Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier: //mTGvBEs6tEt0yg+X7nSTkY8NZlVZCEpL39bIRsMP4=
Subject key identifier: EE:0B:6C:F5:AB:4C:C4:D5:C7:C4:33:CB:40:13:50:37:3D:14:80:7A
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 01A13E5D40D00AC07E824C07D13FD3685123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 07:01:00 +0000
Manifest this update: Thu 15 Oct 2026 07:01:00 +0000
Manifest next update: Fri 16 Oct 2026 07:01:00 +0000
Files and hashes: 1: 6CjF8Jlu6tuK8zsCRGmRKkMW1aY.roa (hash: cbJEUas+h/1ENIgGWWNamGqYchFhfCj4L7NJTrlZrxc=)
2: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: 8AFeaYtPVjc87vtc7AMuVCmQlQpaMu6MzuzrCWzQGXk=)
3: sW8W0-8WOsG0evmu2fYzqrWdI9U.roa (hash: aDuewNAM6XmzF96K8nKeS1R/6Pbon3faWwSXg53klfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5d:40:d0:0a:c0:7e:82:4c:07:d1:3f:d3:68:51:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Oct 15 07:01:00 2026 GMT
Not After : Oct 16 07:01:00 2026 GMT
Subject: CN=ee0b6cf5ab4cc4d5c7c433cb401350373d14807a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:fe:10:5d:b0:19:a8:e9:e3:fe:75:2b:df:
64:0e:f1:77:87:39:a2:15:d4:bc:d7:5c:a1:29:85:
df:6a:f2:58:9c:fd:65:03:1a:10:da:cd:31:84:fa:
6d:06:f9:45:ab:b4:56:85:c8:58:3d:19:fc:64:32:
3f:2d:f6:71:38:75:31:7e:df:1b:98:20:66:4b:69:
6e:91:77:aa:ad:3e:9b:80:35:41:b0:31:30:2b:92:
d6:ed:c2:d7:4c:62:8c:89:db:dc:fb:d7:96:2d:fb:
70:e1:3a:19:f1:0a:58:b8:eb:f3:38:c6:53:e7:a9:
c1:ce:4a:41:c1:9c:97:05:4b:8e:23:e5:dc:80:07:
2f:96:44:8d:27:83:13:67:07:e7:d8:d4:6b:14:e8:
70:6d:01:cd:7d:30:52:e5:80:97:c2:0d:fc:c0:46:
ad:74:2d:59:0b:25:56:96:26:cb:a3:94:ec:56:6b:
7f:af:0c:54:48:1e:84:43:c2:99:58:fa:4b:b4:81:
7c:a5:3d:f5:95:8d:ef:8a:51:c0:bc:7b:20:d2:98:
ed:f1:c3:f0:fe:e5:3f:37:1c:9f:9a:b9:0a:42:6d:
16:93:29:3e:e3:71:bf:52:cf:b2:8e:ae:94:f4:73:
1c:95:8d:44:1e:15:b8:b3:66:0a:63:0b:13:b8:d9:
69:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0B:6C:F5:AB:4C:C4:D5:C7:C4:33:CB:40:13:50:37:3D:14:80:7A
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:89:b6:e3:0d:ef:ad:ea:7e:fc:61:82:45:b9:9c:2f:ac:03:
28:79:a0:b0:a9:16:3c:9a:f9:dc:b0:f4:e4:b0:ce:a7:36:ac:
d6:04:93:c1:08:5e:59:69:df:b8:86:4d:35:cd:e3:8a:fe:18:
d2:7e:8e:f3:9d:8c:d1:62:e1:8d:a0:b3:c2:38:94:90:46:a5:
45:a4:a2:06:9d:9e:74:f3:2a:70:5d:b3:93:e4:a1:c5:2b:c2:
0a:75:5c:65:63:66:80:08:95:40:d1:6d:18:ea:58:3b:eb:c4:
e9:b2:e2:88:00:29:b1:f6:3b:cb:8b:69:81:c9:01:2d:98:28:
83:3a:b1:3e:3a:b0:c0:af:62:3c:a5:14:6b:08:d4:8c:b5:5f:
bb:43:b7:47:72:ff:ac:da:c6:a3:c6:d2:7e:77:b0:47:bb:d5:
9e:c6:e5:f4:72:90:4c:b9:24:e8:2d:f5:56:58:af:c7:61:a8:
a8:fb:f6:77:ce:22:89:db:a7:49:0e:42:40:21:fe:e5:17:d7:
ed:7a:f2:d7:35:bc:0d:2a:b8:95:3b:69:00:f0:0f:74:6d:0f:
00:83:2f:39:08:b7:94:fd:5f:7e:32:65:18:4d:d7:28:e0:5d:
c0:ea:92:f7:f9:72:63:be:52:4e:35:21:8d:63:9a:ba:0b:9e:
27:d1:19:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:11:51 2026 by rpki-client