Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
File: 7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft (raw, json)
Hash identifier: EX7y/ELIxdIIJVTRvosQF73JBzcxG1tj1rkGi+qrLFM=
Subject key identifier: D7:DC:82:C5:EC:41:B3:18:14:80:93:D2:0B:52:BC:F6:10:45:89:72
Authority key identifier: EC:06:B5:60:61:45:7F:F5:C0:83:8A:F1:D2:53:5E:E0:D1:F2:B4:3C
Certificate issuer: /CN=ec06b56061457ff5c0838af1d2535ee0d1f2b43c
Certificate serial: 01A0C47C0103A67245E702BF0D02D49A0F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
Manifest number: 01F7
Signing time: Mon 21 Sep 2026 15:00:56 +0000
Manifest this update: Mon 21 Sep 2026 15:00:56 +0000
Manifest next update: Tue 22 Sep 2026 15:00:56 +0000
Files and hashes: 1: 7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl (hash: XwxHf3gVD6opRMPnmk1maMq8FQGEuGmqhIOz4GHMsPE=)
2: rBifEteMiJ25R5DQDU12NebJRS4.roa (hash: zud/trrJppI6pE83KUPt6r47Ql1iRfoDUPjneuGZTLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:01:03:a6:72:45:e7:02:bf:0d:02:d4:9a:0f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec06b56061457ff5c0838af1d2535ee0d1f2b43c
Validity
Not Before: Sep 21 15:00:56 2026 GMT
Not After : Sep 22 15:00:56 2026 GMT
Subject: CN=d7dc82c5ec41b318148093d20b52bcf610458972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:4b:3d:98:e3:59:89:1b:23:d1:82:5a:ea:
a7:96:f4:38:54:93:6a:fc:70:00:67:3f:2b:0e:01:
0f:04:00:b0:26:e1:61:72:2d:35:c6:50:ba:67:20:
3a:17:77:bd:6f:c5:a9:5e:f0:66:46:a9:d7:b7:bc:
1c:ad:81:82:98:87:b2:d0:5b:78:5c:f8:12:bf:77:
3c:b9:ed:2b:5d:e1:96:af:b9:c5:ac:59:93:cb:e5:
2a:6a:d2:63:12:8f:30:93:6a:a3:cc:91:5e:70:47:
21:8f:b1:66:4a:3a:9b:25:be:fd:f4:a7:5d:28:6d:
74:e7:6e:4a:96:8b:a5:de:83:cb:4e:f8:59:83:dc:
24:b5:39:a0:6b:fd:6c:9b:68:e1:04:13:22:a9:2e:
aa:85:ba:65:70:0a:7f:45:69:93:24:bb:c7:6a:4f:
85:21:00:91:b8:d7:81:ae:41:bb:cf:8c:0d:78:73:
d8:a8:04:64:bf:a2:5f:09:d3:11:ba:0c:9c:66:8f:
80:1c:29:10:b2:ee:2a:4c:79:ab:aa:64:02:cc:a6:
1f:a8:4f:bb:9b:18:16:bf:0b:10:92:1a:b3:06:3d:
f7:d0:b9:45:df:3b:13:b1:25:82:54:44:0e:6c:73:
18:ad:a6:4a:f3:5e:12:2c:7e:37:e3:ce:82:32:e3:
24:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DC:82:C5:EC:41:B3:18:14:80:93:D2:0B:52:BC:F6:10:45:89:72
X509v3 Authority Key Identifier:
keyid:EC:06:B5:60:61:45:7F:F5:C0:83:8A:F1:D2:53:5E:E0:D1:F2:B4:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:62:b3:fd:d0:b5:99:2c:0d:c3:ac:fa:5c:5e:67:df:a5:92:
12:6c:ba:ef:6a:86:aa:b2:0c:a5:b5:d6:87:55:62:ff:2e:85:
c4:c5:08:aa:17:11:ff:ca:b2:ec:2a:60:cb:75:c0:1d:48:b0:
89:16:ac:b6:8c:3f:e8:fe:ea:c6:64:90:a5:f5:1c:67:7d:22:
04:ee:7a:62:05:5c:5f:d4:a7:bd:fa:d0:fe:77:b0:db:4f:52:
bf:c7:41:ea:a4:26:2c:cf:63:76:7b:00:f4:5d:b6:86:17:6e:
da:9a:48:11:3c:10:6d:20:0d:2e:47:65:7f:91:ef:3a:8a:64:
8b:f6:ee:14:75:f3:d4:7d:63:cd:7a:83:65:9d:30:30:7a:dc:
be:3d:69:38:4c:97:0b:29:05:24:7c:60:db:cc:2f:18:f4:f6:
79:8a:18:fe:ac:e0:1d:13:10:99:b0:7b:8a:e5:26:86:be:eb:
b7:4b:c0:62:22:41:66:0b:9f:ab:44:63:cb:d3:c0:5d:c1:4c:
7d:b8:0a:a4:f8:f5:78:c5:9b:39:30:f1:43:02:e4:fd:82:45:
02:4c:ac:26:21:eb:b0:9d:9f:40:10:ab:ef:7b:b6:51:59:4f:
76:f1:59:b8:23:de:81:53:ff:94:98:88:28:b3:bd:26:6d:8e:
4a:97:e0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:17:30 2026 by rpki-client