Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
File: 7N10boF0dtVXj7y-1XTXwa0mQfE.mft (raw, json)
Hash identifier: FDRGOzXPUsFAkYS3L0Y3RJKls3KAbZfAFqiXSILWTLY=
Subject key identifier: 36:D6:2E:B6:80:84:F8:A5:8F:3B:08:A2:F0:D8:E9:18:18:A6:2F:DB
Authority key identifier: EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
Certificate issuer: /CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Certificate serial: 01A1152A76BC0D25DC3E5C4F0E7D4A61FE0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
Manifest number: 1A8E
Signing time: Wed 07 Oct 2026 07:01:06 +0000
Manifest this update: Wed 07 Oct 2026 07:01:06 +0000
Manifest next update: Thu 08 Oct 2026 07:01:06 +0000
Files and hashes: 1: 7N10boF0dtVXj7y-1XTXwa0mQfE.crl (hash: t5Thgh5oXm0lmMOdg/ZGxE1v5bwUEOjZnKwOgZDBaz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 06:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:2a:76:bc:0d:25:dc:3e:5c:4f:0e:7d:4a:61:fe:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Validity
Not Before: Oct 7 07:01:06 2026 GMT
Not After : Oct 8 07:01:06 2026 GMT
Subject: CN=36d62eb68084f8a58f3b08a2f0d8e91818a62fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f6:1a:0b:95:71:5f:7c:ce:9a:d6:f2:5a:c9:
16:23:60:b9:3a:6f:f4:93:a6:8f:14:e3:c2:45:bd:
f8:8f:7f:cd:b0:bf:62:98:43:a2:ef:4e:25:56:aa:
9c:6a:d8:b7:59:13:bb:fe:2e:dd:2c:e4:a3:c9:2a:
05:dd:69:75:86:1b:b8:7d:5b:79:59:f6:d9:3a:d8:
24:ab:a7:41:17:6b:68:7b:5a:0e:09:2a:04:98:bf:
09:a2:db:8e:c9:07:f2:f6:19:1f:73:9b:12:5e:00:
20:27:85:21:a2:9d:39:c8:a2:ee:de:80:43:6b:fe:
42:7c:20:96:d4:43:16:19:a7:1c:49:3c:28:90:43:
6b:28:c5:ca:68:5d:e0:d7:98:a2:9f:07:0b:e7:82:
ce:33:7a:94:bb:fd:84:5c:71:cb:13:bd:11:06:84:
13:1a:5d:2b:8a:8f:76:f9:7c:4c:80:3c:79:7c:89:
ac:22:dc:8e:9b:55:df:54:13:44:30:5a:be:15:eb:
e9:25:b8:29:5f:ae:d0:b5:64:56:5c:c2:e5:87:a8:
4a:de:50:2d:04:5a:be:16:f5:fb:ae:4a:86:af:a3:
84:67:a6:87:63:47:ce:54:bc:cf:b3:1f:58:45:50:
27:d3:b1:d2:bc:88:83:16:51:e6:13:df:79:b6:a2:
6e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D6:2E:B6:80:84:F8:A5:8F:3B:08:A2:F0:D8:E9:18:18:A6:2F:DB
X509v3 Authority Key Identifier:
keyid:EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:52:86:61:95:27:62:88:49:c1:ba:4c:be:f6:c2:27:93:20:
b3:76:4f:f1:8d:fe:c5:4b:21:62:5b:e0:5e:d4:05:38:18:bc:
50:41:91:2a:6d:e5:a8:47:68:c4:46:f2:b9:ad:7f:e9:4e:46:
ee:b0:d3:8b:b5:d1:16:f8:2b:44:4b:6b:67:1a:3a:ba:c8:c3:
13:ab:74:9d:63:1e:91:08:52:a0:60:43:3c:69:dc:16:5f:1d:
b8:2a:2d:c7:89:50:bd:64:8f:83:c0:5a:35:d3:b8:aa:23:89:
25:4e:08:c5:79:ec:74:93:ac:88:6a:3d:38:0b:46:c3:80:21:
7d:17:3b:a2:be:50:e3:bf:8d:46:e5:13:c4:7e:60:34:0b:76:
5b:d4:4e:6c:ab:40:54:0b:fb:b6:b0:b7:ac:41:de:b1:f4:5d:
90:eb:d8:d6:7e:6d:1c:8b:27:b9:26:ec:dc:07:83:fc:9c:83:
55:41:aa:1c:33:a4:6b:5b:01:75:7c:1b:93:26:55:63:3a:ab:
25:5f:de:9e:0a:45:ca:1e:83:7d:a4:0e:7c:76:24:a8:40:34:
35:df:b9:73:88:77:50:00:66:54:d5:c2:c1:89:0a:b5:3d:72:
d0:bf:76:a7:aa:c7:58:4f:e5:2b:b9:e4:35:a5:4f:86:6f:97:
7a:59:37:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 09:04:27 2026 by rpki-client