Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
File: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft (raw, json)
Hash identifier: koiAaWBJemuzNSMmaUbwxvuAU9rzLHNpfRy8Y4r8Ykk=
Subject key identifier: DA:E9:AC:67:37:37:83:9B:F7:B5:C7:70:02:1C:3C:98:91:6E:D6:EE
Authority key identifier: EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
Certificate issuer: /CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Certificate serial: 01A0C3D6E9201DD42B1B735668E244C9A024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
Manifest number: 0642
Signing time: Mon 21 Sep 2026 12:00:36 +0000
Manifest this update: Mon 21 Sep 2026 12:00:36 +0000
Manifest next update: Tue 22 Sep 2026 12:00:36 +0000
Files and hashes: 1: 200hGiiiZsPIFyhRS3fgiw7TDL0.roa (hash: RXdmnfglVdphnX74nph9B1kezoQQBk9ZlsO2RYNXwvo=)
2: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl (hash: CM+M0pFilg8HPQC4nPSXd7J22MGTnPIbmSXriqynMWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:e9:20:1d:d4:2b:1b:73:56:68:e2:44:c9:a0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Validity
Not Before: Sep 21 12:00:36 2026 GMT
Not After : Sep 22 12:00:36 2026 GMT
Subject: CN=dae9ac673737839bf7b5c770021c3c98916ed6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:40:a5:82:9b:b3:b0:7c:c7:0d:3e:f5:5b:55:
17:cd:e8:d1:6a:e7:c8:f5:73:83:01:9c:1b:18:7a:
e3:47:75:03:6e:68:e7:2f:4f:16:be:7a:55:69:2f:
11:28:25:7f:b6:70:48:86:81:72:7d:f2:0b:3f:62:
24:99:2f:7a:79:f1:45:2b:ed:82:0f:a5:b2:4c:02:
04:9b:e1:04:2e:27:0c:d4:38:41:ba:28:85:c3:e5:
34:f2:f0:8e:54:7e:09:f0:3c:d9:76:1b:61:66:c2:
ff:80:1e:73:bb:78:66:3d:ca:53:50:f6:2f:c2:7b:
cd:de:8f:11:22:c5:46:bd:b2:0b:3e:c9:73:f5:84:
2d:68:07:81:27:8e:5d:54:1d:d3:0a:39:77:d9:2d:
46:8b:ec:e7:fd:56:a1:21:43:35:23:4e:c3:46:1d:
b4:7c:70:d1:fd:6c:19:2c:5e:06:2c:b2:c8:58:74:
6d:8a:58:c1:2a:4c:c7:05:a3:67:bc:84:29:fe:1a:
45:c8:42:9f:ed:ca:d9:cd:84:cc:3e:9d:8d:6e:b4:
b9:90:fe:58:89:a2:89:2b:48:e3:2e:c9:cb:88:cc:
99:46:5c:da:36:62:c5:14:9c:92:92:87:8e:ed:af:
00:f2:f7:d0:fa:b9:5f:b2:df:50:68:2b:fa:b0:d2:
1b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E9:AC:67:37:37:83:9B:F7:B5:C7:70:02:1C:3C:98:91:6E:D6:EE
X509v3 Authority Key Identifier:
keyid:EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:df:b0:60:cc:bc:7d:99:2e:60:4a:e8:08:c7:69:7e:89:4b:
b7:88:a7:44:df:f7:3a:b1:96:00:f4:e5:74:b4:0e:0a:ea:bf:
3b:5b:ee:75:8f:85:e8:1a:5a:85:7b:8b:fa:d5:b5:c3:14:4e:
7c:ab:5f:8b:24:30:3c:0b:5c:00:a3:81:dc:3d:13:d6:e2:1e:
88:5c:49:bf:cd:e5:3e:b7:70:67:ea:aa:1d:cd:4e:45:d9:24:
46:d8:20:86:57:f2:b7:1d:13:c0:2a:5b:83:17:fc:07:b0:13:
18:49:8d:62:43:d7:9c:1d:69:d3:01:a1:5c:02:78:16:b9:7b:
6c:7e:78:2c:e6:f9:36:40:e7:9c:18:4e:07:fe:44:4d:d6:af:
2c:b7:df:a0:f7:d5:29:c9:65:7f:91:66:89:4c:82:85:84:60:
3f:c6:ff:8c:74:a0:ff:4a:97:65:10:af:ee:cb:90:36:21:32:
1c:c8:59:b0:1c:a4:ec:91:34:9d:06:d5:95:e7:d0:a3:ea:ff:
13:9d:25:1c:c9:cd:c4:b1:e3:b5:71:1c:95:08:18:4f:db:4d:
9d:64:02:47:f8:ec:20:86:4e:99:e4:51:31:59:f5:e4:23:ef:
36:33:90:b1:d1:6e:6b:65:13:17:4d:c2:4d:40:68:73:88:a7:
83:4c:46:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:59:37 2026 by rpki-client