Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
File: 7UV_lpwP7DW5JtD3KkfdRLizAPU.mft (raw, json)
Hash identifier: cwH65lxQGMDw0P1bEK1N1/IEIagtXI58+dSrv5VhGfY=
Subject key identifier: 44:02:C3:C3:CA:2E:C9:94:BA:E8:3B:CC:F5:B1:83:8E:96:AF:59:1A
Authority key identifier: ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5
Certificate issuer: /CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5
Certificate serial: 01A1C10A8E658C1323AD24F8973681C914DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
Manifest number: 1AEC
Signing time: Mon 09 Nov 2026 16:00:56 +0000
Manifest this update: Mon 09 Nov 2026 16:00:56 +0000
Manifest next update: Tue 10 Nov 2026 16:00:56 +0000
Files and hashes: 1: 7UV_lpwP7DW5JtD3KkfdRLizAPU.crl (hash: w3JHU26kxhvhTsnmSrmdvKZm8ZY4f+9UDxyDTnByVSo=)
2: kp3XcltFj2ImgK1gmThwB5Z5ALI.roa (hash: iZZ4tNwYuV01qlmFMVC72STH5TgwevyCIeA37xL2VKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:0a:8e:65:8c:13:23:ad:24:f8:97:36:81:c9:14:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5
Validity
Not Before: Nov 9 16:00:56 2026 GMT
Not After : Nov 10 16:00:56 2026 GMT
Subject: CN=4402c3c3ca2ec994bae83bccf5b1838e96af591a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:af:01:d1:e9:1c:31:94:62:af:c3:df:78:bb:
91:2b:e4:57:f8:1d:20:79:3c:2e:bc:ce:33:3b:2a:
43:0e:4d:27:93:d7:1e:55:ba:04:01:04:73:23:b3:
7a:f4:b0:d8:31:71:0c:4b:04:29:a7:17:0c:90:aa:
07:d1:f9:2a:d6:d8:14:b6:26:ff:fb:a7:6b:7b:cd:
b6:ab:cc:1a:3d:6a:9a:a9:59:8f:f8:2a:23:9a:4c:
69:29:0f:4a:fa:17:0b:19:0a:05:4d:6a:c5:7e:54:
06:b6:95:28:3a:2c:83:02:19:90:72:48:9d:7d:c2:
cd:a7:79:73:0a:a9:0e:b2:f4:c5:7e:34:ed:b6:74:
8b:8d:37:02:8f:bc:f2:a5:04:d3:ec:52:be:b3:6e:
1b:a1:0e:53:17:b1:ca:e2:c1:82:54:3e:4c:9b:fd:
87:c0:9c:7d:58:4a:ef:75:b0:18:16:ec:1e:56:b5:
96:8e:55:b2:6d:5e:d4:e7:d6:24:b9:ba:bc:ab:b0:
60:76:6b:4c:12:a9:4f:49:d2:0b:db:c9:7c:5c:e2:
66:4f:69:6f:25:78:de:74:0c:26:6c:05:a4:a8:c2:
6e:96:b0:35:c8:60:d1:87:c6:ce:79:e2:df:f7:67:
fe:aa:02:56:62:e8:23:b3:a4:af:53:b5:b2:da:c1:
27:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:02:C3:C3:CA:2E:C9:94:BA:E8:3B:CC:F5:B1:83:8E:96:AF:59:1A
X509v3 Authority Key Identifier:
keyid:ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:59:ea:c3:49:a8:d4:d0:bd:d6:45:ec:b8:6c:ab:56:fb:a2:
e5:60:16:dd:8a:9f:94:8f:f8:a2:49:da:93:3c:bb:1e:4f:06:
bd:a0:a7:60:53:60:f9:e0:1d:88:24:a3:ba:86:8b:be:eb:45:
c4:3c:6b:3c:eb:47:4e:b4:ac:0a:5d:d5:47:85:d3:18:ff:61:
26:6c:b5:00:c2:f7:9a:4e:3a:bc:22:d4:d1:97:46:52:6a:31:
cc:21:0b:1b:80:0a:98:b5:39:a4:d4:cf:68:40:f9:45:5a:3b:
da:58:d3:10:b3:e5:ad:e5:0e:1b:98:6e:40:d3:e7:86:42:45:
9f:b1:c5:47:3b:32:c1:81:50:39:c4:a1:ef:09:e4:e0:5b:9a:
29:de:8f:69:33:f6:b5:9b:b2:10:02:28:3f:b4:0d:6e:bf:7d:
94:86:b5:87:43:9a:99:37:f2:6c:18:5e:17:3f:6d:c0:8e:89:
e2:06:2a:e2:2e:8a:28:75:66:79:25:17:21:e3:38:d2:9d:df:
57:67:10:0f:ad:81:7c:89:f6:ef:e2:26:5e:cc:fb:0e:81:89:
5d:a7:8a:8c:5e:6f:c5:2d:5c:0e:46:e5:32:ae:52:5a:8c:57:
ae:d9:72:53:00:f5:ec:6c:5c:84:50:01:a6:6c:bb:ba:19:bf:
27:b7:b6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 21:04:06 2026 by rpki-client