Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
File: en7OlN5d9qGjTJjsZtPZaOWymyE.mft (raw, json)
Hash identifier: DKSH2h7gDsB5oR5EijyaIJKuapCtORJT+LWWaD+drPk=
Subject key identifier: 18:93:B2:C7:BC:6E:6A:AB:C8:0E:F8:20:4E:1D:A7:EF:B3:0C:B5:C7
Authority key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
Certificate issuer: /CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Certificate serial: 01A1287A9858E63ED4A2AD16FA4FE2D122AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
Manifest number: 117A
Signing time: Sun 11 Oct 2026 01:01:25 +0000
Manifest this update: Sun 11 Oct 2026 01:01:25 +0000
Manifest next update: Mon 12 Oct 2026 01:01:25 +0000
Files and hashes: 1: 1-kxWXv05LSEshrBJnjD59T0FQ7Q.roa (hash: rHapWpK9pigcf/GGIQp1nmEJbzSoQssokoPt9LrVksY=)
2: en7OlN5d9qGjTJjsZtPZaOWymyE.crl (hash: JiFfyRy4xZArF2cnPcZMCco1o+/lRK1wCoFrmtTNd3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:7a:98:58:e6:3e:d4:a2:ad:16:fa:4f:e2:d1:22:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Validity
Not Before: Oct 11 01:01:25 2026 GMT
Not After : Oct 12 01:01:25 2026 GMT
Subject: CN=1893b2c7bc6e6aabc80ef8204e1da7efb30cb5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2f:b9:75:3a:96:00:be:bc:67:8b:c5:b8:3d:
96:f1:96:5a:02:35:35:da:13:b6:b2:e8:ef:de:bd:
03:ee:cd:4e:82:63:89:35:37:cc:ef:88:f8:ee:7f:
15:3c:cb:6b:11:b1:ec:79:91:fe:c6:04:95:4c:6e:
a6:dd:90:13:ea:31:68:d7:5c:f0:c1:93:8e:31:96:
51:45:f5:8b:9a:27:ce:ad:ca:09:44:9e:f9:6f:a7:
61:1c:62:f3:c3:38:64:21:76:98:f2:f7:c3:5a:09:
83:0d:db:4e:67:55:f9:84:0a:7b:46:84:b4:ef:60:
d8:b9:50:db:d5:fc:dc:5d:ed:f8:30:85:eb:90:6f:
88:ea:0e:03:01:70:8a:a4:4f:92:40:a3:2e:33:4c:
c8:e2:0b:77:d4:74:88:57:70:9b:6a:de:8b:a5:bb:
b8:50:06:4c:89:08:9e:ab:e1:aa:6d:73:e1:fd:af:
c5:97:e9:45:4b:96:5b:fd:d6:c7:f4:73:a7:9a:ac:
b9:41:2a:e9:7b:d5:7f:3d:5b:64:02:fb:84:09:88:
85:48:be:0d:57:4a:b8:86:92:fb:1b:9a:89:81:17:
e5:11:77:6c:49:c7:e0:d2:b4:63:cd:b3:60:6d:f3:
7d:1d:b4:46:33:98:11:a1:31:ea:26:b7:d9:f0:d4:
b1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:93:B2:C7:BC:6E:6A:AB:C8:0E:F8:20:4E:1D:A7:EF:B3:0C:B5:C7
X509v3 Authority Key Identifier:
keyid:7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b2:3f:54:1d:3e:12:18:f6:32:56:26:5e:3f:c3:64:2d:c9:
d5:9d:d4:e3:8f:3d:ae:2f:13:c7:75:47:a4:68:25:1a:ca:44:
20:5c:20:3e:f1:ea:53:cb:62:b7:da:c9:eb:1f:76:fe:25:dc:
70:63:01:74:55:37:a4:d2:25:48:12:6e:fd:23:da:0a:42:83:
20:b9:98:7b:39:73:de:f6:fe:65:d3:23:11:45:09:a3:9a:4a:
89:cd:9f:93:ac:2e:4e:34:a0:3f:dd:64:3c:d2:18:f1:9b:80:
a8:3d:35:56:06:42:09:29:1d:ab:80:37:e9:86:0c:9e:a1:4a:
4f:22:c0:30:63:db:ce:04:2f:fa:ba:c3:6e:7e:49:6a:f9:f9:
1b:ae:19:f5:4e:74:af:ab:dd:ca:67:33:74:3f:49:f8:fe:e7:
3d:7e:8d:b0:07:3b:42:dc:b9:97:17:71:ad:81:f4:d9:25:bd:
cd:d9:76:9e:e1:94:54:94:9a:c5:a5:73:60:c7:3b:cc:fc:a2:
a7:47:9e:08:22:c8:55:43:72:46:ed:4f:65:c7:f2:af:46:a7:
19:25:0e:d8:03:bf:5f:d4:95:96:af:9e:42:79:91:b1:c8:68:
47:a4:07:79:b3:1b:3b:c5:0e:93:fb:f3:cd:dd:ef:91:ae:47:
a6:68:cd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:14:39 2026 by rpki-client