Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File: 7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier: Idzx2XmIjDYL5mSxQUwvl9UGaTBOZR2i/bAeoqhI1dA=
Subject key identifier: 2C:ED:4A:B4:7A:4C:0E:7E:71:75:86:D8:08:7E:E1:0A:A3:FC:48:F6
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial: 01A11A86EA810CF4B9A4ADA330E7F30B17B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number: 1899
Signing time: Thu 08 Oct 2026 08:00:11 +0000
Manifest this update: Thu 08 Oct 2026 08:00:11 +0000
Manifest next update: Fri 09 Oct 2026 08:00:11 +0000
Files and hashes: 1: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: JcqJfLxTxHRBMt4FSpQaNyuQjZKrRsdUFxUpfBJf19A=)
2: CM5yTRt39UsRzQIWzuT7HO7bzSE.roa (hash: RH4eRmyLdVDmBQ+RCsFz+zVNIdYG+Aj2Xj1CkOhS/oI=)
3: LxSQP0g5iT2gsfHgEm-ts-WDJF8.roa (hash: bMz5HXK6775JKPVW+G1i9ymi7O9XK+msuKRHy3NE0Qk=)
4: psWOMQeMbdYZeEJwNKNEAJmZbBU.roa (hash: Kwf/BATNuOaMCMQQKCC+7fI7j3/5LLVOOW7HAw/+s1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:86:ea:81:0c:f4:b9:a4:ad:a3:30:e7:f3:0b:17:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Validity
Not Before: Oct 8 08:00:11 2026 GMT
Not After : Oct 9 08:00:11 2026 GMT
Subject: CN=2ced4ab47a4c0e7e717586d8087ee10aa3fc48f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b6:80:1a:4f:df:82:71:67:7d:a1:ab:81:7a:
d4:85:3d:1f:28:7f:72:29:51:3e:c1:24:08:84:72:
d6:ae:64:1b:16:ed:cc:59:7a:d7:71:16:26:6f:d8:
ef:a6:2a:8a:23:d1:39:dd:43:7d:4f:3b:bc:89:7e:
57:00:2b:d3:08:34:ce:f1:c5:c2:90:4d:cb:99:2e:
e7:d5:11:a6:f9:1b:28:38:ee:28:7a:71:85:92:5f:
f7:cf:4d:12:56:d4:1f:33:6a:e6:8f:8a:87:e1:54:
76:8e:f7:2c:75:e8:d0:eb:b4:50:f5:a4:1b:4f:51:
17:04:0e:61:a3:3a:a8:c3:8b:81:c3:10:b4:19:b2:
aa:f1:35:65:2d:35:e9:da:79:e9:4a:94:81:9b:49:
1f:4b:ee:44:36:34:57:4f:92:22:04:64:fe:d2:a6:
61:c7:be:7d:30:8e:16:07:fe:23:c0:21:97:c4:a8:
87:bf:e9:0e:0a:e5:5e:66:6f:10:01:ba:3b:48:ae:
1e:d7:20:fb:c7:62:37:d6:ac:7d:b2:bd:89:98:4e:
b2:af:21:a9:7c:57:1a:53:3f:e0:89:9a:9e:0b:73:
b1:70:61:bd:5c:fe:c8:72:08:33:87:e1:84:06:71:
75:4e:fd:54:77:19:ee:e6:2d:36:39:db:2c:f6:d6:
e2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:ED:4A:B4:7A:4C:0E:7E:71:75:86:D8:08:7E:E1:0A:A3:FC:48:F6
X509v3 Authority Key Identifier:
keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c0:de:1e:d8:cc:9e:de:88:e5:36:6d:8b:95:c0:8e:6e:09:
70:eb:ce:b9:17:a0:e0:44:bf:d7:e0:38:8d:c7:f3:f6:a4:d3:
11:5d:8c:16:d6:b4:7f:96:35:ae:b8:0d:89:67:8b:a7:0e:fb:
c6:32:1d:47:dd:ba:31:e1:28:49:66:ad:26:d4:ce:bb:a7:2b:
0b:17:f1:dc:60:5c:57:66:a5:4e:5f:9b:db:75:3d:3e:61:36:
3c:a4:97:a4:a9:ef:e0:cc:30:6b:6e:d2:49:99:5d:92:c1:e3:
92:5e:43:c2:bf:e4:4a:b5:c4:6e:2a:6b:32:6e:e3:99:95:8b:
70:01:0c:ac:f1:27:4c:ba:e8:47:b2:86:f4:3a:c5:10:f0:0e:
5d:0d:e7:70:a6:06:da:e2:99:f6:36:6f:89:d0:f5:8f:b2:f3:
14:ae:c6:ea:0f:7c:07:79:4d:c9:3b:4f:2d:5f:3c:ad:bd:1c:
ab:9c:76:d6:91:41:d7:7a:c0:96:6d:f3:af:27:42:2c:d1:7d:
27:80:15:0f:a4:18:1f:f1:55:d7:82:d0:bc:62:20:fa:43:7c:
b8:1c:16:09:7e:34:c1:d5:55:1d:36:3a:16:2c:9f:c0:9e:49:
a8:80:44:e2:83:04:f5:68:2f:21:54:de:88:11:ab:02:89:ea:
6b:62:8f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:32:12 2026 by rpki-client