Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
File: 7dUb8eKlMAC8IwYFYPLMCznUlu8.mft (raw, json)
Hash identifier: jv9fusLfC6TX6yc+dhmdwt7srYJPgGCySEFr3lWf4yM=
Subject key identifier: A4:17:7A:85:80:1B:E5:CD:5C:E4:DC:49:26:47:A9:90:57:E0:D5:EF
Authority key identifier: ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
Certificate issuer: /CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Certificate serial: 01A0CDB5DD4DB46B461A5CE4FB5DD42FC0EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
Manifest number: 1A68
Signing time: Wed 23 Sep 2026 10:00:42 +0000
Manifest this update: Wed 23 Sep 2026 10:00:42 +0000
Manifest next update: Thu 24 Sep 2026 10:00:42 +0000
Files and hashes: 1: 7dUb8eKlMAC8IwYFYPLMCznUlu8.crl (hash: 2NqlyX6DeP539D938fkwblU+sEcnclzCBKKwQ7WdRPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:dd:4d:b4:6b:46:1a:5c:e4:fb:5d:d4:2f:c0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Validity
Not Before: Sep 23 10:00:42 2026 GMT
Not After : Sep 24 10:00:42 2026 GMT
Subject: CN=a4177a85801be5cd5ce4dc492647a99057e0d5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7b:e8:33:40:b2:65:66:46:5d:19:8c:7b:90:
26:52:be:3e:6a:c5:4c:e6:e3:da:6e:83:7e:3c:2f:
c6:0a:d5:83:21:41:9e:df:1f:fe:fb:74:21:4d:e8:
c9:84:a7:62:7f:ad:17:92:49:d7:ce:95:a7:b6:f0:
66:dc:87:da:5d:a2:16:dc:f4:c2:22:8c:53:24:a1:
bc:7a:95:ff:27:4b:52:72:bc:c0:b5:32:50:41:05:
25:3d:18:3a:a5:43:16:63:19:92:bb:0b:be:d6:1b:
f8:5a:8d:0a:73:bc:dc:11:5a:94:f1:b9:5b:15:2b:
0d:55:1c:d9:ea:0e:44:fe:cb:56:0a:ed:e8:81:93:
33:8c:87:ec:a1:73:86:54:f8:c9:78:ae:a1:ce:58:
4c:ce:57:df:b2:96:c3:da:16:b0:d6:41:42:8b:4e:
ca:12:f7:c3:d7:fc:6d:49:b3:be:d6:17:3b:8a:5c:
cd:72:16:b7:c2:e5:67:15:07:14:30:51:95:44:26:
d5:30:65:8d:08:92:9f:7b:04:68:73:45:7c:eb:39:
e8:5d:a7:49:74:fe:54:42:87:62:2d:be:dd:6d:45:
ac:0f:c6:78:47:a7:3c:01:14:7a:c3:93:1c:cd:9b:
5a:6d:c0:af:33:b0:7c:47:98:20:33:1d:45:d1:bd:
8c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:17:7A:85:80:1B:E5:CD:5C:E4:DC:49:26:47:A9:90:57:E0:D5:EF
X509v3 Authority Key Identifier:
keyid:ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:fa:3d:81:43:f5:69:74:74:69:fc:b2:4b:1c:5c:c0:f7:c1:
1a:64:d3:6f:be:35:0f:24:20:7a:c2:9b:96:35:3e:98:3b:e2:
8a:be:d2:fd:d0:14:45:cf:2d:7f:ea:bc:7f:a3:57:45:5f:7b:
ff:7f:76:df:1f:34:f2:8b:d1:4f:39:e9:64:cc:b2:33:e2:5c:
61:57:b9:1e:c6:16:af:9d:ae:47:53:92:ad:f8:df:5a:5d:3b:
e3:0f:c8:24:bb:5c:91:a8:07:fc:6c:3f:03:ff:3f:1b:de:2c:
04:16:67:5e:da:b2:b5:7c:ec:34:e7:0c:fa:ef:0d:b9:76:fb:
fb:b0:a5:e6:30:12:86:0e:78:20:ae:70:61:0b:ef:3d:53:3a:
47:b3:c0:c1:d3:ec:51:61:64:e8:9b:ae:b9:67:98:c8:c2:23:
33:27:62:1e:85:95:5f:92:cd:2d:98:ff:98:ec:f5:e3:81:39:
d8:e2:7d:ce:ab:01:fa:a2:97:3d:b4:e4:47:26:be:12:6a:79:
5a:db:48:79:ae:2b:b0:99:bc:51:5d:c2:ba:c0:82:6b:c2:a8:
51:85:2d:42:a2:36:1a:00:22:d1:6a:4f:d9:3d:84:aa:65:e5:
fc:45:c6:ec:d3:07:53:31:4c:ea:96:3f:ab:68:e5:8a:92:7e:
06:fd:5b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:52:38 2026 by rpki-client