Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
File: 712SU70NJYyVsrNG5IUzyULMI7Q.mft (raw, json)
Hash identifier: rXbjKTftxUQlQ0ZwrXP88H3zfyNE9MR1xQdzLxZuHQU=
Subject key identifier: 02:CC:04:08:7E:19:EE:5A:DA:84:A4:B0:42:E6:95:EA:2B:C5:BE:4D
Authority key identifier: EF:5D:92:53:BD:0D:25:8C:95:B2:B3:46:E4:85:33:C9:42:CC:23:B4
Certificate issuer: /CN=ef5d9253bd0d258c95b2b346e48533c942cc23b4
Certificate serial: 01A0DC85524B3C2B5CEE56E8E4D4FEE9B36F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/712SU70NJYyVsrNG5IUzyULMI7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
Manifest number: 018C
Signing time: Sat 26 Sep 2026 07:01:59 +0000
Manifest this update: Sat 26 Sep 2026 07:01:59 +0000
Manifest next update: Sun 27 Sep 2026 07:01:59 +0000
Files and hashes: 1: 712SU70NJYyVsrNG5IUzyULMI7Q.crl (hash: DsmV9ybt0vK7mvQlTfqP39X0WPwgQZOqzHiPqUzsunc=)
2: gcOeRtdhASpOXftyQUUQHnlSzHY.roa (hash: mRt09ink6QbROuNCA4WL011qJeqnMp6lFsCyZXUphZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/712SU70NJYyVsrNG5IUzyULMI7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:85:52:4b:3c:2b:5c:ee:56:e8:e4:d4:fe:e9:b3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5d9253bd0d258c95b2b346e48533c942cc23b4
Validity
Not Before: Sep 26 07:01:59 2026 GMT
Not After : Sep 27 07:01:59 2026 GMT
Subject: CN=02cc04087e19ee5ada84a4b042e695ea2bc5be4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e7:6a:7d:f1:5d:da:d8:d5:90:39:51:0c:d8:
4e:57:f7:77:91:a8:5f:33:e3:4e:d6:81:09:45:ca:
dc:95:fb:05:d4:85:1b:ac:35:04:35:b8:bc:43:c7:
66:1c:96:18:19:06:dd:d8:6e:45:b8:90:82:2d:af:
c7:7e:5e:9a:71:34:47:d5:4b:b1:0a:5f:87:5e:a2:
89:63:51:8a:65:76:fb:30:cb:58:25:02:06:a3:41:
4a:83:0d:92:87:35:74:0f:c7:f3:a7:5a:16:fc:66:
ed:70:e4:b5:ae:0f:31:32:99:17:c9:ad:cb:74:3e:
b3:7d:e5:2c:06:d8:54:ac:c3:6a:2f:de:d8:d6:e7:
63:13:60:fc:d8:b9:88:f6:a9:a0:43:52:fb:56:10:
f0:57:e7:30:8b:a3:e7:f3:60:51:c3:8f:79:fd:d9:
20:d9:a5:66:3c:3a:c7:c0:90:f8:32:2f:5d:8d:94:
7f:82:16:9d:57:55:f9:7c:b3:71:3d:45:01:a7:85:
f4:5c:27:a8:5b:b1:45:70:7b:e3:4a:2c:d1:5d:ca:
0b:95:f1:10:39:b3:52:66:d9:35:98:be:64:a2:9b:
72:30:32:53:33:11:9f:90:06:78:5b:c5:20:d3:c3:
89:90:c0:00:2c:d8:7e:4e:2c:ae:56:c3:d1:72:99:
f2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CC:04:08:7E:19:EE:5A:DA:84:A4:B0:42:E6:95:EA:2B:C5:BE:4D
X509v3 Authority Key Identifier:
keyid:EF:5D:92:53:BD:0D:25:8C:95:B2:B3:46:E4:85:33:C9:42:CC:23:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/712SU70NJYyVsrNG5IUzyULMI7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e9:dd:39:78:73:7f:cc:27:f5:48:4b:60:56:85:5b:96:22:
91:3d:28:08:ee:7b:02:a1:d1:72:50:dc:ae:0d:63:e4:14:d8:
8a:c5:bb:60:59:38:a3:69:90:d0:9b:35:91:a7:4b:25:93:38:
16:65:d6:49:7a:ad:2d:5d:fb:e9:f8:dd:a5:42:06:d6:5c:b1:
19:a9:6c:6b:5f:1b:bd:60:b4:52:b5:c4:31:76:08:d1:aa:47:
36:e2:ba:a0:e5:c2:cb:c0:18:f1:e5:91:cc:2e:1c:5d:ee:68:
6d:75:59:90:2b:04:8d:58:21:dd:fd:ca:20:28:f9:2e:51:36:
a1:79:f9:36:3c:4a:fd:5d:d5:58:3c:a0:e1:d7:cc:74:a3:1e:
43:42:65:f8:4f:d4:c0:29:15:2a:bf:52:0e:a5:15:79:30:8d:
6e:34:2e:8c:9f:ff:40:32:af:4c:8f:a2:6c:4d:45:91:0f:d0:
a3:26:ac:bc:af:b9:4c:65:fe:58:3e:29:b2:e0:c4:54:f7:a2:
13:80:13:f8:be:19:07:75:ad:c0:0c:d7:95:f3:32:2f:6b:79:
ec:84:33:37:c3:9f:75:ce:5d:45:51:0d:a4:ed:68:76:6d:98:
5b:5d:ef:f2:71:86:08:ca:be:fb:17:5a:5f:56:ff:20:92:6f:
5d:fc:49:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:36:43 2026 by rpki-client