
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
File: 7oAELqPLNIc97Q6wZJWU4v8jkIE.mft (raw, json)
Hash identifier: T67DDYadrxFkrHXuDEykfTDqWfeGcVThio1gDCJ+4cs=
Subject key identifier: 82:7C:E4:47:3D:BF:BD:FF:DC:98:AE:7D:4B:67:36:60:1F:92:D1:66
Authority key identifier: EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
Certificate issuer: /CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Certificate serial: 01A0C40DE73AAEDB8B97D112C8FB1881DC8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
Manifest number: 0E71
Signing time: Mon 21 Sep 2026 13:00:40 +0000
Manifest this update: Mon 21 Sep 2026 13:00:40 +0000
Manifest next update: Tue 22 Sep 2026 13:00:40 +0000
Files and hashes: 1: 7oAELqPLNIc97Q6wZJWU4v8jkIE.crl (hash: key1seo+gGJVyOgJy0rJVynIByhtHn6aaXn/YgXR1O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:e7:3a:ae:db:8b:97:d1:12:c8:fb:18:81:dc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Validity
Not Before: Sep 21 13:00:40 2026 GMT
Not After : Sep 22 13:00:40 2026 GMT
Subject: CN=827ce4473dbfbdffdc98ae7d4b6736601f92d166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:be:09:df:6e:ae:25:61:8b:f4:83:9b:9f:f8:
36:71:23:9d:b4:90:99:f4:5a:ce:6e:0c:ab:f3:06:
f3:3f:28:55:44:28:7e:73:1b:8d:6c:42:3a:62:0d:
9c:de:22:fe:32:0d:51:da:39:6f:01:72:1c:c8:4f:
8f:ad:9d:e0:32:99:72:fd:8b:50:ab:00:2c:82:62:
e7:65:d6:dc:15:20:a5:14:cf:7c:77:e1:39:bd:85:
ca:13:68:6b:64:e2:05:e5:81:c0:c3:90:e1:50:d6:
c3:c1:8d:ab:b2:e1:7e:5a:73:f1:e2:11:01:4f:85:
63:37:50:31:61:9d:1e:c5:cb:e4:4d:1c:ed:95:53:
2c:83:3c:84:17:9c:90:69:b0:79:87:b8:2b:5b:f2:
1c:49:cd:3a:bf:59:50:b2:f9:e7:0c:8e:d1:e4:69:
1c:3d:73:78:1a:74:c4:c8:c0:22:8b:47:f0:d1:84:
cb:2a:a1:b2:86:6b:16:30:e0:22:2d:ec:34:e3:2b:
f8:c6:56:3a:68:ab:fb:d2:3b:0a:86:7e:91:71:bc:
62:45:a2:1b:4b:0a:ac:1d:c1:76:14:fe:56:9a:47:
6e:6b:da:16:cc:64:f7:b3:c6:9f:c6:db:0e:8f:6c:
80:59:8d:59:71:e2:3a:4d:68:20:df:ea:fb:b6:61:
42:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7C:E4:47:3D:BF:BD:FF:DC:98:AE:7D:4B:67:36:60:1F:92:D1:66
X509v3 Authority Key Identifier:
keyid:EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:79:2a:8c:f2:e4:5f:f2:aa:c7:f8:09:26:8c:e4:db:c1:8c:
c8:13:34:ba:c7:7b:71:2f:b5:8d:20:9e:ee:47:18:ac:45:6a:
0d:e9:cc:3b:43:de:ad:6b:70:5c:31:34:8d:f2:69:2a:d6:0d:
fa:06:02:36:ff:3c:be:68:23:3d:de:a2:ae:4b:e8:0d:38:ac:
27:19:f4:14:47:16:a4:c2:46:62:6b:56:2b:12:00:28:3b:a8:
b0:ab:da:d7:e3:b6:57:aa:b9:97:ce:1c:cc:3d:d7:ce:4b:5e:
b2:3e:ec:e3:44:8e:f0:d4:a6:62:1f:50:6b:be:eb:6f:b8:82:
83:64:e2:08:42:bd:a2:8c:37:3d:41:81:3f:ee:a8:02:4f:16:
21:71:0e:da:9f:26:a4:90:6a:54:36:b1:28:64:a2:35:eb:dd:
16:b7:6c:e7:db:65:4d:e2:eb:10:e6:68:83:7d:18:0e:9e:cb:
3e:44:d1:2e:1e:7e:fd:12:62:c5:0c:72:d3:90:4b:30:21:0a:
dd:dc:41:19:df:1d:e3:8f:7a:aa:14:bd:a5:8d:be:44:00:84:
c5:0a:c0:32:61:5c:35:c0:aa:96:d3:68:a0:09:f0:1c:45:1d:
66:3f:13:26:ab:94:4b:ed:58:2b:4b:6f:d6:77:37:93:ef:e2:
69:9d:a0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:11:24 2026 by rpki-client