Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
File: 7iUCbllV3N0RFHb5toSdcoGFRps.mft (raw, json)
Hash identifier: puCD+70YNksgIsVeeWtnxL+6BXq6yvqxiXU8inhXyHI=
Subject key identifier: 85:32:EB:DB:19:3F:96:E6:05:C4:D4:1F:BB:29:1F:75:7A:6D:70:AA
Authority key identifier: EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
Certificate issuer: /CN=ee25026e5955dcdd111476f9b6849d728185469b
Certificate serial: 01A1C2F90DE7E31919F685B93B7DA111CD84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
Manifest number: 0957
Signing time: Tue 10 Nov 2026 01:01:04 +0000
Manifest this update: Tue 10 Nov 2026 01:01:04 +0000
Manifest next update: Wed 11 Nov 2026 01:01:04 +0000
Files and hashes: 1: 7iUCbllV3N0RFHb5toSdcoGFRps.crl (hash: g6+7gS9PlbA/oYSSnaUBo3YLQKJE3YOOxw8e/guK6C0=)
2: JU735praQ5D7ZouW4n12dU9bM-4.roa (hash: dXXp6fBpmMfrGgRgIwTGPcESSVbHsTgXLylCNhPpDJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:f9:0d:e7:e3:19:19:f6:85:b9:3b:7d:a1:11:cd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee25026e5955dcdd111476f9b6849d728185469b
Validity
Not Before: Nov 10 01:01:04 2026 GMT
Not After : Nov 11 01:01:04 2026 GMT
Subject: CN=8532ebdb193f96e605c4d41fbb291f757a6d70aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:26:be:8f:d8:93:4b:5e:3d:6b:d9:7c:44:
50:ec:59:ae:1b:e2:e2:95:92:90:8c:26:45:d9:5e:
0c:45:a7:02:b5:3f:52:d7:a8:a9:8d:14:c3:2e:ff:
10:15:a4:cd:8d:89:8c:8c:d1:b3:e8:7d:d1:fb:54:
b4:b8:ca:93:35:42:b0:01:21:9d:42:c1:b8:91:d0:
ca:00:d6:e8:d9:b1:86:71:72:df:a5:e8:f4:94:74:
22:be:fb:5a:e8:9d:4a:b4:f4:6b:e2:97:8b:9c:6b:
d1:9a:0a:5e:3e:73:e9:2d:d4:06:49:14:7d:d3:e3:
31:59:12:1f:d1:8e:40:0b:e3:67:b3:d1:e7:cc:fb:
90:20:39:65:33:eb:bf:b4:95:0f:e6:87:59:dd:12:
18:18:5a:f2:da:29:eb:cf:4b:a2:af:67:0e:8d:4c:
fc:5e:4e:dd:3d:64:38:5d:eb:6b:e3:00:55:ec:73:
8f:6f:f1:76:97:1d:04:5d:d7:b4:e9:53:b7:7a:41:
a8:73:84:94:89:2e:03:dc:c4:dd:56:7c:e3:f3:fd:
2e:3b:fb:63:34:a8:70:c9:52:b7:3e:52:0b:11:a9:
c8:c1:1f:5d:21:77:64:16:d1:b7:9e:16:42:a9:4f:
6e:84:87:ce:d3:51:ec:f8:87:8a:87:04:80:ca:9f:
6a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:32:EB:DB:19:3F:96:E6:05:C4:D4:1F:BB:29:1F:75:7A:6D:70:AA
X509v3 Authority Key Identifier:
keyid:EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c8:87:fd:0e:5e:b3:80:ea:c7:7e:8e:ee:21:1e:fa:25:05:
db:99:52:ee:39:b5:8e:cf:15:4c:c7:8a:e3:aa:16:d7:51:7e:
77:f3:d6:d9:63:9f:f4:12:b3:76:91:54:02:bd:35:ad:62:a0:
c3:84:29:11:75:99:8c:4c:ce:fd:15:e5:c7:ab:33:aa:be:b4:
15:66:8f:e2:c9:32:63:23:e0:ba:e5:c3:71:0e:1f:d3:b8:06:
ef:22:c3:93:4f:15:63:0f:38:48:71:bd:f1:6e:ce:46:31:1e:
a7:fb:bd:16:82:29:8d:2c:6c:59:0b:cf:41:2c:35:16:99:4c:
f3:98:76:f8:df:fa:4e:ee:f5:6c:ff:02:14:23:95:94:57:a6:
f4:0d:91:63:c1:15:6b:e0:2e:3b:18:8f:4c:99:97:b7:02:93:
cf:56:01:5f:cb:a5:37:7a:4d:82:91:0a:ef:20:79:06:24:9d:
fb:89:d5:40:a3:39:0d:c6:4a:b7:e8:1c:aa:12:5d:7f:73:4e:
e6:08:da:7c:ed:7d:cc:41:a7:f4:85:16:d3:55:a3:5b:72:f5:
b8:8c:f1:e3:e4:02:c0:2a:54:9a:e4:7f:ba:1d:17:36:39:01:
b5:e2:3f:e1:56:00:50:1b:86:72:ad:fb:2b:b9:5d:97:49:3f:
46:5a:c6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 03:23:18 2026 by rpki-client