Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/7RhI8zDQ8z8bucJfq3YzDKx-yGo.mft
File: 7RhI8zDQ8z8bucJfq3YzDKx-yGo.mft (raw, json)
Hash identifier: J2FDCXOBLb+tMkw5eDwT8FEJeeaiQw3TCDq4BeYQrpM=
Subject key identifier: 3A:1C:34:A3:FC:96:AE:1E:F8:F0:16:4E:22:AC:2A:FB:EA:02:BD:6C
Authority key identifier: ED:18:48:F3:30:D0:F3:3F:1B:B9:C2:5F:AB:76:33:0C:AC:7E:C8:6A
Certificate issuer: /CN=ed1848f330d0f33f1bb9c25fab76330cac7ec86a
Certificate serial: 01A0D7CCECBB588EE934D2FB5CC64C9EA8C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7RhI8zDQ8z8bucJfq3YzDKx-yGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/7RhI8zDQ8z8bucJfq3YzDKx-yGo.mft
Manifest number: E9
Signing time: Fri 25 Sep 2026 09:02:06 +0000
Manifest this update: Fri 25 Sep 2026 09:02:06 +0000
Manifest next update: Sat 26 Sep 2026 09:02:06 +0000
Files and hashes: 1: 7RhI8zDQ8z8bucJfq3YzDKx-yGo.crl (hash: KLLVhsmqlho3yjdo6BFrHtC97X1fODbb+N7qUSn0rg0=)
2: rrVg1yY76H0OrkLgPPxFAVeSQco.roa (hash: 3S/SBO00c/swPpqrVgrHXRtOLs7Ygz5vb2pQy4rK3mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/7RhI8zDQ8z8bucJfq3YzDKx-yGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/7RhI8zDQ8z8bucJfq3YzDKx-yGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7RhI8zDQ8z8bucJfq3YzDKx-yGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:ec:bb:58:8e:e9:34:d2:fb:5c:c6:4c:9e:a8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed1848f330d0f33f1bb9c25fab76330cac7ec86a
Validity
Not Before: Sep 25 09:02:06 2026 GMT
Not After : Sep 26 09:02:06 2026 GMT
Subject: CN=3a1c34a3fc96ae1ef8f0164e22ac2afbea02bd6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f8:b5:a7:be:71:63:a1:b0:bb:b2:8f:1a:b9:
ad:13:bd:b3:0f:28:71:06:6b:07:32:bb:af:65:a7:
e7:b9:88:c1:a9:c2:4c:3e:d9:9b:1e:0b:1f:b4:e1:
c9:76:ae:87:ff:2a:65:8d:7e:ca:c4:39:74:44:00:
58:65:3c:52:d2:e8:a2:16:d9:7d:0a:06:29:da:c9:
85:a2:6a:75:42:62:4e:32:9c:07:54:c9:91:98:1d:
72:5f:a9:e9:7d:61:2d:f0:56:6a:7f:df:fa:9f:d3:
dc:80:d5:f2:0e:1f:f4:37:f6:ff:e3:26:8e:7d:13:
79:86:96:11:15:d7:ef:d7:8d:03:12:e3:57:8b:b5:
33:6b:43:f3:2e:9f:06:98:17:26:de:54:95:56:1e:
a7:90:b6:88:32:36:cb:6d:27:81:1d:13:20:a7:3e:
a1:9f:c2:11:af:cf:8a:1c:bc:c3:c3:ce:d8:0b:91:
a1:73:32:ae:0c:36:4b:1b:f8:d2:3f:5b:b4:db:53:
10:d8:17:e9:fb:7a:d0:f2:75:a9:0a:43:f0:36:4e:
6e:94:0a:ea:1c:d8:36:33:4d:0e:fa:b2:49:29:dd:
c8:33:dd:29:65:61:ae:05:ef:19:96:b3:15:97:d1:
9f:f9:0e:94:85:14:ad:31:19:84:fb:f7:fc:00:f3:
5e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1C:34:A3:FC:96:AE:1E:F8:F0:16:4E:22:AC:2A:FB:EA:02:BD:6C
X509v3 Authority Key Identifier:
keyid:ED:18:48:F3:30:D0:F3:3F:1B:B9:C2:5F:AB:76:33:0C:AC:7E:C8:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7RhI8zDQ8z8bucJfq3YzDKx-yGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/7RhI8zDQ8z8bucJfq3YzDKx-yGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/7RhI8zDQ8z8bucJfq3YzDKx-yGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:df:8f:c2:f1:44:d0:28:2d:ce:19:b5:05:31:75:c0:94:00:
7c:d9:ee:7c:79:86:12:dc:d1:fb:51:fa:36:24:31:81:04:4b:
12:b4:05:92:ba:b9:1b:f6:e7:fa:48:ff:7c:d3:79:8c:05:94:
e1:a9:fd:53:8b:39:bc:71:b3:55:72:4e:19:10:81:45:eb:92:
e2:e2:b1:88:37:93:33:89:2e:ac:35:e6:39:0c:ec:77:28:83:
d3:b4:eb:ea:06:64:18:ec:75:9b:80:be:02:56:8d:ca:e2:c9:
ef:92:da:22:0e:75:a8:fc:bd:7d:57:14:fa:1a:11:fe:13:61:
27:94:64:eb:24:c5:78:f7:98:05:05:d4:7b:30:ee:d4:04:6f:
d8:a3:9d:f4:2c:05:58:4c:8d:7a:64:56:36:18:b2:97:f9:8d:
25:97:aa:60:42:83:9e:4f:5f:07:e2:ea:4a:1f:76:fc:c9:c0:
d4:76:e7:0a:bb:03:23:e9:2e:65:a6:10:aa:a5:90:6d:4d:b7:
96:14:6c:ab:f2:5f:45:4b:4c:89:10:c9:bd:72:19:56:15:11:
55:a2:f1:d9:a9:6b:fa:18:4f:9b:61:95:27:c5:81:04:85:61:
f3:2e:9b:9f:9c:e0:81:10:2f:07:07:03:a5:f2:91:de:2c:de:
c5:93:44:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:52:32 2026 by rpki-client