Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
File: 7q2qYzkQO9tVZtgycdPEfABcJQ0.mft (raw, json)
Hash identifier: p7EGeTiYST/zDA9tvn6gMrpGyzdgWJtFHvCRx8IbFXM=
Subject key identifier: 32:A2:E9:2B:CB:1F:B1:F2:40:94:4A:E4:71:D9:6A:30:F1:87:2D:17
Authority key identifier: EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
Certificate issuer: /CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Certificate serial: 01A0DDCE5FF4758DD7CBE3457814FF41AFFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
Manifest number: 0ED8
Signing time: Sat 26 Sep 2026 13:01:24 +0000
Manifest this update: Sat 26 Sep 2026 13:01:24 +0000
Manifest next update: Sun 27 Sep 2026 13:01:24 +0000
Files and hashes: 1: 7q2qYzkQO9tVZtgycdPEfABcJQ0.crl (hash: ynH0JGcbocuHFJ2p502xTfA92oUMokTz7RUiLemSQGE=)
2: Mt1633RiBIpuKnZW3jSMaHpSdRI.roa (hash: 6BNDp2CLnyhsZWA//die5Cd+w8BRp6sCkxu8tySEnX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:ce:5f:f4:75:8d:d7:cb:e3:45:78:14:ff:41:af:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Validity
Not Before: Sep 26 13:01:24 2026 GMT
Not After : Sep 27 13:01:24 2026 GMT
Subject: CN=32a2e92bcb1fb1f240944ae471d96a30f1872d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:07:30:3f:f2:3c:80:17:5b:0e:19:37:f8:
78:5d:d3:6b:58:d3:ec:bc:88:9e:df:94:dd:b0:78:
d3:97:d0:ad:72:91:1d:aa:f3:7a:39:4f:ef:43:a3:
cf:ab:e2:e9:44:2d:e1:fd:d8:59:41:0f:a9:ce:7f:
31:19:b5:3a:08:df:53:e0:95:d7:e1:d7:be:b4:07:
4d:95:24:e6:20:4a:5c:11:bc:77:4f:9f:18:df:08:
52:f3:3e:0d:22:38:10:64:ee:1b:46:c6:e3:18:46:
99:8b:86:91:6f:6f:5e:11:8c:1d:d1:bd:f5:d6:95:
71:f8:11:61:29:0e:57:5d:93:f9:aa:a9:8c:41:7a:
00:6e:66:96:b1:0c:8c:6d:58:10:73:c4:c3:11:ae:
df:90:4e:4a:e0:a0:6f:64:05:d6:78:ec:c3:4a:28:
17:7a:ab:3d:8a:f3:30:47:5a:cb:ac:4a:31:77:e6:
90:19:13:b2:3b:de:31:f0:4e:21:c3:8a:95:fd:61:
7a:61:76:fa:cb:b3:29:25:75:3f:c7:34:7b:ab:a3:
0b:3a:a9:98:c2:64:89:32:d6:b1:10:1b:04:fb:a3:
e7:ec:50:3c:66:80:df:5c:43:f2:98:4a:79:d3:b5:
7b:3e:8f:94:9f:cd:3f:43:db:e0:04:ef:75:9b:85:
64:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A2:E9:2B:CB:1F:B1:F2:40:94:4A:E4:71:D9:6A:30:F1:87:2D:17
X509v3 Authority Key Identifier:
keyid:EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e6:14:e0:e3:d6:01:85:18:12:d1:ef:d9:37:0d:f4:4c:d8:
36:ac:85:90:12:91:44:cd:47:b5:1d:02:b9:bd:ac:3a:8c:39:
e2:57:e2:dc:c2:10:01:09:58:e4:11:c2:61:bc:5c:1d:2f:b0:
21:b8:d4:53:6b:f9:5d:3d:c8:4f:06:ff:5a:c3:45:b9:86:ce:
22:57:63:8a:ce:b6:1a:2e:a9:a3:09:49:f5:fa:eb:79:ba:d7:
05:68:16:44:73:2b:54:9d:84:4c:4b:5b:35:f7:13:f8:f9:66:
96:25:6d:3e:bc:87:a4:92:df:b7:be:d8:ba:68:3f:05:0a:f9:
eb:29:24:59:8e:56:03:f7:a3:6b:d0:e6:49:bc:e5:b0:d0:05:
1c:35:27:c3:b0:a1:34:06:38:4f:73:51:0e:ae:6e:a4:2b:eb:
79:3d:67:91:4b:e2:e5:3c:96:38:0f:f6:d8:c4:6f:b0:07:f1:
c6:4f:97:d5:53:6e:34:8f:28:87:b6:61:5e:2f:04:3e:34:50:
3e:fd:87:a6:bc:c7:4e:d1:d9:ef:db:a6:fc:b3:e3:ef:2e:5a:
59:a0:c8:fb:99:2c:2d:d0:3b:13:1f:32:32:66:40:f7:4a:44:
f3:ac:7a:4d:96:9e:04:31:87:d5:0e:ea:51:8f:d3:b7:e3:e3:
5b:b1:2d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:53:20 2026 by rpki-client