Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
File: 7osnkE0RvPU2d01UFUIILPr-jqo.mft (raw, json)
Hash identifier: 880UcwSt2DnkguX22bBwsSpKbjDLVH8q20B5wHvfFyU=
Subject key identifier: E2:73:3B:8A:39:4D:D2:05:0E:1D:A5:F2:6A:56:21:3D:84:26:D5:55
Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
Certificate issuer: /CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Certificate serial: 01A0C6A0DC68C87622091CE129CCFFC0124D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
Manifest number: 0E75
Signing time: Tue 22 Sep 2026 01:00:26 +0000
Manifest this update: Tue 22 Sep 2026 01:00:26 +0000
Manifest next update: Wed 23 Sep 2026 01:00:26 +0000
Files and hashes: 1: 7osnkE0RvPU2d01UFUIILPr-jqo.crl (hash: I7+KytBwtU5vLvZaAZGseopgyHuYmzcwzuIk91cp2dE=)
2: BLLh5nNCz1s5if2pHYByIfYWqoE.roa (hash: EPJ+RLaqu85xGvwiEKDRnHSjYD9ruTYxv3tR7VjbDJs=)
3: E7Yzs4RQ5PAWanrzJaRetL_vIW4.roa (hash: ZfDaAmo4Ze/Cj58O8IkcEHyg6puoaRdc7XWQV2TfV6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a0:dc:68:c8:76:22:09:1c:e1:29:cc:ff:c0:12:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Validity
Not Before: Sep 22 01:00:26 2026 GMT
Not After : Sep 23 01:00:26 2026 GMT
Subject: CN=e2733b8a394dd2050e1da5f26a56213d8426d555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ee:01:9f:7f:ae:24:65:32:42:97:c7:cb:41:
12:b0:e7:2d:50:55:d9:66:68:b7:58:cc:5b:b5:d9:
60:26:d2:4e:fc:94:f8:cb:60:ab:ae:ee:06:60:91:
7f:ea:f2:85:a0:c9:31:10:a2:2c:f3:c1:4e:2f:98:
3d:85:cd:43:df:19:04:af:b6:fd:c3:82:43:1f:11:
c4:fe:20:81:81:1b:de:3d:af:b7:07:d6:40:79:25:
6c:36:c5:61:8b:48:a5:40:98:d4:27:0b:e3:44:33:
4c:b3:c1:2e:8f:ff:fd:bf:e2:79:38:e8:26:c8:a0:
dc:b9:23:b4:49:ac:ed:2e:6c:0e:eb:28:55:97:4d:
0c:64:17:26:c1:47:20:17:04:2e:1f:bc:f6:ea:c9:
3a:77:55:21:19:cc:24:72:7c:71:68:14:50:dd:0c:
ed:87:78:e2:4d:57:a5:da:d4:69:af:5f:05:63:2e:
52:7b:29:b3:c9:e1:ac:56:e0:22:56:7d:06:1e:77:
7d:7b:bf:86:b9:b3:a6:3e:50:4f:86:f8:c1:e7:c2:
fb:5c:ed:22:48:e0:ba:c0:4d:4f:b6:f3:c2:18:f7:
96:01:32:04:5b:50:37:25:8a:9a:d6:e4:2a:d0:49:
2d:9e:34:36:42:a2:1c:af:f0:fb:20:d6:c2:f5:ba:
d3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:73:3B:8A:39:4D:D2:05:0E:1D:A5:F2:6A:56:21:3D:84:26:D5:55
X509v3 Authority Key Identifier:
keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9f:47:b8:9d:a1:cd:38:07:ef:96:59:ee:e2:e6:f1:88:a5:
0d:ae:0f:80:df:09:0e:2e:37:d8:d4:18:33:1e:73:c2:08:18:
a3:28:c0:cb:19:64:90:5d:20:ff:db:e2:08:64:09:04:12:c3:
53:a0:4a:2d:40:bb:e1:56:dc:16:29:62:1e:6a:18:b0:e6:ba:
46:2b:5a:de:f9:4b:6e:ad:98:1c:7d:15:8d:3b:74:dd:00:a8:
61:87:24:9b:72:36:c5:de:04:07:5f:d2:ce:ed:f1:1d:c1:51:
97:1f:f7:9f:84:48:05:d1:5d:e3:cf:24:3c:9b:f8:51:5d:26:
0d:06:dc:3f:22:b5:b7:10:5a:be:03:d9:ed:c7:0a:c3:66:40:
5c:15:27:cf:a9:49:c2:1c:35:68:93:dd:f2:14:d4:4a:c6:78:
21:1f:39:b2:13:79:03:96:5d:3e:df:ea:f2:42:6d:3c:36:06:
57:5c:10:51:0a:69:04:95:b4:d3:7b:d8:07:a8:48:3a:d7:50:
d9:f8:04:3e:b5:75:ae:e3:84:01:6d:e1:3f:01:d6:ac:5f:08:
4b:59:fe:89:b7:67:6f:8c:27:1c:a4:f2:b7:c8:d0:ba:bb:f8:
22:36:39:4f:c2:8e:87:6d:2d:6c:d9:4c:5f:fd:29:59:69:5d:
13:0c:95:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:04:50 2026 by rpki-client