Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
File: 7a8O0eMJHntcmc5DysEDEFWw84U.mft (raw, json)
Hash identifier: lEgzo88YINSWsUPQ29JSROH6iy4jRni4gWJydt78sSc=
Subject key identifier: CD:51:4F:50:DC:96:0C:C4:E1:AA:E5:EE:B5:8D:88:AC:34:1E:4D:B4
Authority key identifier: ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85
Certificate issuer: /CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
Certificate serial: 01A1C141136360F411425F182624AE1D2FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
Manifest number: 1A7C
Signing time: Mon 09 Nov 2026 17:00:29 +0000
Manifest this update: Mon 09 Nov 2026 17:00:29 +0000
Manifest next update: Tue 10 Nov 2026 17:00:29 +0000
Files and hashes: 1: 1-U4s3a3Bfr8x0BNQ276txXwGX8E.asa (hash: MAgBla8t3wpL7Ntd2tkodMmd8SX0642dhUATO9nH6SY=)
2: 7a8O0eMJHntcmc5DysEDEFWw84U.crl (hash: e9UNr6umnIXfbB8bd2DUqhzFzrPV7sknLYeOOdq49gU=)
3: gcM2MkjCNI7Or-Ri3zEoxmmPtNY.roa (hash: OB4Imv/J3RONg3snd4JZ6fz7IZodU+M9MO5WWwLKUWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:41:13:63:60:f4:11:42:5f:18:26:24:ae:1d:2f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
Validity
Not Before: Nov 9 17:00:29 2026 GMT
Not After : Nov 10 17:00:29 2026 GMT
Subject: CN=cd514f50dc960cc4e1aae5eeb58d88ac341e4db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:51:fc:0c:d2:3e:49:32:3f:55:9b:5c:7a:
aa:df:e5:94:74:12:3f:8f:69:61:3a:db:b8:f6:c6:
d9:66:dc:d4:b3:b9:1d:b4:cc:22:9f:5e:00:36:d7:
fd:f1:3c:08:01:a0:c0:e0:58:a5:e7:be:f7:21:3a:
ee:e2:e0:ac:1a:5e:63:e3:71:66:4a:bd:91:ed:c0:
c0:7b:7c:84:f7:0d:64:c5:b1:d4:fd:79:8e:fc:73:
ee:63:a6:73:6c:ea:8f:43:27:5f:f6:21:df:96:01:
1f:59:bf:68:29:d1:54:22:40:a2:15:b9:61:5b:70:
93:b8:46:1f:71:5f:78:b8:41:2b:6d:17:da:f0:3f:
c5:41:61:06:74:9f:15:a0:0f:c9:b0:6c:31:27:f0:
58:aa:95:84:7d:40:ec:a9:46:89:f6:e5:f4:4d:76:
59:d5:d5:69:b3:3b:ec:ea:23:b6:8c:8c:ca:d4:14:
a8:81:c8:de:9e:a5:09:26:2a:c0:f7:d7:23:dd:5f:
66:ce:af:fe:56:ff:90:6b:cb:9f:4f:03:aa:48:b7:
48:e6:09:1a:45:83:35:69:46:d6:1c:0a:b5:fe:b7:
1f:2a:16:ff:4b:05:ee:7f:18:67:1b:d1:73:81:51:
b9:11:5e:3f:7d:79:b7:a9:57:bc:a2:f8:e7:9a:81:
bf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:51:4F:50:DC:96:0C:C4:E1:AA:E5:EE:B5:8D:88:AC:34:1E:4D:B4
X509v3 Authority Key Identifier:
keyid:ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:93:4e:fd:61:a5:70:0a:cb:31:47:47:a9:f9:18:79:37:1d:
5b:3f:02:d7:16:9f:96:d0:44:43:66:f2:0b:30:87:7a:ea:51:
e7:bc:02:88:e1:cb:50:07:03:0a:c0:63:84:9d:09:9f:51:3c:
8f:84:6d:7e:32:b9:52:a0:d8:0d:46:4b:13:b2:2a:a7:41:8b:
47:f6:80:62:7c:42:f5:26:aa:f8:3b:d3:23:0c:9b:11:e8:61:
4a:fb:5e:04:3d:62:aa:57:a9:b7:6a:3c:01:29:75:a8:75:a4:
54:68:67:ca:36:ff:63:e5:c5:9b:64:ef:89:41:5f:48:39:9c:
04:39:21:b2:ed:de:9d:2e:05:c1:04:4b:54:e3:60:e0:87:a2:
af:76:a6:61:97:75:3a:b3:ec:73:eb:a4:b4:9a:82:62:24:f6:
eb:a8:a4:fe:0f:47:51:1e:3f:16:c7:ce:b7:3d:1b:94:0d:47:
96:3e:94:51:97:ea:ad:8c:90:32:a7:b9:b1:e5:4d:24:41:ef:
bc:14:fb:30:f6:44:e5:16:78:1e:7f:2e:7c:ff:30:89:0e:67:
52:91:f2:00:24:9c:32:cd:ff:fb:50:69:34:80:0c:82:ef:e4:
70:de:91:ca:9f:42:98:70:cd:24:33:e7:ff:cb:d1:cc:e9:c4:
43:bd:18:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 04:36:49 2026 by rpki-client