Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
File: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft (raw, json)
Hash identifier: oqDapikdEysM/CbrSTZiE23FoyxvQ1P350wKTMk3h4E=
Subject key identifier: 5A:02:5E:EE:A4:19:91:3F:39:36:A2:93:2B:79:64:B1:A2:59:EE:A9
Authority key identifier: EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
Certificate issuer: /CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Certificate serial: 01A0C4E9E33A37820BB2CC93B2A5DB39F109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
Manifest number: 1145
Signing time: Mon 21 Sep 2026 17:00:57 +0000
Manifest this update: Mon 21 Sep 2026 17:00:57 +0000
Manifest next update: Tue 22 Sep 2026 17:00:57 +0000
Files and hashes: 1: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl (hash: U0pwaKHLWFRr84ay4QOO0fHO+5NyAqR9nj4Z7n2CV5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:e3:3a:37:82:0b:b2:cc:93:b2:a5:db:39:f1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Validity
Not Before: Sep 21 17:00:57 2026 GMT
Not After : Sep 22 17:00:57 2026 GMT
Subject: CN=5a025eeea419913f3936a2932b7964b1a259eea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fa:3c:f2:47:9e:06:41:1d:bc:57:2c:09:9e:
7c:f7:9e:08:a2:93:aa:da:63:66:8e:c6:ef:05:1b:
64:49:c1:79:ef:c5:41:53:9a:05:e5:3e:15:eb:b6:
23:7e:08:fb:56:1a:b4:d6:a5:28:ba:87:2e:e2:58:
4c:2d:aa:6e:dd:78:4e:34:c6:af:b9:b2:3b:c3:e5:
aa:c2:14:a1:20:e1:98:d7:35:db:39:15:7d:70:9a:
bb:c5:44:c9:34:59:2e:c7:ec:d1:f0:76:ff:70:4e:
32:16:ae:f4:69:8f:f0:25:6c:e0:45:b1:a2:95:73:
7b:70:c3:f4:50:3e:d1:09:eb:c6:af:95:f9:52:0d:
ff:98:d1:38:62:e2:45:16:9d:12:4c:28:71:a9:0e:
9b:25:05:f2:3a:71:34:ae:6b:1a:25:13:f5:72:79:
4d:5c:d3:6a:f4:40:05:47:3f:7c:1f:65:c9:14:c5:
04:b8:e9:37:81:82:36:18:51:2d:5e:46:53:ce:f5:
b2:e8:6d:32:e4:b3:98:1f:18:eb:c3:b5:b4:db:1c:
d6:b4:f2:14:7a:f3:ba:2c:67:2b:f4:7e:b1:45:f2:
14:13:ea:7f:44:fe:98:16:55:e9:1d:2b:6b:77:43:
10:59:a2:92:b3:61:37:30:4c:55:48:d9:86:e2:b5:
3d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:02:5E:EE:A4:19:91:3F:39:36:A2:93:2B:79:64:B1:A2:59:EE:A9
X509v3 Authority Key Identifier:
keyid:EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:0a:f3:50:3b:5e:49:c2:a4:db:64:d5:b2:6e:94:6b:c4:63:
2a:8c:ac:8c:d2:a3:13:b9:b7:b4:e9:07:19:87:2b:7d:23:96:
6f:40:2a:c6:38:0e:49:03:7b:8d:73:68:6d:ac:3e:c6:c6:cd:
64:20:5e:09:54:3c:c7:05:97:ce:c8:8a:da:bc:46:4f:9c:ba:
a3:47:c1:6c:93:7f:3f:e5:63:14:ba:df:dc:73:d9:41:41:3e:
01:2f:ce:32:46:1b:0f:62:51:b4:02:5b:fb:9f:88:ac:3a:6c:
6f:e7:c2:ef:c6:dd:8d:47:28:21:22:ca:53:5b:30:07:14:16:
74:de:bc:9b:f1:b7:64:ac:8f:cc:d7:f2:a2:56:9a:fb:7a:a2:
d6:d6:96:b9:24:93:76:a6:36:22:83:99:d4:67:ce:ef:d7:4b:
49:8f:14:2b:57:d8:a7:d3:06:3b:f3:14:0a:bb:60:8c:b7:78:
be:60:81:b3:64:a4:9a:4f:d0:b2:2c:eb:21:d5:aa:ec:4c:6e:
b8:7f:3f:20:53:e5:9e:31:b2:5e:df:5c:55:1b:f8:9e:f5:8f:
ef:b2:6c:9b:f0:61:8f:e9:5d:50:a4:9e:ce:ab:7a:80:a6:6c:
f4:d2:7a:94:c6:2e:86:21:f3:fb:94:94:2d:0b:7a:43:c6:cc:
e5:0b:8b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:06:21 2026 by rpki-client