Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
File: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft (raw, json)
Hash identifier: SST3lKEkcA7zotxxuSbys8740NlifJ+6fOrp4GzLt+E=
Subject key identifier: 13:CE:7F:41:8F:C5:62:6E:D3:09:46:0D:82:3B:C8:1E:A6:38:84:AF
Authority key identifier: ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8
Certificate issuer: /CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
Certificate serial: 019FA82B45CFD086ED17AD541067D4EE768B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
Manifest number: 0671
Signing time: Tue 28 Jul 2026 10:00:35 +0000
Manifest this update: Tue 28 Jul 2026 10:00:35 +0000
Manifest next update: Wed 29 Jul 2026 10:00:35 +0000
Files and hashes: 1: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl (hash: REThg0gBuUmR62wtyjOpXk8qKY7MS1mIeER8BsBCTa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:45:cf:d0:86:ed:17:ad:54:10:67:d4:ee:76:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
Validity
Not Before: Jul 28 10:00:35 2026 GMT
Not After : Jul 29 10:00:35 2026 GMT
Subject: CN=13ce7f418fc5626ed309460d823bc81ea63884af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:39:b3:e8:21:58:20:b4:73:2d:3c:02:1e:09:
6b:84:85:f9:dc:d9:d7:6c:84:26:d8:45:90:c2:e6:
aa:f9:a7:4b:ae:3c:73:0e:16:73:1a:0c:da:c5:dd:
a5:27:4d:ed:ab:20:2b:dc:e9:f6:ce:46:2a:9b:34:
f3:be:be:88:2f:62:c7:71:a1:a9:90:f8:28:ee:b1:
12:21:1a:72:60:f6:11:7e:e2:c0:cf:a7:d9:d4:47:
8e:2e:ed:a3:3a:87:7c:1b:19:0a:36:cf:04:86:75:
db:58:aa:bb:77:4b:af:67:4e:18:96:e8:79:86:a6:
d5:13:5d:9c:38:9d:b0:88:a1:c1:b3:5f:09:4c:05:
a5:00:e2:35:79:cc:1a:97:01:56:42:cb:5b:12:55:
c0:9b:d1:4c:a3:53:c0:ee:cc:39:5d:3c:63:5d:78:
fd:21:2a:c3:35:8b:2e:1c:f9:8a:b1:7b:02:7c:bd:
17:34:5f:96:c1:36:84:f7:58:70:ad:8b:c7:dd:47:
a8:3e:65:68:2f:28:c5:1a:fb:20:01:38:ac:ce:9a:
a4:c4:81:2a:4c:a2:a3:ec:40:09:4b:28:a8:d3:c7:
14:04:32:87:ef:30:fc:f5:8f:7a:55:e8:e0:64:10:
bd:2c:a9:94:25:6a:f2:50:be:46:f9:41:eb:fd:23:
ae:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CE:7F:41:8F:C5:62:6E:D3:09:46:0D:82:3B:C8:1E:A6:38:84:AF
X509v3 Authority Key Identifier:
keyid:ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:68:24:b5:15:72:3e:76:88:ea:ef:9e:e7:48:7d:98:e0:af:
31:47:d9:87:81:50:e4:ba:09:69:5f:ed:8e:24:ba:04:2d:bb:
82:10:75:1b:65:9b:9e:8b:c2:11:6f:4b:c7:e8:ab:f7:9f:f2:
5d:4d:2f:9b:7b:96:62:0a:e0:4d:db:38:43:e3:16:55:e9:4d:
cd:63:b6:04:97:1f:c2:77:1e:60:fb:37:21:75:34:be:b8:5b:
8a:e4:66:4f:aa:53:4b:db:0d:49:4c:02:c8:d5:95:23:cf:50:
da:76:81:ee:df:68:de:76:42:f1:fc:47:5f:c7:a3:72:3a:88:
33:52:b5:55:ce:38:7f:b2:cc:65:36:7e:56:6d:54:38:7a:27:
ee:c0:c2:81:33:bd:ea:75:3a:79:c2:f8:5a:78:30:4a:7f:2b:
05:88:79:cd:71:43:0e:6e:7e:0c:1d:38:d3:52:9c:71:70:08:
9b:6d:3a:9b:67:dc:a6:09:b1:b3:8d:11:be:5d:a3:2d:91:e5:
ec:c0:d4:c3:13:23:79:6d:15:ea:ec:24:e3:92:a4:c3:4a:d6:
f7:7f:c4:65:71:cc:35:3e:fd:67:a3:cf:12:8b:bf:ec:f3:10:
c5:99:64:ed:b7:42:ce:f0:27:e6:7e:1e:26:e5:7e:38:72:de:
c1:fc:5b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:34:31 2026 by rpki-client