Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
File: 7MzCuQnHyBXKzLX85THDJSb63Vo.mft (raw, json)
Hash identifier: cZ826P76j+z7PD220x91xbF1sRKoTTsqMlwmYrGEkz8=
Subject key identifier: F8:70:81:89:87:F4:5B:7A:B9:69:3A:4F:EB:5C:AC:1F:39:BC:EB:B7
Authority key identifier: EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
Certificate issuer: /CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Certificate serial: 01A1C5FAA06434C39D0B6B24C52581EA7414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
Manifest number: 17E8
Signing time: Tue 10 Nov 2026 15:01:38 +0000
Manifest this update: Tue 10 Nov 2026 15:01:38 +0000
Manifest next update: Wed 11 Nov 2026 15:01:38 +0000
Files and hashes: 1: 7MzCuQnHyBXKzLX85THDJSb63Vo.crl (hash: yYZmH/7P5iqv/d/M29tsvEU9R9w7TwDxa7yDpuFglS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 15:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:fa:a0:64:34:c3:9d:0b:6b:24:c5:25:81:ea:74:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Validity
Not Before: Nov 10 15:01:38 2026 GMT
Not After : Nov 11 15:01:38 2026 GMT
Subject: CN=f870818987f45b7ab9693a4feb5cac1f39bcebb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bf:5c:e2:d4:d3:94:ea:41:37:92:6d:3c:4d:
d7:01:90:5f:37:f1:4e:3f:64:cb:b1:2b:10:80:b3:
70:0d:40:0c:2d:14:a0:f3:2e:ae:43:89:2f:d6:63:
b4:ac:ac:b9:e2:6c:17:24:04:7e:fd:fe:35:cb:99:
63:e2:81:51:d4:00:4d:c4:99:a4:ec:1e:95:2c:ee:
bc:aa:74:17:14:77:0c:25:fb:88:c4:bc:55:57:a3:
d6:1c:9d:c0:3f:33:c6:64:27:77:09:31:08:d5:db:
ef:a5:4e:d3:94:95:c4:a2:86:e4:5b:93:95:9e:e1:
d5:ee:cb:72:7e:07:a3:8b:de:fd:18:e1:42:0b:e6:
2e:d1:5b:cf:8e:98:12:e5:43:a5:63:b5:44:1a:93:
9a:60:cf:b5:99:34:79:77:ef:c9:be:7a:bb:dd:be:
1a:59:44:59:61:2c:4a:80:53:08:6c:94:84:36:24:
35:2a:eb:17:0a:0b:57:44:a6:ab:4e:6e:7a:0b:42:
a2:da:d5:28:cb:d9:92:47:39:4e:2a:5e:6f:4c:ef:
0a:6a:44:70:94:fa:3b:66:bd:7a:03:e0:bf:fd:67:
a9:18:63:57:3c:1e:2a:11:9e:e3:c9:95:a9:02:cc:
9c:c0:54:94:69:aa:65:16:f8:7d:b8:95:b3:b6:10:
78:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:70:81:89:87:F4:5B:7A:B9:69:3A:4F:EB:5C:AC:1F:39:BC:EB:B7
X509v3 Authority Key Identifier:
keyid:EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:6e:ce:09:a5:f6:79:e3:03:54:05:70:2e:d5:c5:fb:a9:47:
9d:d6:63:3d:03:49:bd:67:c4:58:41:93:9e:9f:37:f4:e3:7a:
59:64:4b:87:08:cd:41:b4:30:03:cd:8f:be:dc:7e:5a:38:88:
c4:da:72:6e:9b:ee:08:a8:97:2c:c0:e5:98:65:7b:0b:53:f8:
2e:97:11:f1:87:e6:df:bb:0b:0a:7b:2a:15:cf:fd:57:75:5d:
35:b2:a4:5a:6b:ce:8e:de:e2:7f:b5:3f:00:52:3c:80:3b:6c:
20:5c:55:d3:09:84:dc:8f:6c:fe:cb:c6:5f:4c:a3:1c:05:6a:
36:8e:e5:f7:ed:6e:f4:a7:e3:68:c5:f0:bc:38:88:88:2e:f3:
4b:f0:1e:b6:15:3f:62:47:99:42:35:84:53:bf:6e:22:ee:5f:
b2:52:17:44:3c:d7:a1:47:c1:69:73:6a:7d:14:4f:af:d0:5b:
8c:45:a7:12:a4:4e:a4:a0:c4:2c:0e:15:81:c0:f3:a7:a6:eb:
a8:a8:22:25:58:c6:a8:d9:4c:79:44:e3:7b:21:f6:33:f5:77:
a7:98:09:b4:6d:af:7b:6b:90:3e:54:3b:ac:fb:86:39:d8:73:
62:01:71:d6:54:60:e7:1d:4b:54:d8:db:76:02:6f:57:be:71:
41:08:8b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 20:50:40 2026 by rpki-client