Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
File: 7-oXe8wrDvZMq2BObmQnsa3gv2k.mft (raw, json)
Hash identifier: sy0kN9pUVhEyPN4x279g/lO0I0DisBhHW4YbInAbUOg=
Subject key identifier: 5A:14:55:B7:B6:F2:AB:96:50:00:02:96:A6:81:80:58:09:CA:E1:E4
Authority key identifier: EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
Certificate issuer: /CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Certificate serial: 019CAEA30B4E828CF7D03440CB3DCE2D3A01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
Manifest number: 10AE
Signing time: Mon 02 Mar 2026 13:00:46 +0000
Manifest this update: Mon 02 Mar 2026 13:00:46 +0000
Manifest next update: Tue 03 Mar 2026 13:00:46 +0000
Files and hashes: 1: 6-BuOHHPnpUOqlNuA0hQWIC3UUY.roa (hash: Ab97lavd/imuV8no1ybPZidS69ZM1uRf157tLeK/rjM=)
2: 7-oXe8wrDvZMq2BObmQnsa3gv2k.crl (hash: MAt7s3gtdxwRSK79oRTtDydpAB2WFeMW5OCFKhL1Y8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:0b:4e:82:8c:f7:d0:34:40:cb:3d:ce:2d:3a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Validity
Not Before: Mar 2 13:00:46 2026 GMT
Not After : Mar 3 13:00:46 2026 GMT
Subject: CN=5a1455b7b6f2ab9650000296a681805809cae1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:36:c3:42:5a:29:84:95:f3:f2:24:6b:41:01:
49:ec:a4:36:f3:31:d4:68:c1:03:79:4e:b6:b1:81:
c2:1d:f4:c3:42:37:aa:66:85:f9:96:73:35:92:1e:
54:71:d4:09:29:63:1e:64:48:8a:dd:a3:35:7f:2b:
7e:aa:ba:ff:80:6c:b0:b5:cc:a1:3a:5b:2b:91:7d:
98:3c:b5:7e:bd:d9:10:07:b3:aa:09:4c:8c:0d:cd:
7a:55:52:96:18:92:1f:9d:73:b1:d0:b7:3f:52:db:
53:54:a6:d1:8e:f0:b0:cf:e9:32:7d:e9:8b:3f:08:
55:06:54:d7:fe:38:b4:1d:c9:f0:a7:9f:7f:87:2b:
9b:80:de:63:f3:a1:27:de:f8:5c:94:05:c5:58:d2:
84:c6:51:bc:35:cd:0c:75:ec:09:9d:d2:9d:eb:02:
45:84:60:d6:1a:4a:af:7e:32:58:56:07:8d:2b:e7:
21:47:95:62:66:3e:81:52:a2:11:1e:af:b3:a2:ba:
1c:fc:d8:4a:3e:79:77:c5:57:ac:f7:95:90:d1:09:
6f:52:3c:a5:16:41:1d:30:fd:e2:38:6e:93:7b:8e:
55:25:af:36:b5:18:45:6f:cf:05:ba:75:7e:88:6b:
93:4e:97:1a:e8:9b:a3:19:74:29:36:1d:80:17:37:
0f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:14:55:B7:B6:F2:AB:96:50:00:02:96:A6:81:80:58:09:CA:E1:E4
X509v3 Authority Key Identifier:
keyid:EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:59:f4:89:16:c0:ef:09:01:f7:6e:c0:3e:f1:c4:dc:45:39:
d3:8b:8e:70:f5:d5:89:d0:7c:5c:04:2d:60:9a:51:ab:c7:56:
bb:a4:b3:6a:7f:6d:a5:d3:a3:90:dd:65:32:0a:95:54:b9:1c:
8e:d8:4b:59:d9:d7:89:33:4b:72:43:e3:c2:af:32:20:9b:ae:
cf:72:e7:a9:6a:2f:a9:0f:e2:e3:1d:17:b1:75:7b:4f:4f:f2:
1a:9e:62:a9:42:9e:71:fb:4c:6f:3f:8c:19:95:ea:0b:2c:4e:
57:2a:6c:11:46:25:9f:8f:c8:c4:23:f8:98:27:e2:aa:33:6a:
9f:e6:9a:3c:f7:7a:07:84:43:78:db:1c:6d:e1:0f:9a:f1:45:
d6:48:fa:e2:07:e3:fd:e5:ef:ad:ce:5d:a8:e3:30:c1:dc:c4:
57:b7:69:7b:54:27:9d:c1:62:c3:8f:e2:c7:c6:86:25:9d:50:
55:66:9c:a9:3a:00:0c:0e:73:81:c2:32:16:6f:f5:40:62:12:
7f:a5:c1:71:67:c3:95:65:ea:10:9c:f0:d5:a9:be:eb:0a:7d:
74:dd:7c:7d:0d:e6:56:49:e3:7c:55:af:e4:f8:82:06:ac:a9:
c3:75:0f:2b:4c:dd:54:76:67:98:e8:dc:f2:24:fb:f4:a3:e2:
3c:8b:fc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:26:15 2026 by rpki-client