Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json)
Hash identifier: qTMb43jXqZBfxV7rqJUROd8Is/mFcjurC9PHMd3svmU=
Subject key identifier: 2D:6A:1D:6E:11:A2:8D:06:81:FC:88:8D:0D:1F:23:94:A2:83:4B:9D
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 01A1DD94F2F98E161E24E3713E4F33580C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
Manifest number: 1B17
Signing time: Sun 15 Nov 2026 05:01:28 +0000
Manifest this update: Sun 15 Nov 2026 05:01:28 +0000
Manifest next update: Mon 16 Nov 2026 05:01:28 +0000
Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: WGj6i65HlL7iGu6SuZK04AgQ39nr6h3qSGNhU16JNuc=)
2: Gp76Gv-eHWRgRvhEjHqJ6icn00Q.roa (hash: BmL3M6inhKtEkTbjCk7s9if8HrybG3oAFNlmaOoxF0c=)
3: JnNygfiur-rHLJuAn1hkxLz25cQ.roa (hash: CEYmgo0zOa133sbdNYSecv5niw3ZeeRwnisUaeasxBY=)
4: UV-Za1MLDNSaG4DuH_q131i6c6o.roa (hash: /nY7i2nihg09pwfCz4ZETusOQgWbnKeEZAo2lp/8PQQ=)
5: XwwEduTGUdEUmzQ6Vn1Qh0lULKE.roa (hash: yP/C4oSHOkCL3b3u7lTD0ceM0Z9V/7tsggm9f4RRupE=)
6: bc8LaOm-Ug6E5hSvds9yGbuwrFA.roa (hash: RaZzZcOTQlGar1i6XUpTh++hxvp7YrNT3WX2Bc1Xmtk=)
7: gDu74A_Z1ksatoKHQD455fxsAx0.roa (hash: 5WTnm+h2P7sppTWJRlxxAJMWxqtBVlvtcy2GltVnQig=)
8: zOmGYauNnRfV_5QaNrYyOSSrwQ0.roa (hash: QJz+FfKfespU5hmZuz01TmSY2wjv9AwO7tZKjrvrO1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:f2:f9:8e:16:1e:24:e3:71:3e:4f:33:58:0c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Nov 15 05:01:28 2026 GMT
Not After : Nov 16 05:01:28 2026 GMT
Subject: CN=2d6a1d6e11a28d0681fc888d0d1f2394a2834b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0b:b0:77:cf:ec:98:b4:66:8a:0d:40:2f:5f:
f5:01:64:25:f9:87:84:33:a4:d0:56:4f:be:ad:8f:
ff:57:c9:34:d6:8a:d5:7b:b1:93:9c:6e:f9:23:3b:
c1:8a:f4:1c:d5:fb:66:cd:32:af:5a:f1:06:6d:c7:
9a:b9:87:dd:fc:69:04:c1:da:58:6f:fa:8e:d2:47:
e7:08:a3:aa:b3:8c:18:5c:ad:72:bc:48:37:a4:cb:
e6:9d:ec:58:5c:5c:f5:48:b3:2b:f3:93:2d:f4:42:
9b:92:57:2f:8b:d7:f9:2d:90:2d:3f:a6:68:3d:e9:
2b:6f:86:4a:98:69:1b:a9:7a:76:3f:a4:70:f4:1b:
0d:15:75:14:2c:cd:02:44:73:df:e9:d4:f5:0a:a9:
72:97:31:ae:77:f5:e7:09:f2:ab:8e:e7:bc:24:7f:
15:62:54:9d:b4:0f:e2:2d:a3:0d:b2:78:19:a1:88:
81:c6:ab:9d:c0:0c:db:b4:f4:5a:f3:24:80:fb:4e:
a8:2d:27:43:6b:08:07:8f:90:d7:6c:e3:32:75:66:
81:e3:2c:64:ba:9a:a0:ad:8b:99:2a:c5:c9:ce:bc:
91:f2:94:68:8a:47:97:56:26:bd:c0:8a:90:ec:e6:
ec:cd:68:9d:5a:1f:c7:b6:f8:38:48:92:a7:4b:dd:
fa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6A:1D:6E:11:A2:8D:06:81:FC:88:8D:0D:1F:23:94:A2:83:4B:9D
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5e:18:df:e2:1c:5b:04:01:8c:74:eb:2e:68:7b:65:2d:c1:
b8:a5:20:d2:90:7a:e1:8f:58:ed:07:ed:c4:3d:ed:f1:88:c3:
31:b2:b3:e9:43:2b:69:8e:93:08:33:a0:54:aa:25:9e:6a:fe:
d6:2f:d6:39:9c:f5:d5:6c:83:fb:46:7a:0f:f1:17:7c:f1:0c:
e0:f3:1e:57:22:4a:a9:1b:a4:bf:61:2c:94:25:a4:46:90:82:
25:8f:42:9a:cd:64:eb:67:21:12:26:90:67:bb:db:96:d1:ce:
39:aa:db:37:fe:4d:55:fc:d1:e0:e7:1b:55:ef:67:cd:3d:d2:
56:5a:3d:c7:fb:8e:65:e1:29:e8:90:7a:91:fd:9e:ad:56:c1:
58:b4:cc:01:68:8d:24:bc:8b:c6:e0:3c:3f:94:a2:60:fd:0a:
a1:96:51:2c:e5:e7:44:6f:23:0e:dc:c6:94:c8:a6:33:f1:a0:
b2:2d:58:e5:41:af:06:94:d4:da:b4:14:4b:0b:01:03:c9:e1:
ce:c0:c6:21:0f:24:93:69:36:57:b3:c4:4d:ea:dc:44:4f:d7:
6f:53:81:e5:5c:ad:6e:6d:e2:61:1c:49:bf:ce:2f:fe:df:34:
c8:33:80:f9:d8:e9:93:99:3f:a4:74:7b:55:ab:eb:c5:65:25:
33:a1:45:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:56:37 2026 by rpki-client