Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
File: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft (raw, json)
Hash identifier: YrFLeJZA0i1zHjbWO92LAo1SSh5risaLIg4JNmRfyu0=
Subject key identifier: C6:02:71:54:8C:E8:96:FC:DB:ED:21:F8:4F:2B:63:CE:6F:66:78:F7
Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
Certificate issuer: /CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Certificate serial: 01A0E92E1A446B45A3C91BC531B28197C0DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
Manifest number: 17C3
Signing time: Mon 28 Sep 2026 18:01:47 +0000
Manifest this update: Mon 28 Sep 2026 18:01:47 +0000
Manifest next update: Tue 29 Sep 2026 18:01:47 +0000
Files and hashes: 1: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl (hash: SepKUB9YO09OS2gyBo8UAHOV1m/zpDhkD4FtA4F7x6I=)
2: Qy_dYjktdWTMwKlvlGZGCPvqukk.roa (hash: HyB9pQQ7gH7LCMcZGQN6Qp3fcmCpTOcafmUokwLnbLM=)
3: knZABU6A8bvYatZnGIApuHOdxF8.roa (hash: ZG17hdxOoYWoARbjcCtZd2S+SWHd1m7LFGZzi15/I2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 18:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2e:1a:44:6b:45:a3:c9:1b:c5:31:b2:81:97:c0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Validity
Not Before: Sep 28 18:01:47 2026 GMT
Not After : Sep 29 18:01:47 2026 GMT
Subject: CN=c60271548ce896fcdbed21f84f2b63ce6f6678f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:61:33:21:17:19:c1:3c:91:c9:e5:35:37:f5:
8d:08:ea:91:f2:a8:65:e0:b4:6d:11:30:9a:13:1f:
38:bd:35:08:37:17:75:8e:82:96:d4:e6:1f:de:07:
b4:c8:5b:26:3c:0c:41:59:d1:df:8f:2a:d8:67:00:
63:da:9c:9e:01:82:18:23:f0:cb:df:c2:ab:bc:a6:
8f:76:53:84:ee:46:5c:00:9e:58:e5:f5:7c:a7:e5:
4e:47:40:82:51:8b:b6:2f:5f:21:d3:0e:61:bd:61:
c5:5d:31:17:9c:1e:a6:bc:f5:6b:ed:a0:34:f9:74:
9f:04:80:94:62:cb:fb:3d:74:9c:9c:ba:f4:f0:6a:
1a:b8:33:02:ac:a9:84:76:97:12:cc:01:86:31:d1:
df:12:9f:b3:40:1b:12:58:72:26:88:03:f6:b6:3e:
51:9c:34:10:d0:7a:1e:6f:04:b2:45:72:47:ed:70:
5b:61:76:76:31:7e:c3:0e:19:2f:b4:4c:92:91:87:
cd:cf:6d:02:12:69:44:a2:8d:93:06:82:b3:8b:39:
a9:8f:ce:d2:db:e3:f2:f5:d0:eb:ea:18:06:f3:3c:
6e:94:db:b1:b3:d8:59:95:ec:4c:d1:0a:9b:e0:8d:
d8:09:fe:2d:f1:20:9e:d6:47:d4:89:ee:b2:14:b9:
c7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:02:71:54:8C:E8:96:FC:DB:ED:21:F8:4F:2B:63:CE:6F:66:78:F7
X509v3 Authority Key Identifier:
keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:50:93:d6:c8:4f:72:e4:87:90:ec:75:c6:35:f4:69:ed:46:
45:93:53:3c:b2:26:e9:98:5d:f6:0f:8c:ec:95:d4:94:f3:b6:
48:27:2f:86:88:5d:05:78:3a:fe:2f:56:83:ee:77:96:9c:97:
d8:cb:80:a0:b1:68:1e:f1:48:32:8c:f9:09:a7:22:b2:55:e5:
61:c7:4c:4e:1a:23:59:47:95:26:eb:0a:3d:67:4d:53:6b:93:
75:e3:b0:2c:0d:b3:70:9a:a6:cf:d9:c4:69:1b:0e:a5:c7:47:
83:6c:b2:a8:d5:39:5a:75:06:7e:e6:8b:af:0d:eb:e7:c5:e8:
37:4e:cb:87:75:4c:32:e8:5b:18:5f:11:c8:ee:39:a6:cb:9a:
27:39:7f:4c:bf:81:05:e1:66:04:49:1c:40:35:b5:65:b7:16:
38:9b:37:80:07:88:3c:57:db:f1:04:7b:f2:d8:df:91:19:e1:
b7:69:79:5c:52:c7:3c:06:e7:35:7f:0d:f1:aa:92:b9:d2:a3:
79:ea:b9:ba:c0:19:cb:2a:40:0f:be:a4:a3:1c:39:3e:33:fc:
e6:49:a1:58:1e:14:4e:b2:c5:45:62:0b:ee:77:66:69:0b:ec:
2a:68:e4:d7:a6:6f:95:3d:5a:ee:3e:d8:ba:d7:07:b6:72:e0:
e7:2c:84:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:49:47 2026 by rpki-client