Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
File: 7FExTgTslnbytgJI4bm9Au8A4Wg.mft (raw, json)
Hash identifier: el8sJmKVYXzAmA7c2XQPnfuHJvy2ksehIy6RwYbqCr8=
Subject key identifier: 1A:A8:6D:3E:3F:5F:D0:9A:F0:33:E4:FE:6F:55:BA:A9:63:A1:9F:63
Authority key identifier: EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
Certificate issuer: /CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Certificate serial: 01A0C5C57699A3E1C352B21EC8DFF5DD5185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 21:00:47 +0000
Manifest this update: Mon 21 Sep 2026 21:00:47 +0000
Manifest next update: Tue 22 Sep 2026 21:00:47 +0000
Files and hashes: 1: 7FExTgTslnbytgJI4bm9Au8A4Wg.crl (hash: vaJ3KmbE2HX/Gs0Q8IwSI2qW5WpzPT3XRMlvuy/V9lo=)
2: 955C7AtZAhtfMCkNkF_V4r29zNs.roa (hash: BzjiJ1i4x8f0IF+YLTcXKg5V1DmhNLRMYe5guMs7CHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:76:99:a3:e1:c3:52:b2:1e:c8:df:f5:dd:51:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Validity
Not Before: Sep 21 21:00:47 2026 GMT
Not After : Sep 22 21:00:47 2026 GMT
Subject: CN=1aa86d3e3f5fd09af033e4fe6f55baa963a19f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:08:11:f0:4d:53:e0:8e:1e:85:bc:b9:6b:77:
66:42:50:53:bd:69:41:29:b2:a0:d5:87:81:9d:fc:
5d:b1:a2:38:bd:24:35:28:96:8f:3e:5a:f4:8b:79:
6e:52:7a:3a:38:b1:4a:46:b9:64:a0:5e:90:6e:84:
dd:c8:10:45:9c:6e:41:6c:e9:46:2c:92:35:13:3b:
ec:66:cf:ae:7e:ed:7b:c1:5f:6b:85:68:3a:a6:a9:
e1:25:59:9d:4a:ad:de:e9:1a:d5:ab:7c:89:7c:2f:
ec:e0:d6:f9:48:6b:43:f0:0d:e4:02:32:07:85:d1:
6b:e3:f0:b0:79:d4:6f:fd:e3:c3:0a:b2:cd:70:58:
c3:62:6c:ba:b1:56:76:eb:08:58:17:38:5e:ab:83:
b4:99:0c:72:bc:64:ed:32:62:db:f9:3d:cc:7e:8a:
03:33:ab:9b:68:fe:ec:39:dd:15:e7:66:00:88:6f:
7a:90:63:2b:e3:a7:2f:b9:c2:9a:20:3d:51:17:3e:
78:fb:bb:14:6e:95:be:f4:b1:d7:26:fe:52:82:39:
b9:fa:13:5c:e9:69:db:1b:b1:aa:ec:27:c9:1d:94:
1a:d4:12:ab:53:49:8f:13:d7:19:97:d9:e9:6e:18:
48:5a:81:01:2d:65:71:f1:77:70:fe:06:b7:d9:c5:
3a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A8:6D:3E:3F:5F:D0:9A:F0:33:E4:FE:6F:55:BA:A9:63:A1:9F:63
X509v3 Authority Key Identifier:
keyid:EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:7d:a7:40:c9:68:92:50:bb:9f:9a:3d:b5:39:f5:7c:c8:0c:
90:ac:a8:c3:e7:d0:53:9c:6f:43:df:e6:97:52:81:3e:b4:12:
68:db:5f:4a:5f:41:64:7a:85:e5:2d:50:a3:1a:47:0d:7a:ba:
48:5d:12:97:9c:86:5a:03:20:cd:76:1f:b7:f0:65:93:f2:e9:
2a:a5:09:a0:7e:03:56:cf:a7:86:a5:2c:ae:21:1a:cb:b6:28:
4b:1b:8e:1d:72:d8:6a:3a:8e:1e:b9:cb:65:3e:f4:b3:7c:52:
e4:fe:1c:96:ce:54:2e:e2:89:1a:47:f7:3e:49:d3:08:b9:48:
e6:0b:0d:5e:0f:08:07:f3:ab:d5:00:8a:cc:94:26:59:44:c9:
fa:7f:6a:0d:c7:78:60:2c:b1:84:9c:bb:73:6a:6c:84:34:20:
b4:93:d8:fb:7b:eb:72:e7:3f:2f:5f:79:f6:58:ad:6e:8f:49:
f6:c6:7e:64:42:05:dc:f9:b6:59:e4:55:dc:14:23:9d:88:fd:
99:cf:3f:5d:26:58:6d:83:8a:05:70:b8:d1:c6:ee:62:8e:70:
1f:4d:be:a7:c2:4b:70:80:05:77:01:50:4d:00:f7:f1:8e:de:
0c:52:07:85:9b:a8:04:97:0c:aa:40:7c:7f:0b:78:00:dd:59:
7a:32:7e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:49:07 2026 by rpki-client