Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/1f09cb-faeb-4c5c-94bb-b6aa124470be/1/na7oTgclTI2EvsXvFwKGIyRhVVc.mft
File: na7oTgclTI2EvsXvFwKGIyRhVVc.mft (raw, json)
Hash identifier: Pdx01yfrTdPwsXPzFy2M1oCRMEc1UuZNcRBCaAPYAeI=
Subject key identifier: 8A:B4:E0:1C:D4:46:1E:BE:48:EC:56:A9:50:4B:D7:AE:66:0D:1E:FB
Authority key identifier: 9D:AE:E8:4E:07:25:4C:8D:84:BE:C5:EF:17:02:86:23:24:61:55:57
Certificate issuer: /CN=9daee84e07254c8d84bec5ef1702862324615557
Certificate serial: 01A0C031818DAA4D0344A5829CCC2AE760D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/na7oTgclTI2EvsXvFwKGIyRhVVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/1f09cb-faeb-4c5c-94bb-b6aa124470be/1/na7oTgclTI2EvsXvFwKGIyRhVVc.mft
Manifest number: 7A
Signing time: Sun 20 Sep 2026 19:01:04 +0000
Manifest this update: Sun 20 Sep 2026 19:01:04 +0000
Manifest next update: Mon 21 Sep 2026 19:01:04 +0000
Files and hashes: 1: KkeTaWCGh4wLBoNppcb44xjxlgw.asa (hash: uYWO15qW84O4bgp9CyY4XEusdS+L9bzSspdKaT9ZwVk=)
2: na7oTgclTI2EvsXvFwKGIyRhVVc.crl (hash: 3Ld0Aty0GJ+UV583eDHUhliJU68jH8BTy2aRcBL23N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/1f09cb-faeb-4c5c-94bb-b6aa124470be/1/na7oTgclTI2EvsXvFwKGIyRhVVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/1f09cb-faeb-4c5c-94bb-b6aa124470be/1/na7oTgclTI2EvsXvFwKGIyRhVVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/na7oTgclTI2EvsXvFwKGIyRhVVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:31:81:8d:aa:4d:03:44:a5:82:9c:cc:2a:e7:60:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9daee84e07254c8d84bec5ef1702862324615557
Validity
Not Before: Sep 20 19:01:04 2026 GMT
Not After : Sep 21 19:01:04 2026 GMT
Subject: CN=8ab4e01cd4461ebe48ec56a9504bd7ae660d1efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:25:b4:b9:eb:03:58:e0:0e:66:27:dd:bd:
c2:87:6d:83:3b:3c:da:1e:b1:3d:0d:8e:05:85:8e:
44:44:69:6c:be:34:d4:8d:37:8b:38:0a:58:4c:fb:
44:16:67:e6:d7:c4:d4:40:0e:8e:1d:b9:2f:a3:35:
63:f3:af:8c:5a:2c:aa:63:32:33:c1:fc:9e:fe:5c:
ae:a5:ec:88:32:49:b8:e6:58:ec:96:8a:2e:a8:91:
56:23:88:71:32:f0:96:e2:7f:68:14:21:c8:c0:d1:
48:f0:0d:dd:85:4f:a5:52:85:4f:6b:81:d1:0d:fa:
47:d3:6d:2c:99:e0:23:ae:4b:97:3d:51:ff:c6:24:
27:13:ee:67:f7:f8:c4:37:1d:21:48:48:bb:e1:5d:
b7:f8:6b:17:a9:7a:25:94:59:2a:51:37:e5:ed:87:
59:ff:10:49:b5:a6:06:20:22:36:3b:c3:d6:b5:3e:
f0:a5:40:e1:22:2b:89:0b:cc:a9:69:3b:51:82:1b:
d7:2c:4e:04:7c:e6:75:af:74:c3:58:90:76:0d:7e:
04:e7:f5:91:f9:a9:33:90:ea:a2:41:6d:ba:f6:f5:
c4:9d:8f:6b:0e:1c:a1:cb:5a:f2:0b:de:d6:bc:15:
4b:e8:6e:5a:bd:9b:e0:96:9d:49:98:5c:a7:f9:48:
48:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B4:E0:1C:D4:46:1E:BE:48:EC:56:A9:50:4B:D7:AE:66:0D:1E:FB
X509v3 Authority Key Identifier:
keyid:9D:AE:E8:4E:07:25:4C:8D:84:BE:C5:EF:17:02:86:23:24:61:55:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/na7oTgclTI2EvsXvFwKGIyRhVVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/1f09cb-faeb-4c5c-94bb-b6aa124470be/1/na7oTgclTI2EvsXvFwKGIyRhVVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/1f09cb-faeb-4c5c-94bb-b6aa124470be/1/na7oTgclTI2EvsXvFwKGIyRhVVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:79:4d:71:f6:b5:07:a5:57:bb:37:75:10:68:dc:81:f0:12:
97:fe:f3:bc:df:f0:0b:5e:09:a5:e0:ad:4a:ab:c8:4b:c5:a1:
34:0f:ca:38:16:f0:bc:aa:7c:37:90:4a:23:07:07:6b:e9:38:
6e:07:45:ef:9c:57:60:36:8e:a7:2f:59:1c:da:e1:69:67:72:
51:f0:aa:3a:90:8c:b5:cd:78:f1:64:a8:d7:c4:0e:5e:ea:85:
7a:bc:2e:5f:fa:3c:9f:04:c7:57:d7:bd:bc:b9:47:60:e9:59:
93:c7:90:1e:72:98:0c:a1:d9:a3:38:f4:10:8a:5a:ab:71:8d:
9e:d5:d3:29:15:38:2d:fd:9d:77:8d:02:68:44:c7:8c:94:26:
e9:aa:b0:ca:20:5d:dc:78:73:79:f4:31:3b:00:2a:aa:07:31:
d6:fe:34:66:02:a3:41:97:70:bd:de:f2:3f:0b:1d:df:c9:18:
0b:f5:56:57:6c:b7:fc:7e:d6:86:2e:7d:a3:27:b5:87:0c:6e:
e6:9c:5d:ec:62:f3:01:e0:dd:40:4c:42:3f:fb:bd:8a:a7:ba:
6f:85:12:52:ec:75:25:21:38:62:c9:06:3c:40:28:6a:52:cd:
70:e0:0d:9c:bf:81:54:9c:73:8d:dd:13:4b:5d:a6:b0:46:9b:
15:7c:39:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:24:47 2026 by rpki-client