Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
File: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft (raw, json)
Hash identifier: XJHLgAqwACAbI4xv32lgJDUI5pX+tanzWfVCnhzupRc=
Subject key identifier: 44:F7:5B:F3:D9:A0:99:FC:81:4A:49:47:76:FD:73:09:08:6D:6B:EC
Authority key identifier: EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
Certificate issuer: /CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Certificate serial: 01A0C66AC1AEC4DD25C0BE85A5DB25C9AC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
Manifest number: 11D5
Signing time: Tue 22 Sep 2026 00:01:19 +0000
Manifest this update: Tue 22 Sep 2026 00:01:19 +0000
Manifest next update: Wed 23 Sep 2026 00:01:19 +0000
Files and hashes: 1: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl (hash: SWQ7ss88TAelrpvKRmLRparPl8q4QgTFvT6iTtYSnM8=)
2: MF5bEoN5sg-nawNjAIcgKbPLo2w.roa (hash: Eoby9ocfXIo2ysG9Id22HAzaklocSsTXx7pabi0Mev4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:c1:ae:c4:dd:25:c0:be:85:a5:db:25:c9:ac:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Validity
Not Before: Sep 22 00:01:19 2026 GMT
Not After : Sep 23 00:01:19 2026 GMT
Subject: CN=44f75bf3d9a099fc814a494776fd7309086d6bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:76:8e:79:99:e4:cf:a5:51:fb:cf:58:ec:55:
ab:56:15:4d:d5:c4:36:ba:fc:47:ae:97:dd:8f:13:
06:bf:4b:f9:39:ad:4b:3a:6c:59:bd:5c:9f:6e:34:
86:ac:80:9c:70:38:26:fa:bb:1a:55:4d:cb:72:cc:
b8:9b:3c:9e:30:6f:c4:67:05:46:30:d1:5f:90:b1:
95:e5:49:f3:d1:78:56:76:9d:54:60:3b:16:17:00:
93:0f:6e:35:ce:ea:5a:aa:e4:ac:16:62:20:ba:c4:
23:f5:1c:0a:58:8b:ab:ad:cb:77:e6:c7:d4:af:05:
41:c9:0b:26:fc:1b:ae:01:77:17:c2:7a:82:53:29:
03:32:18:ab:cc:86:3d:3a:6a:53:4e:0e:f9:c2:10:
77:5a:99:dd:14:44:7b:f1:77:cb:b7:9b:85:ed:dc:
8f:bf:3c:cd:9c:2a:71:58:ec:c5:17:08:c3:73:a5:
73:d3:fd:83:ca:bc:e0:d1:29:be:ad:67:a0:33:dc:
69:b5:0c:20:e1:39:06:42:d7:2b:93:d5:ec:8f:17:
41:21:f8:01:db:c7:81:cd:69:4c:78:4c:63:92:f4:
2f:0e:ac:af:b9:4b:79:15:c6:b2:dd:16:8a:b3:cb:
83:3f:84:46:27:74:c4:8d:3b:a9:99:a4:c0:89:b3:
57:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F7:5B:F3:D9:A0:99:FC:81:4A:49:47:76:FD:73:09:08:6D:6B:EC
X509v3 Authority Key Identifier:
keyid:EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ef:33:ec:30:ca:07:e4:b5:77:6e:02:a3:c9:f6:73:a8:74:
d1:35:29:b1:31:af:2f:e4:08:f9:b4:39:53:9a:15:b3:c8:74:
19:18:99:cf:01:27:86:19:69:de:cd:98:9e:fc:e0:0d:fc:e1:
01:15:e1:0e:90:04:5c:c0:e1:58:78:50:c5:47:3a:d9:6f:19:
32:03:69:c4:d7:68:67:82:89:b0:15:35:a9:fd:02:24:c9:03:
04:28:7c:5d:d5:df:d3:45:3c:7a:16:85:c8:bc:a0:a2:00:59:
a6:71:1e:f5:5b:2f:b7:20:ab:81:54:7c:44:f5:84:d3:f6:b6:
0a:a2:66:c4:35:90:b9:f5:a7:45:18:ee:90:f1:ae:15:05:21:
89:36:69:33:6f:8e:bb:eb:15:ab:c6:6a:2d:6b:9f:80:a5:6e:
da:a5:b3:29:fb:35:60:5c:76:70:b3:3b:75:00:7c:90:66:cf:
a7:5d:ce:64:f8:3e:00:c8:f0:60:ef:93:8f:f6:bb:96:f2:d4:
99:20:24:3b:d3:8b:b4:11:61:9a:bd:3f:d2:04:fa:4e:ae:69:
0f:ac:72:b6:30:65:91:1c:0e:d1:bf:ed:15:28:61:3a:50:e4:
7e:d7:0c:73:3f:e5:b9:84:16:68:f8:b6:7d:f6:23:ff:34:4b:
be:75:31:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:37:20 2026 by rpki-client