Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
File: 582m42RtyToNLUKV0esJR2xmvKY.mft (raw, json)
Hash identifier: 70FaOWnP+hvI/wV8ROetfeMZFEzcvy8gs0Mtq8zDBHM=
Subject key identifier: 71:D8:A2:DA:55:EA:B8:94:41:3D:2E:47:B8:B5:32:D4:72:15:C1:A5
Authority key identifier: E7:CD:A6:E3:64:6D:C9:3A:0D:2D:42:95:D1:EB:09:47:6C:66:BC:A6
Certificate issuer: /CN=e7cda6e3646dc93a0d2d4295d1eb09476c66bca6
Certificate serial: 01A131B4384F048A11786AE68094E11B9D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/582m42RtyToNLUKV0esJR2xmvKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
Manifest number: 07C5
Signing time: Mon 12 Oct 2026 20:00:56 +0000
Manifest this update: Mon 12 Oct 2026 20:00:56 +0000
Manifest next update: Tue 13 Oct 2026 20:00:56 +0000
Files and hashes: 1: 582m42RtyToNLUKV0esJR2xmvKY.crl (hash: 2FZAVU6TZ5pdnQLKkFvm64K1R96zOvLvt3ZMl4Kt3Jk=)
2: zM4gg4epclePPLRTJtVaIJWeepc.asa (hash: MRTLDlocXHNiWSSlm+nZxDJcnI87lYWJ5A0tSmJ5h6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/582m42RtyToNLUKV0esJR2xmvKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:b4:38:4f:04:8a:11:78:6a:e6:80:94:e1:1b:9d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cda6e3646dc93a0d2d4295d1eb09476c66bca6
Validity
Not Before: Oct 12 20:00:56 2026 GMT
Not After : Oct 13 20:00:56 2026 GMT
Subject: CN=71d8a2da55eab894413d2e47b8b532d47215c1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:40:6f:91:a9:f1:4b:a3:e5:4b:1c:04:be:
6b:e7:3b:cf:d8:65:3d:6d:e9:a8:9e:84:13:3e:ed:
9d:bf:c6:92:50:55:28:d2:1b:61:9b:2b:ef:f2:f2:
49:fc:95:f8:a7:2b:5d:bc:f0:4e:1d:28:e6:9e:a3:
5e:6a:ee:fb:c2:02:1a:a9:21:5b:5c:58:c0:ea:de:
c5:78:a9:25:fe:ec:79:5d:fb:f2:88:eb:f6:ec:43:
db:3e:45:9b:14:79:1c:f5:aa:42:8a:11:02:75:c0:
73:2e:cf:1f:c0:80:66:81:65:b8:b4:c3:6b:3a:46:
b2:18:91:bc:56:2d:49:58:d8:c3:f6:0e:17:51:cf:
95:75:90:78:94:10:57:57:27:e0:14:2f:47:b2:5a:
59:8e:93:33:64:29:68:0c:ed:6a:ca:89:43:e4:4c:
39:2f:4c:db:13:18:ba:fd:3b:83:63:c5:70:5e:94:
c9:ba:dd:be:bf:53:90:4f:40:6c:dc:ec:8e:ac:4d:
29:a3:28:c0:91:e6:5b:1e:3d:24:70:5b:e0:41:63:
e5:eb:55:73:bc:51:3c:1b:cb:90:ae:92:0b:1f:a5:
27:7f:79:6a:fa:03:38:a0:23:54:ce:f3:01:5f:ea:
76:99:a4:d6:15:b1:ac:e4:a1:a2:ae:4b:f1:f6:72:
22:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D8:A2:DA:55:EA:B8:94:41:3D:2E:47:B8:B5:32:D4:72:15:C1:A5
X509v3 Authority Key Identifier:
keyid:E7:CD:A6:E3:64:6D:C9:3A:0D:2D:42:95:D1:EB:09:47:6C:66:BC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/582m42RtyToNLUKV0esJR2xmvKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:70:76:5c:70:94:e0:b9:2f:b0:69:c5:a7:79:f0:c9:d8:c2:
f1:a7:96:54:cb:6e:04:0a:ae:d0:db:03:7d:66:98:98:42:8f:
bc:a1:55:e1:b2:8f:0d:f9:60:dc:c7:26:db:9b:61:df:40:c8:
47:4b:f3:89:04:36:b4:4e:16:13:78:23:e7:41:fe:5b:3d:90:
b7:55:85:5a:f8:6e:af:de:e9:b4:72:d2:eb:77:d2:ba:a8:6f:
86:7b:40:ce:5b:f8:96:b7:48:84:ca:da:39:7e:9a:b0:22:e2:
7f:4d:b2:63:a9:50:54:a7:ab:a8:d0:f3:41:57:f2:00:75:ed:
16:e2:fc:da:3d:21:08:1c:35:33:3e:3d:25:ec:0e:40:d8:a7:
e7:27:bd:2e:3e:45:7b:d5:53:15:62:f0:44:51:a0:3b:34:82:
ec:fa:51:91:8d:e4:f6:ad:8f:56:b0:a6:db:02:cf:a3:49:41:
84:3b:fd:41:fa:e0:a7:db:5b:77:15:5b:3d:12:b5:c3:5f:77:
0b:23:d9:2b:9f:e2:90:e8:85:63:0a:2b:d9:39:1d:3e:d5:f8:
4e:a4:61:57:91:84:9e:24:55:5e:61:9a:93:8f:e9:0e:bf:14:
34:21:f6:54:1a:8b:6d:42:08:cc:dc:27:88:f9:69:02:a7:03:
95:36:0c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:13:52 2026 by rpki-client