Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
File: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft (raw, json)
Hash identifier: /imtc7fW/+qEGlu375GNxaCRqejUl3uuqpJxhE1IJ1U=
Subject key identifier: 8E:41:4B:C4:93:10:44:2C:31:DC:89:A3:9B:92:22:A6:FD:B8:63:AB
Authority key identifier: EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
Certificate issuer: /CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Certificate serial: 01A0C858CB1855DDE4E7F1412F5F160CB67A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
Manifest number: 0EE9
Signing time: Tue 22 Sep 2026 09:00:57 +0000
Manifest this update: Tue 22 Sep 2026 09:00:57 +0000
Manifest next update: Wed 23 Sep 2026 09:00:57 +0000
Files and hashes: 1: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl (hash: Fm5A+5nj80aZKQoQzdFv7nuKO28ga7cLptkiAG0hbwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:cb:18:55:dd:e4:e7:f1:41:2f:5f:16:0c:b6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Validity
Not Before: Sep 22 09:00:57 2026 GMT
Not After : Sep 23 09:00:57 2026 GMT
Subject: CN=8e414bc49310442c31dc89a39b9222a6fdb863ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:e2:1d:0f:ef:c6:ab:a8:cf:5a:8f:0e:f4:
6d:43:d8:f0:81:5a:4a:03:6a:fd:a8:1b:cf:78:cb:
35:86:c5:fb:32:2f:16:97:95:aa:07:6c:fd:a2:25:
1a:a8:ca:b0:1d:b1:f0:ef:fe:d2:d1:6e:49:73:84:
ec:3f:6c:87:5b:74:a4:9a:64:e2:8e:5c:6d:57:60:
88:5e:e1:64:6e:53:70:38:ce:4e:f9:91:e2:f8:7a:
48:22:6f:07:d5:87:f8:a6:74:ae:53:6b:d2:d4:e3:
d6:6f:21:c0:e0:e2:a6:9a:be:56:8c:ca:12:cf:08:
e3:d8:a1:bc:48:c9:bf:f9:ec:ac:9c:f5:03:c9:4e:
43:8c:2b:dc:e2:f7:ad:aa:d3:f9:26:0b:1e:b7:76:
b1:df:b7:6b:8f:ef:0c:60:d4:6f:da:a1:a3:df:eb:
fd:06:8e:2f:2c:d0:9b:04:76:1d:57:73:6a:2a:ef:
7e:aa:1e:f0:50:0b:e8:07:d3:9b:74:2a:6f:75:2a:
d9:10:91:ee:84:55:3b:c0:95:5d:a5:1e:f8:7c:9b:
a3:dc:87:4c:c7:8d:a1:2f:a3:98:62:39:54:a7:0d:
e3:6e:a7:75:93:e6:43:2c:fd:70:4f:4f:49:54:e1:
06:69:a0:27:25:13:fd:7a:45:51:66:cc:67:63:73:
6c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:41:4B:C4:93:10:44:2C:31:DC:89:A3:9B:92:22:A6:FD:B8:63:AB
X509v3 Authority Key Identifier:
keyid:EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:2a:02:00:b7:6c:35:2f:b3:fa:43:ea:3a:b4:fb:27:d6:2e:
c3:4f:3f:a5:04:fe:1f:c1:0f:bb:13:c4:98:f8:61:76:8a:d0:
50:26:69:a6:a6:80:44:cc:9f:a4:f4:a4:8b:c5:61:18:4f:fc:
85:8b:4d:55:c7:b0:da:27:f5:4b:87:46:26:6a:5d:d1:ca:8b:
98:45:3a:42:f3:3c:d0:08:b0:a9:75:31:b3:8c:46:c7:49:0e:
28:cb:9a:56:cb:a7:46:4f:11:57:05:58:d8:f0:ef:17:a0:45:
ff:05:d2:74:ce:af:45:3d:b5:04:a8:84:c1:94:a8:4d:99:ce:
dc:ee:f3:8c:f1:3f:f2:95:d0:a4:96:19:06:b1:f8:15:b6:fe:
3b:0a:3c:c1:ce:1e:d6:7b:f4:fc:e5:a0:3e:b1:2f:fe:e1:86:
d2:17:df:1b:a8:d3:08:8c:dc:dc:4a:e9:8f:89:e7:44:e2:91:
a0:58:72:f8:6a:fb:84:8e:10:9c:54:fe:dd:cf:41:0b:3f:00:
07:58:7e:11:cc:99:a1:f4:d8:f1:7a:36:70:a6:9e:79:cd:89:
51:e9:52:bf:1a:2e:2d:b4:83:83:19:49:88:4c:8a:14:74:af:
06:18:68:4e:44:23:47:56:50:2d:f6:bf:f7:c8:b5:62:a6:e7:
e6:d0:7d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:53:50 2026 by rpki-client