Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
File: 7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json)
Hash identifier: 52YhVYGmebHjHPoeDggtPnJd1DlWykQ+E0OPSRPluxo=
Subject key identifier: F3:28:D0:EC:9B:72:F4:58:88:0A:1E:B3:6B:6C:AB:68:03:91:2F:D5
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial: 01A0E99C024456A8F1B285DED76E9C53848F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
Manifest number: 1A7B
Signing time: Mon 28 Sep 2026 20:01:50 +0000
Manifest this update: Mon 28 Sep 2026 20:01:50 +0000
Manifest next update: Tue 29 Sep 2026 20:01:50 +0000
Files and hashes: 1: 0HZFumgyvQaDDTRTrqWFDMHfuo8.roa (hash: 99s+y069IP+8cLI0Fct7Tuh7Nr9yOVSbyI/w/nS1ohM=)
2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: LpSePAMF7JLi/jrp+8BWQyxxzz7+I7Kqya+ZjQKVrq0=)
3: JfyoN48fk_c9ic3qKJlpVrYlm4U.roa (hash: YO7Xai4MFWdK4ki2bUDwA4JpC3JpucBc+HE0rjiH0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:9c:02:44:56:a8:f1:b2:85:de:d7:6e:9c:53:84:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Validity
Not Before: Sep 28 20:01:50 2026 GMT
Not After : Sep 29 20:01:50 2026 GMT
Subject: CN=f328d0ec9b72f458880a1eb36b6cab6803912fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:4d:49:99:ea:77:18:94:0f:f6:df:fb:0c:
2e:27:0b:ae:6e:a7:18:ff:cb:49:8c:ce:1f:6d:33:
10:6e:58:bf:73:92:e7:52:60:9d:fa:aa:38:f8:88:
71:aa:34:3b:0b:04:d4:0b:47:1f:4c:47:13:37:d1:
f3:05:01:06:a5:95:aa:f9:f2:43:34:13:ff:17:a6:
01:16:94:24:cf:1f:81:52:d8:6e:0a:ae:09:96:90:
5d:65:4e:10:e2:18:38:95:73:64:d8:fd:bf:aa:1c:
2c:4b:0b:06:03:a7:17:04:c5:ca:0d:f3:fa:df:93:
bd:7d:b5:f5:e3:af:78:85:38:ed:13:d1:14:c4:c2:
a7:48:d4:47:a8:a4:cd:d7:25:8e:ab:36:a7:ba:e5:
a4:3c:ed:a2:69:6f:75:70:c5:0e:8f:1e:db:f3:f9:
e4:87:c8:73:ab:68:84:6c:86:a3:70:b9:1d:ee:9c:
ef:d1:79:3a:22:64:9f:ef:5a:ab:99:2b:5c:d1:ea:
47:cb:c3:34:ed:b0:ff:ca:02:49:a3:ce:26:f4:c2:
e7:58:26:0f:c8:51:f9:92:3b:0c:b8:ea:6b:62:7c:
6e:c3:6c:73:6f:77:f7:10:04:77:c6:7f:c1:0c:c5:
b3:cb:19:41:ee:51:c6:72:d3:b9:f1:21:72:b4:02:
b5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:28:D0:EC:9B:72:F4:58:88:0A:1E:B3:6B:6C:AB:68:03:91:2F:D5
X509v3 Authority Key Identifier:
keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f7:50:db:32:d5:d0:05:f5:66:90:97:ff:19:5a:a7:6f:35:
09:c0:42:77:2d:53:5e:01:47:bb:e8:55:21:25:76:77:42:22:
5c:f2:05:b4:bc:0d:b0:c5:fc:75:4f:e8:51:f6:52:fa:ad:74:
ed:c6:30:75:e4:a4:53:45:ac:10:68:81:9d:73:b3:f2:94:28:
ae:bf:1a:aa:5a:d7:c0:d3:bc:a8:c4:76:af:34:1a:38:8f:4e:
fe:5b:83:e4:dc:8a:44:86:46:73:87:aa:ff:54:8d:10:e6:22:
f8:45:37:b8:f5:96:4f:d1:02:73:4e:c8:dc:25:37:1f:99:b3:
4a:e5:9b:6c:07:40:bd:a5:f7:40:d3:be:08:1d:56:e7:7e:56:
e1:04:a7:8b:89:ca:d7:a1:9b:4e:a6:51:f6:8a:92:ac:bf:e8:
a4:2e:83:d1:b2:a7:76:24:38:ad:4c:67:5b:72:cc:98:04:d1:
c3:bd:30:ab:76:f3:c0:29:bf:db:1e:65:81:17:0d:90:4e:86:
86:2d:c8:df:b6:87:16:ff:83:96:51:17:e3:c4:bf:88:a3:68:
44:44:97:b5:08:11:e8:2d:e2:74:81:ed:0b:93:f7:ee:f4:5a:
f9:5c:ac:bc:03:86:1b:cc:2b:63:da:3e:36:77:fa:ea:28:6d:
19:83:ce:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:02:59 2026 by rpki-client