Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
File: 7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json)
Hash identifier: Tck65kbeaGCOGfAmvCbbT9QcJvmSfyoKfxqrmBnW9U4=
Subject key identifier: 17:62:2D:37:6C:F5:18:91:FC:12:89:A0:C1:DE:D2:CB:BE:2C:D9:4A
Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
Certificate issuer: /CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Certificate serial: 01A0C4E9B78EE161085CA813D45745933C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
Manifest number: 13D0
Signing time: Mon 21 Sep 2026 17:00:46 +0000
Manifest this update: Mon 21 Sep 2026 17:00:46 +0000
Manifest next update: Tue 22 Sep 2026 17:00:46 +0000
Files and hashes: 1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: YJjz8uQfUGcCvQTf5C9s3BJgTh4IUu5D0/gPnKKTRSU=)
2: ROD76SwfYB6C6gAmh6ocy7RmvzY.roa (hash: 8kz9BVZL6aAIte+oXvcJlqrJDsa6yWdXpOPNdQQYCKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:b7:8e:e1:61:08:5c:a8:13:d4:57:45:93:3c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Validity
Not Before: Sep 21 17:00:46 2026 GMT
Not After : Sep 22 17:00:46 2026 GMT
Subject: CN=17622d376cf51891fc1289a0c1ded2cbbe2cd94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:43:6c:43:b7:58:57:66:ae:2c:94:6e:50:bf:
5e:bf:47:c1:2a:87:1a:26:a5:82:e5:6c:3a:16:45:
2a:25:e0:0e:16:64:e5:8b:8a:a8:05:cc:83:4f:81:
5e:67:4a:b0:49:3b:1a:c7:87:1c:76:f4:37:34:49:
b0:98:80:5b:7a:c5:99:12:e8:c4:82:d0:e5:d9:09:
fb:16:27:b7:b6:8e:df:a0:d6:21:f4:ea:cc:c7:e0:
d9:a8:77:0d:1a:0c:a4:d5:61:74:c3:5d:88:d9:31:
3e:8f:e7:6b:84:b3:39:6a:84:33:a9:34:dc:45:91:
c1:f4:5f:c1:23:7f:65:ee:65:69:e6:4c:09:f9:25:
85:0c:15:a6:f3:78:2e:d7:ba:4c:2c:06:eb:b4:9b:
0c:87:f6:53:96:64:e2:9d:c8:48:1d:62:28:c6:fc:
c0:97:06:6f:bc:d7:45:3c:c5:6f:f1:2f:7e:d2:fe:
13:38:d2:a1:0b:94:12:07:37:97:11:fd:d3:17:09:
29:63:a7:79:34:38:23:d8:01:d7:b5:68:07:bb:e4:
9c:f1:9e:be:e6:09:77:bd:38:66:89:aa:80:a2:02:
a0:af:47:45:fb:6e:7c:86:45:2d:e7:f5:9b:e1:c0:
a2:d6:50:fe:16:d4:81:03:d9:2c:2b:14:8b:d4:58:
22:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:62:2D:37:6C:F5:18:91:FC:12:89:A0:C1:DE:D2:CB:BE:2C:D9:4A
X509v3 Authority Key Identifier:
keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b6:c0:3c:d1:d2:47:76:97:6b:ec:ba:6f:fe:8e:b4:9c:d7:
6e:03:aa:d8:4b:17:db:b1:b5:c5:f2:ad:87:23:45:57:d7:fa:
10:77:01:89:f4:78:bd:ab:10:94:6b:4e:a4:07:78:d3:4e:fb:
17:5e:2c:55:f6:ae:b0:fa:d0:58:ae:92:96:04:67:2f:be:b1:
64:ff:50:b3:0a:dc:83:ab:23:1b:50:a8:b4:36:b8:b9:43:02:
00:e1:4a:18:15:b3:13:ca:38:60:24:7e:4c:8a:d3:43:ae:0e:
2a:bd:cf:0d:78:f0:5f:36:bc:5e:48:50:89:c8:5b:ba:a3:0b:
69:a1:32:9d:b0:2e:68:89:e1:54:67:ef:a4:96:87:38:28:98:
03:eb:84:a3:44:da:e0:8f:5c:d1:0e:c0:55:22:fd:e4:e7:e3:
92:d5:4b:bf:17:ed:a7:74:2c:ba:1f:a0:ae:f5:34:df:d3:f8:
ea:56:76:a4:81:11:c0:88:18:b2:d4:3e:b2:1a:6c:b1:18:7a:
cf:53:56:e4:90:c9:58:b1:d3:35:dc:8c:20:85:7f:38:76:e7:
8d:01:bc:a9:31:3e:0e:de:65:f6:b9:85:d1:72:ce:69:cb:6f:
2e:bd:68:63:08:4b:5c:fa:0a:06:ec:15:98:fa:c4:e4:55:3a:
d5:42:c5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:49:10 2026 by rpki-client