Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
File: p-7aZdzUOH1yJwBcHhOgbUSHe28.mft (raw, json)
Hash identifier: HoG53+MDv005i/RftDMZzIoHfeWEhOKN3dGyWYYE2ZA=
Subject key identifier: 6A:53:F7:67:45:FD:A1:FA:E7:1A:AF:31:DC:71:F5:E3:1D:32:10:23
Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Certificate issuer: /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Certificate serial: 01A0E02AC627EDC819D2267B1E9BB6C2C22D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
Manifest number: 1785
Signing time: Sun 27 Sep 2026 00:01:34 +0000
Manifest this update: Sun 27 Sep 2026 00:01:34 +0000
Manifest next update: Mon 28 Sep 2026 00:01:34 +0000
Files and hashes: 1: 2U0mDkF6k188FlI68TZ1uJWmy1k.roa (hash: 7JEOUa3UIN+/J9E0Zd5VhYU2fI+uSkBnOTYRU58DUPc=)
2: p-7aZdzUOH1yJwBcHhOgbUSHe28.crl (hash: aWzs2ka0mcjO3zDqbpY8W43tIHWIvhCNjrEsgfopELM=)
3: tBq-qaCe3hrl4_W-MDsRfd4wxUc.roa (hash: LU9RPoPeOkovwLTGRp1rw5FM6GQYSbQNsjGB+DdEmmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:c6:27:ed:c8:19:d2:26:7b:1e:9b:b6:c2:c2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Validity
Not Before: Sep 27 00:01:34 2026 GMT
Not After : Sep 28 00:01:34 2026 GMT
Subject: CN=6a53f76745fda1fae71aaf31dc71f5e31d321023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ad:fd:d5:92:04:65:95:38:54:d6:9d:7d:87:
af:34:74:33:34:56:f0:23:34:31:3e:66:ad:1b:18:
03:15:63:34:c2:57:70:a1:27:77:77:c7:bc:9b:b3:
51:9d:48:a4:43:a6:d7:b8:86:75:7d:3c:64:ac:7e:
3b:9c:98:91:3b:ea:4b:da:c7:83:37:db:d2:20:d7:
6a:94:d6:2e:e1:bf:e9:6e:81:1d:05:03:d9:46:89:
e8:26:a0:1e:fd:71:ea:0a:b3:03:5b:ff:4c:30:09:
eb:bc:6f:57:41:de:9e:59:10:b3:78:9d:83:9e:57:
6c:7e:89:fe:50:2f:02:13:4e:14:c9:c0:05:34:76:
80:09:47:8b:b9:af:5a:e2:66:a9:57:f5:39:2b:c2:
15:ef:eb:f7:48:9d:54:01:d4:50:7b:39:5a:bf:d2:
36:dc:59:9f:ab:ed:78:b5:e0:d6:46:7a:20:eb:e0:
63:9b:29:96:a4:85:90:bb:4e:62:e2:01:35:8d:10:
97:16:6b:37:0c:bb:24:a2:db:2b:4b:86:45:b2:d9:
3e:da:03:7d:2a:cb:1a:2b:47:fd:ef:f1:d8:13:cf:
14:fc:39:6d:0c:04:7c:68:e7:b8:ff:2b:be:5e:a5:
f3:d5:de:a0:58:40:1b:84:11:7e:97:3d:71:84:b3:
0f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:53:F7:67:45:FD:A1:FA:E7:1A:AF:31:DC:71:F5:E3:1D:32:10:23
X509v3 Authority Key Identifier:
keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4b:e0:e6:2d:43:75:89:bc:66:40:4e:35:45:82:78:6f:f6:
44:e6:10:b7:4e:f1:5e:b2:eb:51:6d:25:80:5e:47:5f:63:1d:
20:18:eb:c2:e0:9d:c4:3c:de:dc:bc:19:03:34:af:c9:5d:8f:
d3:9b:12:e9:16:6a:29:ce:b6:f7:15:e6:77:13:c5:eb:55:89:
82:18:de:22:e6:dd:31:85:e4:f8:c4:11:15:d5:6e:55:e0:9d:
54:0d:ba:e1:23:58:36:35:c6:8c:c4:4e:4a:73:6e:51:00:5f:
26:f8:83:2a:93:c5:61:09:76:4d:6f:ce:8b:dc:70:fb:c3:3e:
e5:d8:91:b0:a0:a0:42:7e:05:07:b4:10:70:d5:2e:c3:6e:0c:
4d:21:50:98:1c:e0:7a:77:29:68:13:98:51:c3:de:f4:df:e1:
36:7e:5d:7b:15:8c:8a:ed:02:2c:77:b8:8a:e4:ed:85:db:ae:
81:20:cc:5e:dc:47:b5:5e:49:e8:84:1c:66:5b:c6:f3:2e:17:
9a:bb:25:8f:1c:44:9a:1e:65:60:a3:9a:77:e5:91:dc:f8:9e:
74:be:88:ad:df:db:82:41:42:6d:da:51:98:3a:a0:17:b5:c1:
ca:00:60:20:af:55:05:a2:50:aa:7c:dd:0a:75:19:98:12:ba:
f6:3b:f8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:51:56 2026 by rpki-client