Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
File: 7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft (raw, json)
Hash identifier: 5RH8iBn0w2qExoMz5fT3GY6TFS6iC4W23u38sKkbgYc=
Subject key identifier: 5F:34:13:EF:E6:33:94:A5:4A:CD:A4:F3:28:F4:00:43:54:58:9C:31
Authority key identifier: EC:E1:50:63:CB:0B:3E:78:88:8C:B4:D0:F2:2A:04:A1:93:DD:67:06
Certificate issuer: /CN=ece15063cb0b3e78888cb4d0f22a04a193dd6706
Certificate serial: 01A183ACB494EE41DF2A91342A266F0C2293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
Manifest number: 02E0
Signing time: Wed 28 Oct 2026 18:01:36 +0000
Manifest this update: Wed 28 Oct 2026 18:01:36 +0000
Manifest next update: Thu 29 Oct 2026 18:01:36 +0000
Files and hashes: 1: 2gPdkQWW9jUCbizX1SsNX62y_98.roa (hash: VSRNfwKyTAYD9LB8Wv+fsBtowZBw7KWBvIp7E5dQ+Cg=)
2: 7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl (hash: xEzx0hhlCs/BG6IoLewg0AaUBWpT/mNE0XRYqZD8isE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 18:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ac:b4:94:ee:41:df:2a:91:34:2a:26:6f:0c:22:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ece15063cb0b3e78888cb4d0f22a04a193dd6706
Validity
Not Before: Oct 28 18:01:36 2026 GMT
Not After : Oct 29 18:01:36 2026 GMT
Subject: CN=5f3413efe63394a54acda4f328f4004354589c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:b6:f5:55:0c:07:b0:d3:08:6a:8b:a0:46:
3d:39:7b:29:4d:51:6f:74:17:9a:5d:d2:17:68:cc:
92:7b:90:52:99:5b:42:7a:5e:dd:6d:0e:d8:7e:71:
35:15:5a:be:cd:15:6d:68:a8:17:e3:62:e0:03:b2:
93:99:f9:03:dd:6e:07:38:e0:4b:0d:8e:b6:58:23:
19:e9:bb:11:30:aa:f9:b1:4a:5a:27:83:28:20:37:
da:71:8c:2a:50:a9:3a:b6:76:c4:d0:5a:2f:d0:2d:
fc:70:70:2d:c7:bd:f6:86:89:fa:cd:7e:c5:34:b5:
95:4b:12:56:b5:1a:de:ce:bf:b0:12:53:1d:69:b8:
16:bd:06:54:ec:a1:12:93:a8:f0:a0:d9:63:df:9d:
ac:54:cb:fc:3a:eb:3d:20:9f:d8:69:41:30:68:41:
00:f2:95:de:db:32:b3:cd:d7:50:94:58:99:80:bf:
be:3e:15:2d:4f:80:36:83:bf:cc:56:51:94:0e:70:
74:ae:19:cf:d0:5e:5d:33:aa:d0:de:c1:61:78:1c:
0f:5b:7e:da:03:2c:6e:0f:62:08:e8:e5:65:e0:35:
15:70:90:98:1f:44:8a:3a:0d:de:0a:72:2a:89:8c:
44:c5:13:4e:7e:fa:da:41:a0:22:61:8c:54:5f:c6:
29:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:34:13:EF:E6:33:94:A5:4A:CD:A4:F3:28:F4:00:43:54:58:9C:31
X509v3 Authority Key Identifier:
keyid:EC:E1:50:63:CB:0B:3E:78:88:8C:B4:D0:F2:2A:04:A1:93:DD:67:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:41:0c:bf:43:2d:f3:36:76:99:8f:e2:e9:5b:c9:54:ae:95:
28:bc:a1:6b:ee:21:1e:46:3e:27:fa:fd:42:db:6b:28:59:5c:
c6:3f:96:fc:03:c4:1e:17:8d:e0:2c:5e:61:d9:e5:9f:c2:70:
aa:6c:1f:9f:6d:37:8a:7c:a8:c7:03:a7:56:f8:0e:ab:82:6c:
d2:93:a4:69:f8:57:c5:15:b7:f1:c2:4a:60:d8:73:76:47:79:
4f:78:25:99:7c:bc:c7:e1:49:4b:76:79:89:84:86:4a:40:36:
2e:e2:04:b3:7d:38:0d:c4:01:82:6f:9d:f3:33:6a:0d:1d:b0:
c9:b3:a4:4b:53:6c:80:96:54:3c:30:86:10:3a:d5:bf:7a:88:
d8:fd:ee:85:d4:8f:8a:42:6c:62:f9:e8:27:86:8b:d6:03:ee:
bf:1e:08:23:35:e2:5e:64:a8:21:51:f6:f5:7d:74:ce:64:63:
a8:fa:05:a5:ee:55:e8:4c:b9:5c:6c:fb:42:9d:ac:29:90:8b:
e2:7d:10:3f:3e:31:1f:eb:33:7d:3f:d2:b0:9c:23:f9:dd:5f:
7a:c3:e6:16:ec:47:68:dd:2b:99:00:84:d8:7b:be:98:48:1a:
48:d4:d9:89:7f:73:af:76:98:cc:4d:fe:22:d9:16:80:03:26:
d8:e0:a8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:40:17 2026 by rpki-client