Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
File: 7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json)
Hash identifier: /nTP8ygvvcnsr5DGDCblOvhAt5XtX1tl1gIapCcbWp4=
Subject key identifier: ED:25:15:C4:48:15:68:D7:5B:F8:87:16:4A:7C:C5:4C:8B:74:D1:A6
Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
Certificate issuer: /CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Certificate serial: 01A0C39F98B2CC0B498C002CFEF058A57043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
Manifest number: 091C
Signing time: Mon 21 Sep 2026 11:00:11 +0000
Manifest this update: Mon 21 Sep 2026 11:00:11 +0000
Manifest next update: Tue 22 Sep 2026 11:00:11 +0000
Files and hashes: 1: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: BGN97GRVWBw01FjGG0kJ9xjNBzQKx5Mq+7biM76v5iw=)
2: nIgfPArQS9tv1SFmbcff1iaV-ac.roa (hash: LmX0nAZ4dVW7pJ2OY2bERveF61BobTLkyj91uEdpXzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:98:b2:cc:0b:49:8c:00:2c:fe:f0:58:a5:70:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Validity
Not Before: Sep 21 11:00:11 2026 GMT
Not After : Sep 22 11:00:11 2026 GMT
Subject: CN=ed2515c4481568d75bf887164a7cc54c8b74d1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:84:c3:05:35:4d:f6:67:90:8e:ec:1d:86:8c:
ee:fd:9e:35:c8:c2:3c:b2:84:38:19:f7:66:74:87:
ab:fd:7c:8e:10:64:77:ad:f0:04:dd:42:38:17:db:
c2:32:13:6e:84:5a:03:d8:24:91:48:8d:f3:82:99:
95:20:c8:55:ff:a7:46:9e:06:0d:3f:49:d5:e3:d2:
f4:2e:72:fb:6c:a9:19:2c:df:f9:d8:e4:5d:bf:66:
53:1a:f2:fb:6a:3a:ac:52:33:8d:10:e8:2e:70:a9:
6a:c3:9f:7b:35:f7:cd:51:c6:93:07:d9:8c:ad:2d:
f7:9a:d9:ea:a5:b1:01:0e:e1:a2:20:ea:9d:74:7a:
ac:75:84:70:50:fa:2f:37:40:c9:1f:d3:5b:74:7a:
f4:6b:be:26:59:b4:70:ad:b1:f4:a8:7d:e5:21:9e:
68:a3:11:4f:fb:b6:91:76:e8:53:18:98:a4:c7:9f:
5a:c9:22:12:8e:19:23:bd:85:d3:0e:f8:aa:b2:6e:
74:1f:d7:2e:98:c3:48:fa:53:a4:50:50:eb:2c:b9:
c1:16:ab:35:3c:8d:0d:2e:00:f9:7b:85:65:4e:8a:
95:07:8e:42:56:e9:ab:a9:71:78:91:5d:13:37:46:
25:66:47:30:18:0a:4a:14:9d:50:ff:02:5f:63:25:
89:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:25:15:C4:48:15:68:D7:5B:F8:87:16:4A:7C:C5:4C:8B:74:D1:A6
X509v3 Authority Key Identifier:
keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:dc:bc:56:5d:cd:c4:73:e3:3e:a6:5b:02:95:b9:e8:0f:75:
92:89:e7:ff:78:c6:e9:7e:42:cd:38:4a:88:09:2e:56:6f:ef:
b6:b8:95:be:0f:54:5b:42:c7:e3:0b:96:a6:55:12:07:00:21:
4c:92:ea:27:b9:0d:22:6d:bd:74:39:92:c8:a4:4f:08:95:99:
8c:ba:34:f6:9a:82:68:43:3e:be:51:b2:ac:f4:d3:c2:99:61:
95:4c:80:7d:13:3d:b6:72:46:79:6b:66:11:e9:c4:ee:f3:07:
ce:cc:b8:84:71:31:88:1e:dc:ce:c0:94:dc:36:78:0d:d0:1a:
6a:c9:f6:87:64:18:a2:a8:70:fb:a2:72:86:3e:02:ee:98:d7:
5f:de:62:4d:cb:f0:a4:4f:b8:7c:eb:cd:e7:1b:0f:7b:bc:73:
a8:6f:20:04:e4:1d:7e:d8:dd:dc:2d:61:f4:db:5d:70:d1:2d:
2d:8d:74:5a:3b:38:b3:09:b4:70:7c:81:b7:f0:eb:e4:42:ff:
5c:54:15:d4:4c:e9:21:45:2d:83:c0:d6:ec:ca:f3:39:84:3b:
7a:c8:3b:1a:7b:75:ca:01:3b:a4:da:ce:6c:fa:bd:82:68:50:
c7:7a:60:09:94:fc:90:24:c3:90:1d:f5:28:d6:02:70:f6:e1:
f7:fb:43:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:22:14 2026 by rpki-client