Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
File: 7N10boF0dtVXj7y-1XTXwa0mQfE.mft (raw, json)
Hash identifier: e0uXikXAef2BSzfXq7aBcbmIARKVIPdOqrcu5xEYrQ8=
Subject key identifier: B3:64:DD:7B:17:C2:63:BC:9B:7E:84:92:DB:AC:8D:88:B7:A1:CD:A4
Authority key identifier: EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
Certificate issuer: /CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Certificate serial: 019EC25B9789B15BA45765B830F6C7E88B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 19:00:42 +0000
Manifest this update: Sat 13 Jun 2026 19:00:42 +0000
Manifest next update: Sun 14 Jun 2026 19:00:42 +0000
Files and hashes: 1: 7N10boF0dtVXj7y-1XTXwa0mQfE.crl (hash: TKDZHO+HUikF7/s9gMz024ZVzrfF9zea9GMkZT1cerA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5b:97:89:b1:5b:a4:57:65:b8:30:f6:c7:e8:8b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Validity
Not Before: Jun 13 19:00:42 2026 GMT
Not After : Jun 14 19:00:42 2026 GMT
Subject: CN=b364dd7b17c263bc9b7e8492dbac8d88b7a1cda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:85:b7:05:ed:12:61:f0:a9:50:8e:46:d3:
4b:54:4a:33:4c:de:de:b5:53:0f:6c:ba:e8:0d:7b:
84:26:ea:29:07:6c:1c:8d:53:77:28:8d:b2:2f:d8:
b3:d8:07:a6:5d:57:e3:3e:e6:c5:99:71:19:7c:bc:
33:2d:f6:d6:13:f7:ef:5d:70:7c:d1:cb:23:1d:39:
31:d2:6c:3d:f7:aa:68:32:b6:c2:7b:8f:74:8b:ef:
35:fe:3e:ed:77:6a:c1:53:f7:ed:6d:4f:ff:61:23:
14:98:f8:4d:6a:43:ca:79:8c:fe:0f:83:40:fc:40:
22:f7:d2:d4:0e:34:2a:53:ec:f4:ee:b1:c6:35:f3:
d0:36:e2:c7:b5:4f:54:b4:59:fe:0d:56:67:dc:a3:
f1:19:38:03:ea:c4:55:f1:ef:fb:8d:99:17:96:95:
41:55:2d:0a:f5:64:95:df:ed:a0:7c:36:c6:1c:e4:
3c:e1:6c:f8:d4:66:8b:fe:6a:10:bd:57:bb:b1:e1:
81:86:05:b4:a0:34:a6:66:37:79:b3:e8:c8:81:fc:
f9:61:66:8d:54:1d:6d:c8:d2:ec:31:30:1b:52:d6:
66:0a:00:87:c0:d8:0a:06:12:60:4d:3e:3c:e3:8c:
1e:2d:3c:69:2b:1c:b4:30:72:a3:4d:b0:7e:11:ed:
73:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:64:DD:7B:17:C2:63:BC:9B:7E:84:92:DB:AC:8D:88:B7:A1:CD:A4
X509v3 Authority Key Identifier:
keyid:EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fe:e0:b6:ee:3c:c1:c4:32:e4:f7:0e:e3:1b:e8:e7:28:f2:
87:26:d0:0e:9e:e8:75:f9:15:eb:19:83:6b:49:13:a2:78:5f:
7e:93:2e:90:16:57:f6:fd:fa:fa:ca:f9:eb:12:1c:48:c5:94:
a9:a5:3e:87:13:7d:58:65:49:db:5f:c9:2b:f5:83:51:41:27:
e5:a0:59:af:29:4b:d2:62:a7:2f:91:4d:46:0b:a1:05:26:36:
e9:e6:4b:68:98:fb:87:be:25:b4:47:9c:9c:23:18:42:96:84:
90:b3:2e:e7:44:5c:ab:16:68:ae:da:c6:48:de:45:4b:61:b1:
cf:bb:98:49:ca:99:61:45:c2:1b:4a:12:50:0d:60:65:de:5d:
b3:a5:84:a3:41:80:c8:3b:33:91:a3:f7:02:b5:d0:3c:0a:4b:
db:56:f0:44:71:12:bd:3e:33:9e:52:27:c2:ca:c7:6b:9a:f4:
08:ad:03:1d:96:df:5d:ce:53:d8:c8:48:ac:2c:53:50:80:6b:
a0:85:60:3b:d1:61:dc:79:67:be:17:60:40:1d:bb:51:d7:59:
34:af:7c:1e:38:b7:0a:17:48:10:35:f7:72:12:fc:b1:9d:c2:
80:02:63:07:c3:46:97:d8:c5:e7:55:a3:19:f9:41:30:9a:7c:
83:54:b3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:23:56 2026 by rpki-client