Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
File: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft (raw, json)
Hash identifier: e4cOFX2YQgS0UE1kVRvfBDvCXaZSingDr/KULTBSlxc=
Subject key identifier: B3:A8:74:55:24:C9:CD:BF:54:1F:D6:53:49:2A:73:A1:45:A3:CA:9A
Authority key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
Certificate issuer: /CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Certificate serial: 01A132FE11812A166DCFAA4C252D4CE482D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
Manifest number: 1955
Signing time: Tue 13 Oct 2026 02:01:13 +0000
Manifest this update: Tue 13 Oct 2026 02:01:13 +0000
Manifest next update: Wed 14 Oct 2026 02:01:13 +0000
Files and hashes: 1: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl (hash: kzEBy3LBU9U2kjkU4BMbi98Aqox+07z3pu/9UXZUWVQ=)
2: m5yvHicFnXm_Esifvf9nJ43HYjM.roa (hash: 2UG9meAu50+1K4RYnFNAIuouwlkL5D4Ox6KRSauQKrc=)
3: rI-1eY7TtxFeY70hEXPRG9r4SUU.roa (hash: 3yzUSLFgFbapDsLKTnHWd+eZDAnjuQ4IsvzD3dpVDZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:fe:11:81:2a:16:6d:cf:aa:4c:25:2d:4c:e4:82:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Validity
Not Before: Oct 13 02:01:13 2026 GMT
Not After : Oct 14 02:01:13 2026 GMT
Subject: CN=b3a8745524c9cdbf541fd653492a73a145a3ca9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c3:1b:b7:70:d3:08:6a:dd:dc:67:d1:62:67:
8f:b1:14:7e:2f:e8:39:f9:10:fa:a1:40:f6:89:61:
10:07:10:17:74:09:b7:f9:59:fd:21:f3:58:86:20:
4c:07:b2:c1:01:f4:88:62:c8:27:af:fd:bf:94:39:
f8:5f:5f:34:fa:18:8d:3e:2e:a8:4c:10:e9:6d:99:
07:50:fc:a4:98:55:a0:3c:a3:14:6e:9c:62:d3:31:
4c:c7:a1:86:68:0c:56:09:8a:cb:6f:99:f0:17:03:
ae:b6:44:83:f2:22:48:5b:40:62:ea:f8:75:93:8f:
9c:a9:ee:61:6e:83:20:f4:3c:84:25:49:7a:4d:e6:
58:64:b8:51:94:60:d8:3c:f0:e7:9f:ea:7e:29:6f:
b9:48:f9:28:a6:96:ec:00:2c:3a:95:a1:16:47:d6:
cc:4a:8b:48:1a:3c:dd:38:de:39:1a:63:6e:e1:07:
fb:7d:ac:fb:7c:92:b6:00:20:4d:ff:cf:ea:01:a8:
d0:22:d5:a3:6f:8b:83:c4:a9:85:4f:9f:15:c4:02:
02:01:a8:89:fc:12:b0:19:94:b1:7e:6b:df:56:4b:
21:00:17:07:97:32:40:f0:e9:33:07:e5:ad:e1:18:
e8:5e:9d:89:33:a8:42:1e:ce:e9:ae:82:a5:b4:32:
7c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A8:74:55:24:C9:CD:BF:54:1F:D6:53:49:2A:73:A1:45:A3:CA:9A
X509v3 Authority Key Identifier:
keyid:EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b3:51:28:a4:fd:cb:5e:9b:9f:6f:c2:01:7f:f0:1c:d0:d3:
f0:da:0c:50:c4:8c:1a:3c:09:ba:00:5f:69:2c:8e:a9:6f:f4:
28:ad:c3:61:19:4a:3e:84:28:54:09:ce:8f:5b:57:01:36:e3:
47:1b:71:74:a1:51:b8:15:fb:ff:78:4e:89:3c:9e:4f:9e:95:
5f:df:1c:ce:b0:5e:87:de:5c:03:79:8c:16:27:67:6a:5e:67:
c2:98:43:db:7f:36:b1:1f:13:64:66:e3:00:21:ac:b4:3f:e2:
12:eb:96:0f:8d:aa:7e:50:7e:5e:e9:bc:ed:c3:bc:f0:4b:9d:
69:14:81:01:c1:8c:c2:2f:ec:01:e5:44:74:9f:5c:c9:e5:a8:
51:cd:3a:f3:51:f7:1e:3b:44:6b:c8:1c:e6:42:29:bb:fa:10:
ec:91:8d:f7:33:dc:3c:52:c2:56:48:37:88:89:26:c2:63:3d:
bd:e0:53:70:25:c4:7f:63:90:3b:bd:40:65:af:06:e7:be:55:
ae:3e:1b:ab:8e:4c:3b:40:f2:98:8c:b2:fa:8f:37:ad:26:66:
41:a1:71:0c:42:bf:67:d3:66:41:dd:16:6b:fd:f0:56:f0:7f:
d3:6c:00:76:0c:74:be:94:26:c2:54:bf:7f:74:0f:e6:1d:aa:
b7:24:3f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:33:40 2026 by rpki-client