Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
File: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft (raw, json)
Hash identifier: kq1RAg0/KMonZh0mdwfpy1kH5OVRAroc6AyfMOY9qOE=
Subject key identifier: EE:94:79:28:B3:7A:BE:90:56:5D:F7:11:A4:21:93:81:2A:4F:C5:46
Authority key identifier: 0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
Certificate issuer: /CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Certificate serial: 01A0C28CEB12FD0C3D399E62C3E10BC14DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
Manifest number: 0D1E
Signing time: Mon 21 Sep 2026 06:00:09 +0000
Manifest this update: Mon 21 Sep 2026 06:00:09 +0000
Manifest next update: Tue 22 Sep 2026 06:00:09 +0000
Files and hashes: 1: 2v4YgEEU5PZAEx9kaov0Dt0r6ZE.roa (hash: yvRtNPx1WUhuCSJ0MLLVNvVm/bVKPnCTaAl6EEupAH8=)
2: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl (hash: eVe/MeiDqp3dmL/5SS87zoBdCowRZvf1PrJ8xHqH4gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8c:eb:12:fd:0c:3d:39:9e:62:c3:e1:0b:c1:4d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Validity
Not Before: Sep 21 06:00:09 2026 GMT
Not After : Sep 22 06:00:09 2026 GMT
Subject: CN=ee947928b37abe90565df711a42193812a4fc546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:31:5c:4f:2b:89:3e:c1:ef:1d:e3:8d:f6:
80:ed:d4:a0:3d:d9:8a:36:42:b6:80:44:c0:16:77:
67:76:49:e5:2a:ab:31:cf:f3:cf:68:b6:69:53:67:
d3:2d:17:63:77:6c:dc:39:db:bd:65:31:6e:b8:7a:
bf:0a:15:ee:01:c9:23:09:df:1f:78:02:f8:6e:f6:
78:f0:1c:a6:d1:6b:6d:4e:eb:18:23:c9:c0:24:ac:
6f:24:67:27:7c:2a:bb:87:f8:d6:f4:6d:1d:ff:10:
50:77:86:80:4b:31:6a:96:fc:41:6f:0f:18:ea:85:
87:15:9f:f6:e8:e3:f3:06:1f:9c:e3:56:0a:79:25:
6d:58:1f:7c:6b:d3:ad:57:ca:5b:b0:60:bf:69:c5:
5e:65:ca:97:d0:e1:bc:b9:4d:3a:55:9e:86:3f:62:
8f:b8:2a:67:b7:60:c0:2c:12:f4:d3:32:1a:83:a9:
c1:60:89:7c:6a:a6:7f:69:1e:14:30:18:77:b5:39:
e8:ac:3b:a9:44:64:1b:55:c6:92:80:cd:3b:47:99:
cd:d6:b5:84:f0:d6:88:92:f0:45:af:6c:b5:d0:ec:
66:5a:a9:53:de:b7:36:42:33:89:82:b2:4a:df:60:
5c:8b:73:a8:7a:a8:9f:9a:1f:33:b3:d9:c9:9c:42:
3b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:94:79:28:B3:7A:BE:90:56:5D:F7:11:A4:21:93:81:2A:4F:C5:46
X509v3 Authority Key Identifier:
keyid:0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:41:09:12:cf:9b:87:6d:dd:b5:8a:43:41:95:9d:83:a8:00:
ef:96:19:e6:bf:f5:04:a1:85:a9:69:aa:44:63:91:e6:aa:16:
34:e1:b3:5a:c4:3d:d3:0c:c5:73:b1:03:7f:cd:71:67:07:b7:
79:02:da:df:49:78:b3:e0:43:9b:ea:2e:c9:90:7e:61:ff:9e:
00:9b:04:d6:d0:52:e6:47:37:fb:20:0a:63:0e:94:b2:f6:6b:
21:62:a3:90:20:46:70:19:63:1d:eb:0f:98:5d:8c:ac:15:dd:
fe:48:f0:c8:e0:cf:d0:4d:4b:64:89:ae:a8:f0:b2:a2:88:89:
75:9a:08:b1:f8:0a:e3:d4:a9:49:b4:70:12:22:45:c7:d6:5d:
c3:d9:0d:f7:fc:af:94:a1:6a:eb:92:09:ca:cc:9b:7c:7c:72:
b3:f8:5f:b9:97:76:53:c1:96:53:ad:3f:f8:b5:b1:84:93:ec:
e0:85:fc:51:15:6d:7f:fa:5c:fa:89:b7:26:ae:d8:c3:31:2a:
2a:f3:fc:86:15:96:72:80:61:db:58:37:46:e9:e2:7e:af:d3:
f0:54:5d:18:a9:5f:f9:da:07:d3:b9:06:65:fa:c6:19:ab:22:
07:a9:23:67:b7:3c:8d:38:8e:ab:55:53:e3:7b:c7:7d:f5:f2:
47:6f:ee:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:11:53 2026 by rpki-client