Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft
File: 7FraDckAoTyDtwrD9Yf7jC4d8DA.mft (raw, json)
Hash identifier: K28hlA8F833Jr+7KpE5/3nPQ7NZ8uXvPHTWdcpJTsuM=
Subject key identifier: 03:07:E4:F1:72:FF:33:56:9A:95:C1:7A:04:EF:4A:B1:63:87:EB:21
Authority key identifier: EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30
Certificate issuer: /CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
Certificate serial: 01A1C1E60238574A381B54C85FC6AAFB9FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft
Manifest number: 1AF5
Signing time: Mon 09 Nov 2026 20:00:38 +0000
Manifest this update: Mon 09 Nov 2026 20:00:38 +0000
Manifest next update: Tue 10 Nov 2026 20:00:38 +0000
Files and hashes: 1: 4h2CKrEG0zBXhUvh0QRtju6nDO8.roa (hash: 7r8KAs2j6Yww58kBTUpyYdSq5ad0gOR+q03EcWoTYfs=)
2: 7FraDckAoTyDtwrD9Yf7jC4d8DA.crl (hash: qWfLa5P2FtBGhU6PrX+GvEPjrDhZMz/K5CIumaBCUfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:e6:02:38:57:4a:38:1b:54:c8:5f:c6:aa:fb:9f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
Validity
Not Before: Nov 9 20:00:38 2026 GMT
Not After : Nov 10 20:00:38 2026 GMT
Subject: CN=0307e4f172ff33569a95c17a04ef4ab16387eb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:bf:5a:f1:4b:4e:f3:11:f8:bb:94:ea:64:
c6:af:c8:33:16:75:c8:64:1f:b2:96:eb:c1:49:b9:
30:7a:70:b3:ad:0c:72:3a:e1:7e:7e:f9:82:a5:9e:
11:8a:df:17:d7:b2:65:b2:b4:52:15:92:2a:a4:40:
e2:d1:69:7c:1b:4e:74:4e:2f:7c:01:f3:c4:05:e4:
a1:3c:f9:9a:2b:5e:b0:d6:cb:09:e9:d9:ba:46:32:
c4:24:e7:c9:c9:25:87:11:c0:aa:85:5b:28:b8:1e:
a9:49:bb:cc:64:50:2a:c7:f3:15:d9:2c:8e:a7:e5:
f4:a4:79:ce:67:fa:4f:88:43:7d:a1:9b:fb:97:b9:
8c:cc:5a:eb:82:66:ae:a1:1b:b6:8c:5e:55:09:18:
27:da:26:13:4e:5a:8b:15:cb:ba:23:84:81:d9:41:
28:68:0c:1e:d4:25:a6:ed:01:ef:c2:50:72:84:66:
00:95:8a:10:77:f1:2a:92:09:06:20:80:30:7e:7b:
91:a0:2d:cc:62:bd:70:d7:ff:ce:f1:20:f7:4f:b8:
66:55:5f:05:de:d3:ac:dc:86:7c:35:e9:6e:db:4c:
94:c8:24:b2:8b:d7:f6:3a:1c:45:ac:12:ed:a6:f5:
b1:2f:f3:99:2a:f9:f2:8e:12:81:df:bf:ad:35:90:
19:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:07:E4:F1:72:FF:33:56:9A:95:C1:7A:04:EF:4A:B1:63:87:EB:21
X509v3 Authority Key Identifier:
keyid:EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fd:24:2b:9c:36:0c:1d:25:07:3d:88:2e:86:08:f0:7a:37:
81:ff:33:47:ac:bc:23:ad:71:41:4c:f8:b1:07:c4:e3:e8:ca:
29:9c:b2:d3:3e:aa:f9:cf:f7:aa:cb:9c:5f:f9:10:c8:db:e3:
ef:43:7e:69:fd:15:26:d7:2f:02:e8:fa:e7:8f:b8:95:4d:5a:
15:70:5f:01:ed:bb:77:3c:26:3c:93:e0:9f:e9:ea:72:af:5c:
e9:44:63:96:68:09:0b:2f:d9:d5:04:c1:10:8f:85:6c:2b:23:
05:59:01:f1:7e:a6:2d:be:cf:97:7c:68:4f:52:f2:2b:f8:9e:
0e:40:f6:e1:b1:0d:4f:0c:16:f8:ab:bc:c0:3e:53:a8:40:22:
40:09:a4:6d:d2:2f:c3:10:6c:83:52:d9:90:f4:f6:68:23:f5:
2f:ae:53:67:43:95:13:fc:91:73:56:2b:b0:e9:bd:fb:ee:f5:
8f:bc:99:60:bb:fe:fe:5c:41:12:4b:ed:9b:5a:09:69:68:72:
8b:98:82:07:23:c8:10:6e:8d:db:b5:43:5c:81:17:20:33:f7:
f9:44:b4:2c:ea:de:18:a5:c9:a7:65:35:0e:88:59:ca:ba:1f:
f3:11:93:9d:bc:31:71:92:35:03:51:de:f4:46:b0:f3:19:a2:
84:b3:7b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 02:00:40 2026 by rpki-client