
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
File: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft (raw, json)
Hash identifier: dYNPoonpW4LFXlyTPjhoYxk0RI1sVk+iVYZ3+rBwvXI=
Subject key identifier: D7:44:F4:C2:95:17:F5:84:3E:AD:88:AE:35:80:5F:F3:10:F6:3F:E2
Authority key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
Certificate issuer: /CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Certificate serial: 01A0C2C45017C52DFE76D38AD067FB105795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
Manifest number: 07E8
Signing time: Mon 21 Sep 2026 07:00:40 +0000
Manifest this update: Mon 21 Sep 2026 07:00:40 +0000
Manifest next update: Tue 22 Sep 2026 07:00:40 +0000
Files and hashes: 1: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl (hash: ol7uh6Q2E9ysy0obNrE1T1CdVCaYZTl/hdZt2MB62yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:50:17:c5:2d:fe:76:d3:8a:d0:67:fb:10:57:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Validity
Not Before: Sep 21 07:00:40 2026 GMT
Not After : Sep 22 07:00:40 2026 GMT
Subject: CN=d744f4c29517f5843ead88ae35805ff310f63fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:ea:17:87:64:75:b2:f5:f5:a5:fe:e7:89:
66:35:dd:4c:b8:d5:68:23:25:a3:19:0a:e9:d3:81:
76:fa:f6:e2:f6:ed:1c:4a:f1:1f:db:db:f9:8b:6b:
88:01:06:ba:32:80:e2:fe:50:44:58:a6:8f:ec:e1:
39:16:70:5a:01:e2:a3:84:27:db:56:78:38:87:dc:
9e:b6:a0:54:16:be:a7:26:5b:3d:03:1f:0b:77:f7:
05:45:61:8f:d5:6b:f4:4c:5f:bd:b9:b5:16:c3:83:
fc:75:69:32:e3:75:f4:0c:bc:d8:e4:50:6f:e8:56:
a5:2d:98:49:c1:9e:a6:36:50:61:78:3d:12:64:36:
b3:77:38:38:22:6a:39:4b:3f:53:31:83:88:b6:e4:
df:02:99:1a:b0:17:dc:2b:a5:b1:65:7f:7b:5f:9c:
85:8a:0d:3a:ac:3b:fe:d1:b1:bc:bc:73:13:e5:5e:
29:23:91:45:17:67:d3:59:84:42:6c:b0:2a:2c:ef:
ec:21:9e:27:d1:e7:65:fa:80:24:a2:bd:33:5a:86:
4a:08:f8:94:ad:fb:61:d1:c2:f2:00:c4:3a:69:2e:
33:92:e2:52:44:d0:e8:ac:9b:34:dd:2d:30:81:39:
dc:af:b0:cf:74:f8:8a:46:4a:a0:3a:66:18:4e:30:
64:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:44:F4:C2:95:17:F5:84:3E:AD:88:AE:35:80:5F:F3:10:F6:3F:E2
X509v3 Authority Key Identifier:
keyid:EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:86:4c:06:64:a1:fc:a3:de:e0:4e:02:1d:4a:80:42:95:10:
01:93:60:8a:e6:a1:98:b0:a6:29:a0:84:35:5f:21:9b:6c:04:
d6:52:bc:8e:23:d2:44:64:f2:af:97:2d:b8:48:22:b3:98:f5:
7b:1f:b1:06:c1:10:c7:4b:2b:f0:fd:1c:f1:3e:cd:17:27:aa:
e3:77:9c:ad:99:04:46:9d:d6:25:d5:97:92:c2:0d:ed:cc:66:
51:ae:d5:2f:ca:36:22:7e:ff:d3:f3:51:22:c0:ca:ca:d1:69:
bd:61:21:32:11:eb:1b:17:03:43:49:c5:d5:b8:e1:ea:8e:c2:
1e:ae:76:d0:bb:73:75:b2:6c:03:47:ce:a9:83:25:62:ad:90:
17:f0:93:07:c4:75:19:47:29:26:ed:f9:3c:0f:ac:22:63:6d:
7d:e7:8e:c1:8a:00:1d:45:33:15:2e:c0:f6:52:84:fb:d7:2c:
56:55:b5:2b:97:8a:03:92:34:11:c0:cb:b0:b5:78:89:c6:6c:
40:84:d1:b9:57:75:a4:5f:d8:01:f0:69:c7:3c:a0:4d:e1:b7:
b5:49:93:c0:3c:be:b4:c5:ca:93:85:db:b5:80:d7:a7:e1:62:
4b:0c:a2:a6:3d:36:47:75:f1:b6:59:08:2c:cf:4f:c3:69:ce:
87:d2:d3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:59:22 2026 by rpki-client