Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
File: 7VKTzUpieoRq7WDKf7XVqQGarlE.mft (raw, json)
Hash identifier: A3KOGBDMCCOQ4zfUGFk6T86Xqo5FoQU/UUHLo3b44rA=
Subject key identifier: 2D:C8:24:30:68:C8:2F:F9:59:E4:26:6C:E9:9A:EA:22:09:34:72:4D
Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
Certificate issuer: /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Certificate serial: 01A0E7AF392A8FED396F8A18CA683BBF748C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
Manifest number: 1A7A
Signing time: Mon 28 Sep 2026 11:03:35 +0000
Manifest this update: Mon 28 Sep 2026 11:03:35 +0000
Manifest next update: Tue 29 Sep 2026 11:03:35 +0000
Files and hashes: 1: 5M_dzDXzTB3Y0brCjbUvwSZRed8.roa (hash: IY7K+wfx2bW1m/Ix+hlJ62XrT+AVkyx4H7HyP9JrVMM=)
2: 7VKTzUpieoRq7WDKf7XVqQGarlE.crl (hash: SwEc1TsHU8wdHaggMLwfM34WMZ1+f6O+5I+/nPWUT40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:af:39:2a:8f:ed:39:6f:8a:18:ca:68:3b:bf:74:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Validity
Not Before: Sep 28 11:03:35 2026 GMT
Not After : Sep 29 11:03:35 2026 GMT
Subject: CN=2dc8243068c82ff959e4266ce99aea220934724d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:d7:25:25:e9:ee:99:b3:72:77:f7:2d:de:
33:83:45:38:19:8c:3a:38:c2:4c:30:9d:d7:64:a3:
11:f9:18:2a:bf:d2:f7:34:5e:a2:31:74:01:41:6d:
d9:fa:3c:49:b6:1f:2a:7b:ee:5b:ad:cf:15:4e:78:
49:08:39:36:0c:40:7e:62:f4:8b:38:70:a8:c7:8e:
80:b0:c7:28:25:ae:50:8a:c3:79:64:05:8c:db:86:
39:e5:68:22:ac:6f:1c:ef:75:6a:64:ce:54:16:26:
5d:4b:c0:9d:f6:3b:e4:16:b0:f4:98:13:99:74:d6:
09:df:89:41:33:2e:99:89:30:8e:e7:e4:18:02:d4:
22:72:20:18:1f:d1:c5:06:34:a0:5c:bd:5f:5a:c2:
9a:d2:56:82:16:55:f8:07:1e:72:37:ff:0e:fc:23:
89:7d:4b:0f:1b:0d:6a:c2:96:55:1e:84:bf:ba:05:
45:ec:d3:f0:2c:4d:13:e2:07:87:a2:c2:ab:e7:4f:
ff:93:04:50:b5:3c:1a:85:89:c9:7d:5b:ea:fb:e4:
91:0a:b6:89:59:a1:d5:39:21:57:74:15:58:e7:2c:
22:82:c0:f4:e9:d6:67:fa:42:ee:f8:0c:84:3a:fb:
6f:4a:64:3b:63:cf:56:ea:45:1f:4a:2c:55:dc:fa:
30:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C8:24:30:68:C8:2F:F9:59:E4:26:6C:E9:9A:EA:22:09:34:72:4D
X509v3 Authority Key Identifier:
keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:df:98:e5:1b:0a:02:95:c8:2e:a6:a4:94:14:0d:d5:bd:d1:
4f:11:48:f4:4e:3b:22:ee:64:4a:56:a1:6f:75:97:ce:e4:25:
39:11:58:de:51:44:6f:27:d4:da:c1:66:e1:ac:49:b1:06:33:
37:c5:53:a2:0b:c7:21:b2:75:5a:86:60:2f:cb:bf:52:a0:37:
25:2e:61:f8:63:44:cd:d3:57:0b:20:ad:d8:e0:c4:7d:e0:46:
bf:a5:3d:aa:27:65:ca:8b:77:18:de:9a:47:ce:1b:e3:58:01:
e6:2c:ea:9e:6c:31:32:65:c2:b9:17:0e:6e:88:2c:c5:cb:75:
05:d5:88:fe:9e:5d:af:a8:c3:f2:b7:0d:c6:f9:3e:d5:14:b5:
11:0b:da:f5:1d:f7:a9:e4:d2:34:03:c9:0e:ec:d0:f7:24:3b:
97:96:14:48:83:c0:a4:84:35:19:97:af:ec:24:b9:7c:5a:da:
29:2d:d4:58:c4:eb:23:c2:c4:ba:29:c6:e7:f5:73:db:7e:d0:
d2:20:52:55:53:75:72:c3:0b:e5:6b:61:bf:8c:78:1b:87:47:
7c:7d:64:a3:8c:d1:48:be:80:f2:10:88:5f:f2:61:a2:80:20:
02:d1:95:7b:71:be:e8:21:c7:d2:1f:3f:26:e1:d6:1c:1a:34:
ea:8c:f2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:16:15 2026 by rpki-client