Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
File: 7lsNNqN0qzXENu4Awuyu-7KjVEg.mft (raw, json)
Hash identifier: wktiBVDvrVKBxQpqNiTJNaa/35IuKZEvP3WzA7XhGtw=
Subject key identifier: C1:97:7F:7B:44:CF:CE:4E:04:FE:1E:E3:DE:45:08:F1:CB:32:6A:F4
Authority key identifier: EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48
Certificate issuer: /CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
Certificate serial: 01A12F217E7C33231FDAF88FBE416E05382A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
Manifest number: 04BD
Signing time: Mon 12 Oct 2026 08:01:26 +0000
Manifest this update: Mon 12 Oct 2026 08:01:26 +0000
Manifest next update: Tue 13 Oct 2026 08:01:26 +0000
Files and hashes: 1: 7lsNNqN0qzXENu4Awuyu-7KjVEg.crl (hash: K3G8BINtA+gTPa7hTNFCk5NSyNkOEdsDOuCwI+3K5AU=)
2: od9igj5v7V0Kfnev8-CMqhUCNRc.asa (hash: LUunZpdTWKkS/76jaN+s9ShSo+KcgfzlH3gElWjZ7CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:21:7e:7c:33:23:1f:da:f8:8f:be:41:6e:05:38:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
Validity
Not Before: Oct 12 08:01:26 2026 GMT
Not After : Oct 13 08:01:26 2026 GMT
Subject: CN=c1977f7b44cfce4e04fe1ee3de4508f1cb326af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:28:00:12:0e:98:12:f3:1a:a8:ea:f3:68:
b2:db:b7:46:24:d0:b4:22:ee:8e:03:b1:e1:15:13:
e7:39:11:50:69:94:54:f5:3e:1b:68:7d:24:3c:bb:
49:66:6b:e4:98:10:9c:1f:c7:ef:9a:cc:c0:0b:82:
24:36:20:94:56:26:70:47:d3:a3:46:25:55:85:ca:
eb:e2:64:51:1d:8a:ab:04:ce:01:80:3b:dc:fe:b5:
40:fd:65:bc:17:fe:d3:92:6c:c8:7d:eb:07:5a:42:
fa:0f:06:fe:68:c4:e3:c7:34:89:1c:9e:a9:a5:06:
d9:33:0a:2f:44:44:ed:a9:7a:94:db:41:f1:4f:f7:
b0:0f:8b:2b:08:bc:b8:ac:a8:a1:6c:81:f6:7e:42:
ae:50:d8:05:f3:c3:cc:e4:a9:41:37:68:44:84:67:
e8:cb:8c:9d:c1:ef:5c:cc:96:22:cf:22:29:69:d7:
ca:91:50:c3:e8:d0:d4:70:f9:b2:4d:f0:d6:aa:9b:
56:ed:22:8c:65:32:39:b3:7c:8f:fd:9a:bd:d6:c5:
21:9c:ed:1e:d3:1d:dd:2d:78:8c:93:1a:a9:9f:2d:
c8:96:e6:1c:00:7f:c3:42:de:a4:cb:bb:5d:30:d5:
30:b4:54:5b:a0:b1:e0:82:ab:8e:06:bd:9a:86:e1:
f0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:97:7F:7B:44:CF:CE:4E:04:FE:1E:E3:DE:45:08:F1:CB:32:6A:F4
X509v3 Authority Key Identifier:
keyid:EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:62:90:21:ee:17:1f:3c:31:b8:bb:c7:f9:d4:da:45:f1:36:
0d:a3:b0:ab:fc:de:6e:d8:34:69:f1:7e:69:01:68:79:0b:cd:
49:fa:23:15:4b:0d:e2:02:51:22:93:e8:14:7a:67:0c:55:cb:
51:1f:a1:85:4b:75:38:bf:06:8c:41:08:cb:2d:7f:e6:fd:dd:
f0:0d:e9:81:aa:e2:70:73:f5:18:77:03:aa:a4:f8:fc:53:22:
6b:f3:2b:c3:ae:aa:68:14:d6:e8:25:a9:16:81:a0:87:73:14:
3a:85:51:67:2f:de:e2:73:30:3b:ac:15:dc:3d:3a:b6:1b:bd:
6f:e6:5c:d0:bc:e4:21:14:88:80:12:b2:7b:48:25:26:d3:22:
e5:90:16:b3:50:d0:a6:10:16:39:a8:65:c3:ac:5a:de:96:97:
67:ae:c7:ac:41:1f:00:45:af:c4:5c:3f:dc:48:cd:66:86:a5:
8c:4b:ec:f8:38:c7:b6:52:50:2c:1d:5b:8a:ae:6f:63:6f:27:
d1:d8:bf:7d:fe:f7:cc:2b:d8:9b:d9:01:e6:9c:8b:50:7d:79:
02:94:df:a6:00:04:ac:77:a3:5e:ee:d5:5f:b2:d2:30:e3:0b:
92:1a:c7:d0:23:7b:60:d7:fb:0a:34:c8:a0:b9:24:14:fd:57:
51:cb:69:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:14:14 2026 by rpki-client