Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.mft
File: 7DMgfRRKCUT1LoZxqRg5qDrJpvo.mft (raw, json)
Hash identifier: 3HWctDfk5g62paUrpHI/RFQa2c/YQ9Lt9Il4AkyGeew=
Subject key identifier: 41:95:CB:76:8A:9B:FE:E8:96:2C:79:C1:05:C9:86:60:C5:7F:A7:36
Authority key identifier: EC:33:20:7D:14:4A:09:44:F5:2E:86:71:A9:18:39:A8:3A:C9:A6:FA
Certificate issuer: /CN=ec33207d144a0944f52e8671a91839a83ac9a6fa
Certificate serial: 01A13C376C648267F3B46573F00B7207A852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DMgfRRKCUT1LoZxqRg5qDrJpvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.mft
Manifest number: 011D
Signing time: Wed 14 Oct 2026 21:00:27 +0000
Manifest this update: Wed 14 Oct 2026 21:00:27 +0000
Manifest next update: Thu 15 Oct 2026 21:00:27 +0000
Files and hashes: 1: 7DMgfRRKCUT1LoZxqRg5qDrJpvo.crl (hash: lP8PgDoQ4UNE4mbZuuTW9xWGEBKuGyCQhTjFSNbL0Xs=)
2: XbUrIbN32tx_I5q3CIy0eDpniyc.roa (hash: rSzXDaoG3c1rlucOs36GgG/tUP5/xd5PVZrM6moq2JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DMgfRRKCUT1LoZxqRg5qDrJpvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:37:6c:64:82:67:f3:b4:65:73:f0:0b:72:07:a8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec33207d144a0944f52e8671a91839a83ac9a6fa
Validity
Not Before: Oct 14 21:00:27 2026 GMT
Not After : Oct 15 21:00:27 2026 GMT
Subject: CN=4195cb768a9bfee8962c79c105c98660c57fa736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:58:a3:fe:05:65:67:3a:7f:e2:4b:84:a3:
46:ac:b7:ab:00:68:6b:db:9b:9c:79:ce:92:57:ed:
85:9e:04:c5:2a:bf:34:8d:a9:3a:f9:ca:de:b1:e0:
bc:a3:0e:a4:42:d4:ee:ab:0b:a5:35:b2:09:8b:64:
d2:90:6e:a0:1a:e5:d4:63:c4:01:fb:00:9f:86:ad:
b5:4b:b3:c2:ae:f6:47:96:c5:37:d5:34:56:da:47:
3c:23:d9:82:0b:f5:79:d1:be:61:1e:a9:d9:c5:d3:
bb:cc:3c:0b:0c:19:8e:dd:19:41:16:2e:90:09:ea:
e7:32:6c:a0:74:59:74:9d:55:e8:16:e4:be:0b:f0:
50:0b:f1:1a:a0:f8:34:be:2b:3c:9c:68:51:7a:79:
27:5b:9f:0f:c3:1a:07:1f:1c:d1:06:11:2b:8c:32:
e3:fd:d0:63:ab:d8:48:69:4d:25:2f:e8:0a:48:08:
f1:8d:25:26:5b:1e:25:de:ff:b6:67:01:59:31:57:
af:67:2d:69:eb:af:6d:0f:91:98:d2:26:29:97:f6:
98:e7:95:be:c6:66:4e:38:a4:dd:26:27:6d:e7:48:
7d:27:5e:a4:4e:9f:73:ba:e2:18:f6:d1:43:95:ca:
d5:b7:cd:f0:15:91:18:68:33:21:1a:f0:db:30:f2:
80:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:95:CB:76:8A:9B:FE:E8:96:2C:79:C1:05:C9:86:60:C5:7F:A7:36
X509v3 Authority Key Identifier:
keyid:EC:33:20:7D:14:4A:09:44:F5:2E:86:71:A9:18:39:A8:3A:C9:A6:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DMgfRRKCUT1LoZxqRg5qDrJpvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a9:7e:39:2b:10:a1:07:6e:1d:13:43:90:07:bf:60:4f:86:
1e:4b:c9:d2:f7:77:af:ee:99:8d:e6:ee:a2:5c:b3:2e:8b:37:
b1:b0:17:11:64:80:0a:45:a1:4f:3f:29:c4:dc:3e:2c:3e:08:
d3:a4:fa:cf:be:04:19:e9:07:03:86:cc:7c:da:23:c3:60:a1:
6c:9d:95:ac:28:3c:0d:5f:2e:7c:7e:2e:92:e4:bb:a0:f4:7b:
26:33:1b:e3:4f:8c:4b:96:5e:2d:c0:1f:87:b3:34:41:ff:28:
4a:33:41:1a:1b:bf:92:f3:52:00:a6:ea:a5:0f:3b:dd:47:1d:
08:e5:99:1f:7e:8d:d9:76:46:ce:09:7b:c6:48:b7:89:82:ff:
61:dc:bf:2c:af:21:f5:93:b2:3d:cd:78:22:9b:ae:df:38:bb:
44:89:cd:f5:fa:e1:ac:ca:0b:84:72:c5:06:43:3b:c2:78:2f:
d3:29:0b:6d:8b:07:16:27:f7:13:a8:70:37:5c:dc:66:08:36:
d7:1a:56:de:81:28:25:8c:14:71:3e:f3:39:dd:08:45:f8:27:
d5:56:a7:43:6f:c9:04:57:38:dd:34:1c:79:c2:a0:11:3e:36:
4a:cd:db:bc:53:94:96:fd:f5:8d:f1:f2:bd:61:ad:b4:6e:3c:
8e:a7:f6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:41:59 2026 by rpki-client