Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/7H491OPmGG_IV_QQAUEJGF_T4LM.mft
File: 7H491OPmGG_IV_QQAUEJGF_T4LM.mft (raw, json)
Hash identifier: poThV3IYpYwnQ708D1+ht+1tB1J2SxJHRxKV5CSIqr8=
Subject key identifier: 06:AE:09:F4:4D:35:4D:86:61:A2:17:23:CE:19:71:C8:54:08:6D:23
Authority key identifier: EC:7E:3D:D4:E3:E6:18:6F:C8:57:F4:10:01:41:09:18:5F:D3:E0:B3
Certificate issuer: /CN=ec7e3dd4e3e6186fc857f410014109185fd3e0b3
Certificate serial: 01A0BFC34C8BBB74C3FB93D47CB93ED0BA0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7H491OPmGG_IV_QQAUEJGF_T4LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/7H491OPmGG_IV_QQAUEJGF_T4LM.mft
Manifest number: 0D
Signing time: Sun 20 Sep 2026 17:00:42 +0000
Manifest this update: Sun 20 Sep 2026 17:00:42 +0000
Manifest next update: Mon 21 Sep 2026 17:00:42 +0000
Files and hashes: 1: 7H491OPmGG_IV_QQAUEJGF_T4LM.crl (hash: Ac9XoECYJ5enIpas00IBerrY/LReRe6PuVoj79bbwdc=)
2: GPgE8Js570-QLkZUKoJ1126aifk.roa (hash: 8t2EybYwOYg8iaMpOVbMKmfuxyVmfmhAErNMOv+rkx0=)
3: dZUEtJOg8buS0KSq3TP_LatHVeo.roa (hash: HKrpoxg/elM/P+fh5BgNzbrOsO/5w+yqFe6WOxefcu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/7H491OPmGG_IV_QQAUEJGF_T4LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/7H491OPmGG_IV_QQAUEJGF_T4LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7H491OPmGG_IV_QQAUEJGF_T4LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:c3:4c:8b:bb:74:c3:fb:93:d4:7c:b9:3e:d0:ba:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7e3dd4e3e6186fc857f410014109185fd3e0b3
Validity
Not Before: Sep 20 17:00:42 2026 GMT
Not After : Sep 21 17:00:42 2026 GMT
Subject: CN=06ae09f44d354d8661a21723ce1971c854086d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:40:43:39:66:44:6e:15:66:37:14:d7:e1:df:
41:d3:98:1e:91:27:31:57:b8:2b:11:9d:fe:6f:46:
11:e3:06:c9:3e:f1:78:04:48:83:d5:f9:42:ab:45:
c7:db:2c:45:c0:8f:e8:94:84:39:ad:68:e2:f5:e3:
3e:cd:f7:7c:a2:07:a0:89:af:4b:2c:60:8b:04:8b:
f0:30:d7:f0:c1:a8:b0:a5:be:bc:07:a2:6f:39:27:
3a:bb:75:bf:27:67:12:e7:34:40:aa:b2:08:23:8f:
50:28:c5:6d:73:1f:82:29:e4:81:c6:45:e5:3d:4f:
53:7d:6b:89:f6:c2:e9:5f:b8:a5:96:58:e8:7c:32:
d5:e4:1d:2b:9d:3e:f1:f9:0c:28:fc:97:b5:b2:30:
53:13:a6:0e:9d:12:c8:8a:e5:a1:4c:b8:d4:a2:c8:
a4:8a:c2:a5:35:11:74:f3:f8:b4:16:07:56:8f:ae:
32:31:ca:0c:c2:48:f7:b3:3e:34:5e:92:86:14:e0:
82:1e:4b:67:8f:4f:6f:ac:75:f2:dc:ce:4a:96:5a:
91:ad:a4:3f:e0:e3:1b:30:68:57:fa:15:ca:f3:4b:
17:d5:b1:e9:53:9a:d9:64:69:eb:34:d9:6a:75:f3:
19:b8:1b:14:e5:22:f5:56:18:96:fa:fe:82:d4:10:
18:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AE:09:F4:4D:35:4D:86:61:A2:17:23:CE:19:71:C8:54:08:6D:23
X509v3 Authority Key Identifier:
keyid:EC:7E:3D:D4:E3:E6:18:6F:C8:57:F4:10:01:41:09:18:5F:D3:E0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H491OPmGG_IV_QQAUEJGF_T4LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/7H491OPmGG_IV_QQAUEJGF_T4LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/7H491OPmGG_IV_QQAUEJGF_T4LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:2d:62:c2:28:56:23:1e:86:b8:6e:07:69:55:fd:22:b0:b4:
83:df:4d:04:61:57:03:02:86:53:e0:ce:a9:4d:4d:c5:76:c2:
cc:9f:6d:b0:7f:2b:f9:4e:58:8c:c9:63:e9:13:37:2f:68:bc:
34:b0:22:06:6b:a3:64:82:33:bb:49:ad:4f:f4:4e:b6:d1:4b:
a4:1f:55:d5:de:dd:46:c1:cd:45:87:51:bc:f7:d5:79:1c:e5:
46:ea:9a:e7:6b:1a:a6:68:d5:75:f7:0e:d9:9c:08:b4:21:65:
dc:b9:a9:81:01:04:d4:99:41:45:93:7d:0e:9d:cb:b7:bd:8b:
56:1e:f0:d7:9e:fd:63:60:b6:7e:0a:39:dc:56:36:7d:29:26:
84:64:e7:68:4d:91:07:96:d6:2b:79:56:d6:ba:40:39:a0:ef:
00:6c:3e:2e:c2:ee:85:a3:25:3e:50:90:6c:2e:65:ff:54:3e:
cc:82:01:31:40:ab:1f:93:99:fc:f2:a8:eb:87:f7:59:17:ef:
2d:fa:96:31:24:a3:61:28:78:0f:a7:28:db:b7:ab:b3:38:93:
e2:26:67:a2:d6:81:55:cc:dc:03:82:25:2d:6b:4e:61:d5:0d:
8d:90:04:21:b1:e9:49:2a:d6:28:57:21:88:03:95:05:0c:23:
af:18:9d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:28:36 2026 by rpki-client