Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
File: 7HDF2GfeIA8BSGsaiAqUuEldciA.mft (raw, json)
Hash identifier: Qbhugf73T6Avwf4fAbkLN8aqSEVd8TogozpYNsOfFNQ=
Subject key identifier: 6C:02:C2:F0:42:BB:42:AB:9C:63:02:1E:BA:67:A5:B7:9E:79:77:06
Authority key identifier: EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
Certificate issuer: /CN=ec70c5d867de200f01486b1a880a94b8495d7220
Certificate serial: 01A0C40DE71A4CE277E98C5BF71DEADEDE85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
Manifest number: 1327
Signing time: Mon 21 Sep 2026 13:00:40 +0000
Manifest this update: Mon 21 Sep 2026 13:00:40 +0000
Manifest next update: Tue 22 Sep 2026 13:00:40 +0000
Files and hashes: 1: 7HDF2GfeIA8BSGsaiAqUuEldciA.crl (hash: BZPG+OtDR1BJEJqZREbXzNRtzQuMK1ALr2h5Z75nyD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:e7:1a:4c:e2:77:e9:8c:5b:f7:1d:ea:de:de:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec70c5d867de200f01486b1a880a94b8495d7220
Validity
Not Before: Sep 21 13:00:40 2026 GMT
Not After : Sep 22 13:00:40 2026 GMT
Subject: CN=6c02c2f042bb42ab9c63021eba67a5b79e797706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:32:bb:f6:95:5f:fb:b9:66:fb:56:68:d1:
66:45:d2:9c:5e:ed:58:6e:5b:e4:08:c9:6e:2e:8a:
d9:db:92:a0:ac:2b:5c:98:d3:24:19:86:87:60:8c:
36:2c:87:f6:ce:94:04:b6:15:50:4b:77:b1:66:15:
fa:ae:15:9f:65:57:b2:14:9c:58:dd:a4:62:54:70:
04:f1:52:58:ed:5b:16:61:dc:5b:49:78:46:5d:f2:
54:e0:ce:e3:66:49:e3:ef:0d:f4:c8:20:3a:b7:36:
a5:e8:3f:1d:d0:6f:ff:7a:ac:41:63:40:cd:cb:0a:
f2:89:36:88:6c:d7:b8:c8:69:e0:ba:c1:ff:99:3d:
67:9b:ac:a1:d0:2a:97:16:b7:c5:eb:66:9a:eb:ee:
a4:35:85:80:85:4f:3f:b5:51:7c:98:da:6b:0e:37:
3b:1a:25:8a:0a:8e:8d:1a:f9:74:63:1b:f4:78:c1:
0b:a6:5d:1e:f9:58:78:9d:16:7b:cc:68:f3:84:9d:
cc:46:81:cf:8b:bc:13:19:2b:1c:82:3b:12:21:84:
0d:7c:c4:4b:bb:9d:6d:be:23:a8:7d:48:83:bc:cb:
6c:e1:87:f0:c4:ad:c9:29:d9:1f:83:e8:23:49:ca:
65:be:68:c0:7a:a1:fe:f6:24:e5:6d:a9:a8:f4:0d:
c9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:02:C2:F0:42:BB:42:AB:9C:63:02:1E:BA:67:A5:B7:9E:79:77:06
X509v3 Authority Key Identifier:
keyid:EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:44:79:a4:de:80:9d:4c:2e:1a:7c:98:2b:53:45:bc:52:08:
51:cb:b5:2e:56:a7:56:55:8c:32:99:6f:6f:69:a1:15:64:c7:
50:65:25:b2:96:03:6a:97:f5:88:fe:cd:f2:d9:1e:6b:1d:14:
26:38:47:bd:1e:9d:85:23:d2:fe:cf:fb:8f:1a:1e:b9:51:f8:
61:dd:d6:98:d6:e4:b5:4b:bf:ec:53:ec:eb:7c:10:8f:75:bb:
94:dd:db:dd:f4:06:67:47:13:f9:61:cf:98:0f:28:09:5d:d1:
cb:62:91:81:2e:23:c2:bf:3a:51:e4:91:8d:ad:71:a6:e9:cf:
c1:39:74:c4:64:01:68:e0:ca:f4:e4:20:5d:e6:89:7b:bb:4e:
3e:7a:bd:ee:87:0d:5b:c1:be:ef:80:64:d1:2c:9d:b3:bf:41:
3a:4e:15:ee:35:f3:d5:f8:8a:cb:16:93:1b:fa:5a:a4:29:56:
ca:ea:ca:aa:e7:f1:49:84:75:20:40:5b:96:b3:b4:08:50:3b:
2b:9d:10:f0:18:57:d6:0f:5b:4a:c4:10:91:b2:85:ca:b2:8a:
23:8f:2d:89:af:b2:71:48:ce:cf:1c:b2:bc:d3:3e:14:63:e7:
06:1a:b5:af:95:4b:b3:b3:0e:02:f9:37:87:af:73:95:13:1f:
72:b2:b6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:42:05 2026 by rpki-client