Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
File: 7gc50FKNy0_OV40R9-w0sON0Us8.mft (raw, json)
Hash identifier: Vp95WaoqTKA0suBlUm1cap9dqAcX4JZ+Ry+ZqFDJNMg=
Subject key identifier: 2C:DF:1E:8C:A6:39:E6:81:21:A6:06:81:2E:B0:E4:E8:11:3F:97:01
Authority key identifier: EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF
Certificate issuer: /CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
Certificate serial: 01A0CDECA336FFA22220F7F43E049CB7EA05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
Manifest number: 16B9
Signing time: Wed 23 Sep 2026 11:00:32 +0000
Manifest this update: Wed 23 Sep 2026 11:00:32 +0000
Manifest next update: Thu 24 Sep 2026 11:00:32 +0000
Files and hashes: 1: 7gc50FKNy0_OV40R9-w0sON0Us8.crl (hash: 1p9b5CB/3Brgyx8x7HxZN4EnpnC1M0LbmCWPWnmAvKY=)
2: JcR3YDi06JT6Wl_eQYsoL_-4XeY.roa (hash: jOukTvc7ghec56xAJX59+DDpg3Q2klioM1BU5lwJY5Q=)
3: wA3w6Wl-5AoUYVmTL5AH8zdBgLE.asa (hash: cMv8UyvJ/9cbdmfT3JrbBdCqh6MiQOblx5kFmz47ifs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:a3:36:ff:a2:22:20:f7:f4:3e:04:9c:b7:ea:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
Validity
Not Before: Sep 23 11:00:32 2026 GMT
Not After : Sep 24 11:00:32 2026 GMT
Subject: CN=2cdf1e8ca639e68121a606812eb0e4e8113f9701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:26:79:03:8a:de:8b:36:8e:e7:b0:2a:65:
ee:a8:2b:96:8d:78:91:37:43:17:01:ff:cf:ea:6a:
31:c7:d5:14:c0:a6:46:d8:f7:c6:01:19:ff:1d:f3:
11:f5:74:1a:e9:fb:9b:dc:89:cd:c5:39:b3:4a:85:
ee:a1:e7:f5:3c:fd:65:a2:41:4e:a3:36:70:30:81:
bb:d9:c6:b2:d5:85:5e:c2:d2:f8:b5:b9:e6:b3:f2:
c3:b8:e8:c3:aa:3f:a6:bf:0c:fa:73:e4:f8:34:26:
24:db:29:e0:6e:1e:c5:d2:35:ce:f1:00:23:7c:6f:
43:b3:62:2d:5d:74:20:9a:02:b3:58:eb:12:29:21:
d9:2a:ed:25:97:1c:a0:4b:8b:53:2e:7a:20:3e:c1:
b6:5e:04:0c:e4:5b:8d:38:0a:e0:d5:39:3e:4c:73:
cf:c2:cc:2f:db:33:51:fc:db:d9:fa:56:3e:e5:6f:
5e:ab:0b:9d:79:7f:92:12:be:f1:bc:ce:a3:bd:78:
e0:25:15:c8:cb:7d:e0:d8:a8:8c:4b:4a:f1:bc:bb:
37:34:21:de:d0:33:72:6a:fd:ae:cb:db:10:a1:02:
29:e4:cf:2e:ca:23:5f:7c:58:57:09:25:81:e3:63:
09:7e:a4:44:5e:27:1f:c4:22:b0:c2:45:8e:75:28:
6e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DF:1E:8C:A6:39:E6:81:21:A6:06:81:2E:B0:E4:E8:11:3F:97:01
X509v3 Authority Key Identifier:
keyid:EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:58:9a:50:2e:3c:6c:9c:26:67:a6:cf:78:4a:9e:5a:4b:f1:
e6:0e:5d:11:17:a9:9c:a4:2a:c4:f4:c9:cb:57:20:08:32:9a:
d8:da:2d:94:11:48:ed:e1:83:e4:32:7f:60:b2:da:13:5f:ed:
46:28:74:f2:14:24:73:80:8e:c1:10:bc:78:2b:e7:43:00:3c:
01:78:28:73:e9:aa:60:ff:1e:0e:6a:1b:8b:eb:c0:7d:2e:f3:
68:9d:b5:aa:95:6f:a0:63:7b:52:7c:ea:60:b8:4f:db:a9:a2:
3a:33:06:cf:bf:a3:00:da:fb:27:c8:b6:be:18:d8:32:08:bb:
b9:43:b6:ec:45:9d:03:14:76:39:10:50:4b:43:49:7c:7c:a4:
88:04:2e:e1:db:cc:29:6a:fc:00:ae:b6:03:5c:f9:82:77:68:
e1:60:b8:f4:54:67:79:ba:14:72:81:e2:86:70:6d:65:5b:29:
2e:b9:fb:f5:a5:4c:48:fe:18:b1:1c:65:fc:c0:a2:8b:14:8a:
eb:c8:5b:65:ce:31:30:a1:05:cc:d0:f1:80:d5:00:68:f6:53:
6d:9f:b9:e0:8d:de:2b:eb:05:e4:ea:31:a4:22:7a:f0:50:f7:
d7:5d:b4:3f:9c:2b:53:eb:1b:ec:2f:4c:7f:d6:14:b2:f5:46:
05:50:22:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:28:25 2026 by rpki-client