Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
File: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft (raw, json)
Hash identifier: 2jQQLtyqbX1YpV67tbfq33DdX8beklHc0oGNW0tcfCA=
Subject key identifier: C2:12:56:3A:D3:17:55:B5:E3:07:98:16:C0:F5:22:21:1F:31:DE:BD
Authority key identifier: EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
Certificate issuer: /CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Certificate serial: 01A1DD95198DCF2F12B5A243412FB50E5C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
Manifest number: 11DF
Signing time: Sun 15 Nov 2026 05:01:38 +0000
Manifest this update: Sun 15 Nov 2026 05:01:38 +0000
Manifest next update: Mon 16 Nov 2026 05:01:38 +0000
Files and hashes: 1: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl (hash: tzlShLKPvZwj7jdU/ub25SQARbQZdaqTT6ed/rFbJJA=)
2: nl2woE4tEUQD3CSF7qKSvews-N8.roa (hash: L5p+cCQTpEMxnRlqVhomZChKjWD7GqqQzUPRzvLGeYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:95:19:8d:cf:2f:12:b5:a2:43:41:2f:b5:0e:5c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Validity
Not Before: Nov 15 05:01:38 2026 GMT
Not After : Nov 16 05:01:38 2026 GMT
Subject: CN=c212563ad31755b5e3079816c0f522211f31debd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:96:a4:c0:27:7e:27:ce:15:f0:70:bc:99:
81:b3:18:78:fb:fc:d4:6c:6c:73:48:ce:f1:8f:c9:
79:68:35:d4:90:ed:85:02:35:a7:3a:2e:de:4d:84:
bb:c4:8b:3d:30:8a:14:1c:6d:94:04:e1:73:45:70:
76:01:0b:66:89:a6:9b:6d:bf:9b:66:df:2e:c1:34:
8e:b6:40:8e:f0:6e:3d:a0:64:17:91:33:84:de:cf:
28:aa:14:7a:02:fd:fd:f4:0a:ec:66:61:df:3c:e6:
d6:e1:d8:3a:b8:a5:b1:ad:a5:2c:3f:4a:2f:63:a6:
a1:fd:2d:e3:33:58:0c:dd:0e:5b:f2:d2:63:b0:9f:
11:77:c1:57:a5:3d:46:14:c7:ca:eb:2c:4c:98:1e:
3f:51:32:6f:96:c3:63:ff:3c:2a:ad:13:e9:08:08:
99:f9:8a:ac:5a:78:ee:86:34:23:d4:8b:a1:97:23:
16:0a:4a:72:52:cd:4b:36:37:15:df:59:26:78:f6:
83:7a:2b:48:af:99:9e:0d:54:dc:83:0d:27:1f:2b:
e0:52:ba:7d:86:2c:a1:d1:5d:7f:40:ad:68:e9:4b:
61:21:b6:1a:75:0b:d7:58:76:64:f4:be:b2:f7:a1:
11:cb:d5:36:28:87:a1:08:96:dc:dc:27:a0:d7:56:
14:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:12:56:3A:D3:17:55:B5:E3:07:98:16:C0:F5:22:21:1F:31:DE:BD
X509v3 Authority Key Identifier:
keyid:EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fd:42:4a:42:43:7a:7a:6f:d2:da:4c:c1:da:f9:3b:d6:e8:
65:16:91:a5:ad:77:3a:8e:0c:d1:d2:dd:7e:74:b3:df:2b:d2:
3a:1d:dd:7d:d4:90:2f:56:86:0c:c4:59:10:ba:c9:80:ea:57:
32:2d:9c:43:bd:fe:17:02:c4:c4:2e:b5:5e:58:2f:2b:a8:4b:
80:ff:20:a3:58:45:27:dc:3b:7a:53:18:6c:9c:7b:c0:db:9f:
55:f8:9f:c5:11:df:01:72:fc:4e:9e:62:f1:1a:51:7b:9b:ce:
10:d4:1a:c2:e5:8c:bd:23:43:e1:f1:53:03:af:f0:74:7b:01:
68:c3:c2:69:50:96:fe:65:c3:dc:48:93:72:60:19:16:85:24:
06:64:f0:be:60:71:58:40:e7:b3:c0:7f:68:56:ad:1b:92:7b:
fa:32:99:a4:27:b0:53:60:bf:fd:84:53:ea:74:71:92:93:f2:
c1:13:ed:da:51:e3:ac:0a:4e:e8:23:a7:ed:13:87:7c:25:f6:
1a:b6:81:37:ad:80:98:7e:86:27:2b:92:b1:e2:7f:8d:2c:c1:
fa:29:c5:39:7c:ef:08:12:e6:c9:bd:25:5c:a7:d7:d3:c7:e0:
f0:6a:fd:06:7a:c5:7d:0c:79:e4:64:67:0f:36:59:0e:26:eb:
34:90:d2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:56:27 2026 by rpki-client