Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/cd3876-db6f-4325-9a9b-94d3bad2db84/1/7XQkmGl8kYnDAaFsiAh6lx_boPY.mft
File: 7XQkmGl8kYnDAaFsiAh6lx_boPY.mft (raw, json)
Hash identifier: RM4Tfb+sT6rW2g2U4mdnd+8/MzvP+FO+YbeLYtOBon4=
Subject key identifier: 5B:DB:08:41:91:40:C4:55:1D:14:F2:62:4A:A8:6E:44:A7:5F:6A:EA
Authority key identifier: ED:74:24:98:69:7C:91:89:C3:01:A1:6C:88:08:7A:97:1F:DB:A0:F6
Certificate issuer: /CN=ed742498697c9189c301a16c88087a971fdba0f6
Certificate serial: 01A1A826D46ECBEB6990396A1F2B4F3586A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XQkmGl8kYnDAaFsiAh6lx_boPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/cd3876-db6f-4325-9a9b-94d3bad2db84/1/7XQkmGl8kYnDAaFsiAh6lx_boPY.mft
Manifest number: 4D
Signing time: Wed 04 Nov 2026 20:01:19 +0000
Manifest this update: Wed 04 Nov 2026 20:01:19 +0000
Manifest next update: Thu 05 Nov 2026 20:01:19 +0000
Files and hashes: 1: 7XQkmGl8kYnDAaFsiAh6lx_boPY.crl (hash: GZknYWa5pCeUf6KZnZ2btLAAzLpqPyZKltfIbgQWQQ8=)
2: Vc-AnL_35bb4kR8JSxGMfPzGPt0.roa (hash: Lv4xeKV0FyCXQbfH7NFsPPUSM7nGu6VgRd7vYocaQNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/cd3876-db6f-4325-9a9b-94d3bad2db84/1/7XQkmGl8kYnDAaFsiAh6lx_boPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/cd3876-db6f-4325-9a9b-94d3bad2db84/1/7XQkmGl8kYnDAaFsiAh6lx_boPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XQkmGl8kYnDAaFsiAh6lx_boPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:26:d4:6e:cb:eb:69:90:39:6a:1f:2b:4f:35:86:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed742498697c9189c301a16c88087a971fdba0f6
Validity
Not Before: Nov 4 20:01:19 2026 GMT
Not After : Nov 5 20:01:19 2026 GMT
Subject: CN=5bdb08419140c4551d14f2624aa86e44a75f6aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:5e:fd:69:31:0d:c2:25:52:3b:26:a2:05:
ab:ae:8f:bb:d2:9b:f7:4a:67:1f:d2:6f:32:81:4f:
70:48:56:50:2a:87:da:31:fc:57:3d:8c:b8:0e:30:
df:ca:7a:fd:fc:d4:24:37:a1:43:12:40:8a:1e:7e:
09:0a:9c:d6:87:88:c1:e7:38:16:0a:ba:1d:9c:bd:
89:dc:e2:e5:67:79:8c:04:12:e9:0c:71:75:c1:ee:
07:52:10:08:90:a9:66:55:30:69:e3:2c:97:ba:92:
ab:6e:fb:ca:44:29:04:dd:42:b4:2d:9d:19:f3:23:
ce:a5:e9:2b:0f:ef:cd:c7:65:8f:8a:1a:98:4e:51:
1c:1b:a7:eb:fe:52:b6:1d:36:85:ac:1f:84:90:21:
a2:95:4b:36:67:5b:89:c1:21:7f:30:f3:a4:d9:16:
31:a9:8e:c5:bc:4d:26:3c:37:57:04:5b:fd:d9:56:
73:9f:66:6d:f6:0f:e6:ea:3b:fa:39:32:ab:5d:d7:
61:a4:ff:25:60:30:d2:54:6b:d6:8f:ea:fc:6a:c4:
b0:03:9c:8a:e8:62:11:f4:21:43:62:d3:ea:a2:48:
94:27:5f:6a:0e:99:14:86:da:0f:d6:f2:7b:14:3c:
28:3f:58:13:37:6b:0a:e5:6d:a1:04:3f:3e:04:01:
4c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DB:08:41:91:40:C4:55:1D:14:F2:62:4A:A8:6E:44:A7:5F:6A:EA
X509v3 Authority Key Identifier:
keyid:ED:74:24:98:69:7C:91:89:C3:01:A1:6C:88:08:7A:97:1F:DB:A0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XQkmGl8kYnDAaFsiAh6lx_boPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cd3876-db6f-4325-9a9b-94d3bad2db84/1/7XQkmGl8kYnDAaFsiAh6lx_boPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cd3876-db6f-4325-9a9b-94d3bad2db84/1/7XQkmGl8kYnDAaFsiAh6lx_boPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b7:ba:7f:6e:37:eb:bd:68:89:97:64:5e:58:e1:f0:98:59:
34:8b:07:03:73:14:5d:ba:5e:c8:bf:0e:c4:93:de:ce:4b:a4:
62:79:a4:3b:64:76:62:93:76:ff:c6:fe:c0:48:96:e8:c3:91:
5b:36:9c:6b:3c:88:d7:cf:18:7f:42:8d:23:8e:a5:f9:8f:ee:
6a:cb:9b:db:c2:b7:18:3d:91:a4:0f:6a:1d:d5:91:b3:af:f1:
75:ef:13:0d:95:42:46:1d:15:cf:d4:79:27:54:c3:b6:31:57:
e4:ba:1e:3c:45:27:09:99:31:6a:2c:db:f5:95:5c:ed:1e:04:
9f:75:48:fe:cb:5d:38:a4:6a:c7:ba:a4:99:b8:bd:65:f3:fb:
e8:62:af:d5:fc:e9:84:72:04:8b:c8:f3:f4:c9:80:08:38:13:
92:4d:94:4b:a2:1a:7d:ea:5d:87:86:c1:e1:19:a3:be:18:fe:
bd:78:d9:3f:fb:16:0d:af:c3:31:48:20:dc:dc:0e:76:13:ef:
3d:a7:6d:4b:49:dd:4f:d4:b8:f9:d8:8a:56:0a:e5:ce:87:39:
77:02:e8:c0:5e:98:b7:80:43:a9:5f:fd:8a:8e:92:12:f1:e1:
f0:bd:7f:10:12:ae:e5:49:09:25:51:00:70:a9:08:81:77:d1:
05:ff:09:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:16:44 2026 by rpki-client