b:71:96:24:27:4b:8a:e7:
3d:32:ca:ae:d8:00:93:fb:04:3b:59:15:ac:5e:06:
92:6c:ef:b8:bf:cc:4f:21:fd:7b:cd:ea:dc:8a:79:
7f:f2:27:af:e9:f6:72:ea:06:bf:d1:61:5f:cb:d8:
34:85:40:3f:fa:dd:0d:9f:eb:82:66:94:ac:4c:7d:
67:c6:2e:19:6b:d4:75:f4:18:d5:d3:ae:bc:75:19:
0a:d0:2b:da:0a:2b:1b:64:d9:47:fc:d4:b0:d3:3a:
8c:f1:38:b9:79:4a:09:d2:bd:87:20:03:98:83:3e:
66:f5:f5:a8:6d:3b:e7:e5:e0:99:77:0e:f7:9a:02:
81:50:dc:64:62:02:9f:da:8c:f6:ed:c6:c2:43:3e:
5a:8c:a6:e3:80:ce:e6:c4:65:15:f5:71:7b:1d:d3:
b3:b0:0d:62:0e:4c:7a:50:80:af:13:75:9a:3a:34:
42:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FB:6C:CD:AD:0F:19:C3:6C:65:AE:FC:D0:68:22:A7:2E:2E:99:DA
X509v3 Authority Key Identifier:
keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:69:9c:5c:13:24:74:ec:b8:ed:3c:e2:96:1d:fa:c4:0b:9b:
db:41:17:fe:94:51:e6:13:e1:3b:46:53:3b:53:48:65:13:08:
19:bc:5d:53:a8:59:28:4f:0b:d4:41:56:0a:a6:6a:55:70:12:
c7:02:aa:e4:1a:d3:0c:86:2c:f1:48:52:95:a7:7e:9b:93:af:
ea:21:47:14:90:40:32:1f:68:a4:2f:73:6a:09:17:b7:d5:37:
05:df:8e:af:74:4a:81:8e:9c:9c:d5:43:b1:0e:40:8d:1d:53:
a9:ea:04:4a:2e:74:7a:e5:7c:90:0e:12:9e:71:10:25:6a:6e:
56:c1:e7:01:c6:08:29:d2:92:5e:8e:17:87:fa:dc:9e:4a:44:
09:96:e7:3c:02:b8:9a:5d:86:e4:e1:32:9c:0e:5d:17:f6:f6:
94:4f:45:56:52:38:06:27:6b:32:be:31:fd:ff:7a:30:9a:f4:
51:f0:2a:a3:e9:84:c9:1a:d1:cf:93:c2:b8:3b:eb:fc:a5:a2:
96:99:56:60:84:47:30:07:9d:53:ad:35:d5:9e:d4:76:3e:5c:
5f:6a:90:e1:58:12:02:0c:ca:df:18:97:50:46:46:53:51:cb:
2a:39:e0:4c:db:be:c0:97:3f:32:88:21:b2:81:fa:b5:eb:87:
01:79:04:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:59:08 2026 by rpki-client