Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
File: 7T_3g2Uw0cR09NCItrNiJPv2mC0.mft (raw, json)
Hash identifier: VmPZDAsvO+kxdpGlaFDBU64WnBehTewgWTFH5SDSXSY=
Subject key identifier: E1:2F:B8:56:DF:AD:F0:DF:D0:CD:D2:80:7E:81:49:23:06:97:C6:53
Authority key identifier: ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
Certificate issuer: /CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Certificate serial: 01A0F97D2975AB318F460CB27A1EF2D779A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
Manifest number: 1A80
Signing time: Thu 01 Oct 2026 22:02:04 +0000
Manifest this update: Thu 01 Oct 2026 22:02:04 +0000
Manifest next update: Fri 02 Oct 2026 22:02:04 +0000
Files and hashes: 1: 7T_3g2Uw0cR09NCItrNiJPv2mC0.crl (hash: yU5PcS4I5PNlvb3NxXxLRdF1p+hm7GfFhYQ8g9Yup0M=)
2: dDrbN1EnOvhkFc0_xZRFXvcNr40.roa (hash: 4F6zFoAlaZyrQw6r2Sapl4Rve7y38xHZ2sxhWgQcUxI=)
3: vqQIJ63USJ6tNbfIvkmeDNaWV-8.roa (hash: OsN69G3y8PdNZsFJ8bznX8F2lLtEi2mXTwt/+VGM68k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:7d:29:75:ab:31:8f:46:0c:b2:7a:1e:f2:d7:79:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Validity
Not Before: Oct 1 22:02:04 2026 GMT
Not After : Oct 2 22:02:04 2026 GMT
Subject: CN=e12fb856dfadf0dfd0cdd2807e8149230697c653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:51:56:14:49:44:43:92:1b:66:c8:d8:04:c4:
3c:20:c0:65:09:d8:e2:4c:00:75:50:94:88:b3:4e:
18:75:e8:23:9f:e3:76:a5:12:d1:d1:90:f0:01:f8:
59:90:21:e9:15:f1:1e:b8:1f:ec:c9:96:e7:be:cd:
40:f7:05:f0:01:ea:3f:43:db:89:0c:ee:af:bf:39:
0a:01:4f:e0:e9:99:5d:a1:71:ca:a0:a9:5b:a4:67:
27:ad:b8:d7:ce:4b:3e:b6:1c:70:02:79:b7:31:35:
e4:92:c9:e4:c3:aa:68:17:c5:1b:20:2e:f9:c0:31:
b6:51:89:3c:03:6f:99:c5:18:ed:cb:b9:54:ce:b8:
88:5e:e1:09:21:a1:af:6a:e5:7b:a1:a2:5f:d2:95:
59:a1:1d:06:38:5a:86:6c:28:aa:0f:91:1b:7d:d0:
1c:54:f2:40:e8:f0:16:c9:33:ce:80:6a:f2:36:8b:
e5:3f:47:32:5d:7c:bb:a5:99:52:49:3e:ec:a8:0a:
d8:6a:1e:b5:25:f8:f3:66:11:25:6a:e0:38:ba:2a:
0c:e6:52:48:85:9a:4e:5a:dc:9b:6e:64:9e:f2:65:
38:96:04:7f:84:ed:e8:a5:02:0c:12:5a:5f:a4:9e:
96:d5:f1:77:4b:2f:e8:97:64:8b:d0:75:f5:50:bd:
56:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2F:B8:56:DF:AD:F0:DF:D0:CD:D2:80:7E:81:49:23:06:97:C6:53
X509v3 Authority Key Identifier:
keyid:ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f6:4c:6a:a4:0a:97:32:2c:41:f7:d6:a0:c3:69:1a:1b:f0:
df:a9:d1:f8:4b:80:82:e1:99:3b:e9:17:39:73:c6:86:ec:5d:
e9:a5:ec:04:d3:3f:a0:b8:01:28:d2:a0:ac:c7:17:8c:69:b6:
31:87:56:3d:14:0d:d9:21:63:8b:81:8d:b4:6a:51:a9:cb:9b:
ba:1b:99:c3:aa:81:de:40:e9:77:b3:a0:7e:a1:87:ab:88:d3:
19:60:fe:0d:59:c8:b4:28:5c:4c:21:a1:44:09:bc:4f:8e:f0:
65:85:25:9c:2a:73:9f:43:d6:c2:11:85:f5:14:f0:b6:21:d6:
08:09:c8:01:04:dd:66:3e:81:95:6b:27:25:7b:30:a0:b3:b6:
be:7e:4a:88:a0:57:87:b6:85:b1:0e:48:9a:5b:8b:3c:c1:68:
18:d7:0f:53:95:3e:a4:c0:f3:ab:6a:a6:48:1b:3f:ea:ff:31:
d5:95:36:18:4d:69:32:ca:9f:d4:7e:ed:c0:45:17:ae:1a:c2:
76:de:26:d6:62:ca:cd:65:8b:45:57:ca:12:35:0e:f6:49:bf:
2d:df:d8:f4:ba:82:32:43:6d:37:9d:3f:f4:a8:28:c5:6f:69:
ca:d2:d6:b7:b6:53:ae:01:f8:6a:09:e0:df:3e:7e:c0:58:93:
06:18:2b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 02:57:38 2026 by rpki-client