Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
File: 7fBEw2PXiOdDNOE24DzH_R5JohY.mft (raw, json)
Hash identifier: J9C5OzCxChWd27auPrAcNKtxIH2uMbaJzLpQzIMMJWQ=
Subject key identifier: D8:86:95:B5:25:31:57:45:39:8D:B9:3B:6B:D4:7F:B5:00:8C:07:FE
Authority key identifier: ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
Certificate issuer: /CN=edf044c363d788e74334e136e03cc7fd1e49a216
Certificate serial: 01A0C40E77F73D32A38BCD8EF506F2EE106F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
Manifest number: 0CDB
Signing time: Mon 21 Sep 2026 13:01:17 +0000
Manifest this update: Mon 21 Sep 2026 13:01:17 +0000
Manifest next update: Tue 22 Sep 2026 13:01:17 +0000
Files and hashes: 1: 7fBEw2PXiOdDNOE24DzH_R5JohY.crl (hash: bam/3S2s6lfUcQXcUQwM+NGCvdKz5zQT7FN06cm0BVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:77:f7:3d:32:a3:8b:cd:8e:f5:06:f2:ee:10:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf044c363d788e74334e136e03cc7fd1e49a216
Validity
Not Before: Sep 21 13:01:17 2026 GMT
Not After : Sep 22 13:01:17 2026 GMT
Subject: CN=d88695b525315745398db93b6bd47fb5008c07fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:c0:31:0c:4f:5e:70:f4:38:a3:fd:f2:25:
8c:c1:27:4f:93:0e:d4:a4:09:51:30:02:c6:6e:9f:
cb:d9:2f:a2:e1:5d:b5:43:15:60:98:d3:9d:3d:37:
63:8f:e5:e4:95:b1:01:c1:1d:b1:ed:7d:6b:59:64:
fd:2a:bc:16:35:8e:57:91:7f:88:92:8e:17:bb:ff:
ff:f1:cb:88:14:56:ca:8a:16:37:1b:52:65:3a:37:
57:ee:4b:47:cc:c6:a9:8d:68:41:79:25:4d:ae:cf:
5c:db:f6:1c:88:a4:b7:0e:8d:b0:24:b3:f7:fc:84:
08:4c:3a:3e:ff:de:80:36:d6:6b:59:31:ab:85:63:
48:43:b2:6b:15:95:b9:7e:e1:8f:a9:41:ff:49:41:
e5:5c:e9:87:2a:80:34:e9:9b:3c:01:7a:be:d8:40:
0f:94:96:bc:9c:07:d5:db:c3:92:1d:29:32:bd:d9:
0c:f4:11:d1:8e:3b:db:84:29:60:7a:a2:fe:61:d8:
a5:b2:71:60:ee:b1:72:80:c0:a0:cd:3e:c2:bb:ed:
03:b4:f7:bb:87:8e:0f:b7:bb:9a:93:87:f4:36:c2:
81:0a:be:97:ac:41:0c:52:36:6f:bc:88:e6:d2:8b:
2c:cc:ca:fe:2d:03:c4:35:97:2e:4e:5f:50:7a:43:
af:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:86:95:B5:25:31:57:45:39:8D:B9:3B:6B:D4:7F:B5:00:8C:07:FE
X509v3 Authority Key Identifier:
keyid:ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:36:b1:e5:ee:a7:8e:e3:56:be:ba:74:05:b1:5b:45:74:f1:
d8:9f:a0:57:27:22:aa:0b:fb:84:3f:cd:8b:93:e9:d3:04:51:
94:6c:4e:23:05:c6:c3:57:1c:61:f8:73:18:38:3c:47:a6:1f:
8f:c0:58:fc:1d:a6:17:d4:6f:9d:05:ab:03:d5:cc:37:86:50:
6c:b9:00:34:cd:38:fa:b5:c5:8b:3f:75:8c:de:3e:9a:9a:c2:
c8:0c:89:7a:38:b5:55:0b:99:40:e3:59:7c:ee:0a:37:c8:ba:
d7:b5:ef:01:8f:76:2b:cc:b8:65:61:b9:59:cb:98:35:30:78:
4b:17:b8:ee:4e:64:cf:b2:bf:88:93:e4:0f:64:49:d3:da:2d:
47:e8:db:20:16:9f:22:b1:a6:30:ae:2e:18:fb:dd:f2:d2:69:
9f:1c:fb:8d:01:93:54:27:76:8f:9a:d8:9d:a9:e7:4e:ae:c4:
9b:f6:eb:b8:60:46:8c:9b:db:bb:ec:41:82:f6:d6:1b:e0:a4:
41:27:3d:10:20:d9:db:20:af:33:9c:d4:19:a5:05:2c:53:bd:
fb:c9:1e:27:87:df:47:ad:a2:96:89:ed:c3:e6:52:92:ce:56:
de:df:b1:51:b4:64:29:ab:0e:2f:67:3e:0e:ce:a2:bf:c5:08:
1c:55:cd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:57:48 2026 by rpki-client