Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
File: 7sMTGXauon0XHGwmepjT84KmGio.mft (raw, json)
Hash identifier: gSLcwcXJERnAKN28Q5OE+49Xb/wgHShukuw6DzWlUso=
Subject key identifier: 57:95:D0:DA:89:45:29:22:6C:94:31:E8:03:50:36:E3:E5:61:95:CB
Authority key identifier: EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
Certificate issuer: /CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Certificate serial: 01A0C17AFE4F4A25B32F54BF6F4C35781D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
Manifest number: 145B
Signing time: Mon 21 Sep 2026 01:00:58 +0000
Manifest this update: Mon 21 Sep 2026 01:00:58 +0000
Manifest next update: Tue 22 Sep 2026 01:00:58 +0000
Files and hashes: 1: 7sMTGXauon0XHGwmepjT84KmGio.crl (hash: dof6PlaRcUrkbwmgrXrxLCVxfcd9gfN6Q/xJyqQNPfw=)
2: L_bdGxJHykWkh6lnI23znPb9ZRc.roa (hash: ZEX+GgljqjjHrDsG1Iee4BuX7n/kzIjwqN8LRfjYRoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7a:fe:4f:4a:25:b3:2f:54:bf:6f:4c:35:78:1d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Validity
Not Before: Sep 21 01:00:58 2026 GMT
Not After : Sep 22 01:00:58 2026 GMT
Subject: CN=5795d0da894529226c9431e8035036e3e56195cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:61:23:ae:4f:31:74:ef:08:b3:3a:a8:4a:bc:
a9:58:29:90:67:a9:fd:7d:b5:7b:d6:a5:fd:28:3f:
de:af:83:16:44:fa:cd:3a:c1:3b:60:3b:5e:04:ec:
7a:f4:87:c5:08:5e:bd:9a:08:61:78:59:f5:b7:76:
ec:16:25:41:dc:76:b5:ae:75:d8:ec:76:77:12:d6:
97:b9:91:bf:5c:ab:16:27:dc:69:a8:1d:6f:ed:f0:
ec:a3:75:ce:5b:f1:2e:7d:02:18:50:c8:5c:ad:6b:
be:c4:a5:d7:ce:32:ff:48:f9:47:4d:c3:5a:80:26:
b7:f6:35:e0:7e:a0:0b:a0:4a:9f:9e:27:1e:7a:a8:
37:fb:15:56:f5:a0:43:2c:ce:c8:93:21:67:c6:85:
fb:83:1e:53:32:0a:73:32:b9:a2:77:45:b9:66:0c:
bf:9c:7e:16:5d:49:d9:2b:7f:1c:ea:86:4e:1d:08:
db:9b:7b:9b:3f:af:4f:04:cd:f0:ae:ad:66:46:2d:
39:2b:f3:04:f9:84:bd:dd:32:13:15:13:ca:7b:36:
bc:83:d9:1a:5d:bf:0c:da:9e:63:9d:15:3b:93:3f:
d5:ec:1d:9d:73:48:85:e4:5d:47:90:5b:3c:42:5e:
37:b1:8a:7c:b5:1c:b3:13:d6:9c:e4:34:ad:d3:5d:
6d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:95:D0:DA:89:45:29:22:6C:94:31:E8:03:50:36:E3:E5:61:95:CB
X509v3 Authority Key Identifier:
keyid:EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c7:4e:09:bc:ae:46:6b:05:e1:f9:88:81:f3:e8:89:3b:52:
8c:e5:d4:13:71:3b:93:e2:28:91:08:e4:2b:9d:ad:73:d6:63:
ab:ac:20:fb:bc:80:74:b0:cc:f3:76:d6:56:17:c7:5a:50:47:
56:c0:81:cd:db:96:f5:41:fb:58:35:c8:2d:3f:2d:ce:68:ff:
ae:29:12:87:ff:10:c0:22:d4:e8:e5:c9:1b:22:0e:e7:54:61:
4b:74:3c:f0:2b:42:53:7d:1c:fe:3b:0f:8b:09:d0:99:54:30:
9e:9c:9d:42:3c:a8:93:79:c7:bb:43:4d:04:f3:20:a9:2e:f4:
e8:da:21:89:04:e6:f6:30:fc:da:20:61:c8:55:84:3a:67:70:
35:d0:0e:ff:34:83:4d:ac:74:a6:c5:16:b3:45:09:cc:88:9b:
e1:db:39:94:c3:98:87:1b:f8:de:29:52:08:ca:83:43:44:7c:
08:6d:0e:30:8a:54:04:99:8e:e0:2f:ef:3c:ed:c5:88:e2:a3:
53:1b:2a:63:22:d6:3a:81:38:2b:c8:ad:1e:1f:ce:d3:40:b2:
30:0d:e9:d4:44:f0:e7:f2:70:00:23:4e:30:96:bb:45:e3:0c:
82:e6:31:de:4b:e2:90:f0:75:56:81:f7:9c:fe:b6:aa:3c:d4:
de:d1:43:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:59:33 2026 by rpki-client