Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
File: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft (raw, json)
Hash identifier: TS2KeHFFDkAkCLIcKwejL2COajDg3HKIQITxuLWbLhI=
Subject key identifier: CD:AE:FD:B3:FE:C6:72:E3:AB:20:8C:C4:DB:CC:2D:BC:1F:C1:4A:26
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 01A13C006980F7F846BFC34BD167ACB3A160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
Manifest number: 1AA5
Signing time: Wed 14 Oct 2026 20:00:22 +0000
Manifest this update: Wed 14 Oct 2026 20:00:22 +0000
Manifest next update: Thu 15 Oct 2026 20:00:22 +0000
Files and hashes: 1: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl (hash: 2A7WGy0v9b23nIVlH9lBkRYISrFgKQMBcB/iwb097no=)
2: CXyMI2l8iEL8L83sjM9bkDZ8hS4.roa (hash: j/IQcIj8RO7TPRLNA/hKS2090AInnEPNtfaLrldabW0=)
3: VoUC5dLmrwvo5IVIUQ9reyXsBQk.roa (hash: qRjYhRjtRMqcpSCBbiNCNUBeAUXt7NZHib1uEHQNNXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:00:69:80:f7:f8:46:bf:c3:4b:d1:67:ac:b3:a1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Oct 14 20:00:22 2026 GMT
Not After : Oct 15 20:00:22 2026 GMT
Subject: CN=cdaefdb3fec672e3ab208cc4dbcc2dbc1fc14a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:39:fd:5d:64:2b:fe:86:12:2f:4b:d1:2e:1b:
6d:3a:7b:9c:5f:3c:ed:38:c8:c1:8e:3c:19:f3:1d:
c8:3b:58:37:13:07:2f:6b:c7:7c:79:57:7b:d7:44:
c7:06:9b:97:54:1c:d9:de:22:fd:e5:4a:f6:11:e0:
56:0b:d5:31:31:49:b4:ec:c4:d6:ed:92:8e:06:e7:
f3:a4:7c:42:96:23:ca:f3:5c:c8:66:96:24:b4:23:
6f:9e:42:0b:ba:c9:67:6c:63:7a:c7:db:3e:90:a7:
3d:c6:85:51:cf:13:dc:fc:69:6c:2f:1f:89:e0:0c:
54:71:0e:a7:b8:91:22:05:9d:6b:81:cf:c6:fc:f4:
91:71:5b:30:32:90:15:95:3d:ab:ab:d9:98:c4:37:
ac:74:80:e0:a5:f5:f5:fd:39:ca:be:d7:da:4a:75:
fc:67:49:6c:e0:90:4b:28:e9:02:c3:ff:b1:d9:ff:
9b:ce:3f:55:7f:ee:ac:bf:f6:4b:1a:06:46:a3:c7:
72:b6:e3:70:61:42:00:ab:cf:4d:f3:31:c6:da:43:
78:4d:59:dd:07:2c:23:1e:05:f9:ea:8b:28:ac:ab:
a9:be:fc:7d:33:66:22:22:d7:5c:21:c3:b4:7f:96:
5b:4e:a5:0b:92:45:af:a7:8c:b3:ea:57:57:21:cb:
ce:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AE:FD:B3:FE:C6:72:E3:AB:20:8C:C4:DB:CC:2D:BC:1F:C1:4A:26
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fe:fe:43:fe:49:c4:79:35:66:70:86:c5:6b:a2:52:cd:1a:
cf:1c:a2:b9:d1:84:a2:eb:b4:ed:e7:c3:22:e1:f0:31:6e:4e:
4b:ad:21:12:23:db:a0:7e:66:24:8f:98:a8:8b:f0:6d:8e:22:
28:0d:de:fc:e4:8f:d3:77:14:45:21:9b:a9:95:19:8c:e5:dd:
89:3f:47:41:16:aa:61:36:92:71:6c:8e:84:ad:3f:b9:a0:ed:
a3:2e:54:6c:e1:84:fe:87:65:7c:94:34:23:06:1a:28:cc:d5:
99:77:55:b8:a7:1a:cf:8d:f1:2c:45:cd:0b:ce:db:c9:b7:ba:
42:27:a5:56:8d:28:36:50:d9:c9:ac:6b:57:77:37:a7:80:af:
64:7d:1e:14:82:42:75:42:f6:5e:b1:3c:c4:bc:23:02:88:2c:
92:e4:db:00:ca:f5:34:15:ba:bb:bd:18:fd:27:84:25:1c:61:
a4:a0:bf:29:bb:2d:5c:56:37:56:b6:f5:25:8a:dc:de:4b:28:
f2:94:67:fe:51:d1:2a:b1:b5:83:02:33:b7:f1:fe:7a:37:4f:
74:21:7b:05:c9:d3:33:3f:a8:84:ce:7d:23:8f:72:96:bc:5c:
d6:93:11:74:6e:1e:ea:c5:51:b9:ae:1e:d1:ee:2e:81:6f:cd:
15:bc:3f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:36:08 2026 by rpki-client