Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
File: 7E0DlAhPfkBiYJco9NTVewZFWlY.mft (raw, json)
Hash identifier: cf7uls5X7bav0lF95rtfLwl46WXZPzm+89FXA/jt/Jg=
Subject key identifier: DD:68:6B:12:CD:37:A3:EF:70:18:13:21:C3:40:D2:E7:72:67:C1:4C
Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
Certificate issuer: /CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Certificate serial: 01A108145DEF1D6F7731FAFBC9F120B09D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
Manifest number: 1A88
Signing time: Sun 04 Oct 2026 18:01:54 +0000
Manifest this update: Sun 04 Oct 2026 18:01:54 +0000
Manifest next update: Mon 05 Oct 2026 18:01:54 +0000
Files and hashes: 1: 7E0DlAhPfkBiYJco9NTVewZFWlY.crl (hash: aBHDPyPZw0SCV9h7s+c3QjW1sD5RQhsSLAFUZJeEyXQ=)
2: NE1cSr4PhSWQqxI3RwadUkiTzr4.roa (hash: gTOFfm6+4dqvFvqDPuHaiv7nUh/TeTbmvELpqBUfVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:14:5d:ef:1d:6f:77:31:fa:fb:c9:f1:20:b0:9d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Validity
Not Before: Oct 4 18:01:54 2026 GMT
Not After : Oct 5 18:01:54 2026 GMT
Subject: CN=dd686b12cd37a3ef70181321c340d2e77267c14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:0b:d5:ca:ec:1f:90:a3:9d:b3:7a:68:f9:
3d:2c:40:ad:32:41:87:85:19:48:9d:07:8e:df:65:
af:9e:16:9d:16:07:fc:11:99:a5:04:ee:63:93:03:
1b:11:b3:d7:36:63:0b:f8:e2:ec:8f:48:ef:86:6a:
28:5b:da:1d:83:4f:7c:92:e9:db:9b:16:a8:16:14:
47:d4:39:4b:31:d4:c2:53:1d:3e:26:bc:e1:36:88:
08:0e:9d:9c:f6:47:bc:00:10:af:2f:b0:96:38:68:
10:fb:25:1e:d0:54:73:84:08:10:38:d5:08:bd:3c:
8c:5c:04:81:0d:a4:a2:e3:10:1e:03:d6:77:47:5b:
2a:c9:50:d5:41:cf:34:a8:be:ad:13:9a:01:7c:ae:
5c:15:ec:c0:c9:cc:79:41:6c:aa:6a:7b:c9:a6:39:
0f:ed:53:f5:6d:bf:dd:8e:27:39:53:58:aa:d4:30:
56:73:5d:7f:da:f6:33:f9:d7:ff:dc:fd:09:f7:1b:
b8:81:ac:0c:64:91:1e:19:a5:84:f9:3e:77:cc:f9:
83:28:75:ff:31:7c:59:d3:29:a9:8d:56:4f:42:8a:
87:eb:83:03:f0:b5:12:f6:13:ef:19:da:ad:89:04:
27:b5:4c:e8:30:43:1a:15:62:7a:73:c2:78:ab:56:
d3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:68:6B:12:CD:37:A3:EF:70:18:13:21:C3:40:D2:E7:72:67:C1:4C
X509v3 Authority Key Identifier:
keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b3:16:75:3a:27:88:d9:ab:03:b2:7b:a6:51:77:c7:af:a3:
e3:73:b8:b6:70:e2:d2:5e:eb:44:30:18:c8:f8:1c:61:52:30:
78:35:3a:ae:e9:94:cb:98:88:1b:92:62:86:c6:80:78:74:da:
b3:ee:b4:3d:94:68:6c:4e:75:97:41:8d:4f:8c:9e:80:cd:a0:
8a:3d:ee:2e:9f:9d:44:15:61:2c:7e:ce:c2:0b:7c:77:2f:c5:
bc:38:91:07:f2:9b:6e:e0:28:84:b3:05:59:b6:06:33:98:60:
db:f8:c9:b9:75:31:b0:12:a8:67:05:ab:cf:b2:ee:35:be:ad:
58:3c:4e:01:68:82:25:33:96:aa:39:af:b3:ac:45:5b:9e:6b:
d0:96:24:bf:6e:cc:b3:c6:4d:e8:ec:71:f4:f8:53:0f:0b:c6:
63:8f:92:4c:27:0d:af:08:88:a8:23:22:7e:f6:09:09:c5:81:
ce:dc:17:be:a8:2f:fd:e0:a8:16:0c:f0:61:c3:53:ad:c9:35:
97:4a:ac:29:16:b7:47:07:39:bf:f2:2f:4e:02:95:dc:d9:16:
07:d5:27:09:31:75:8e:8e:16:de:86:9b:ff:c5:af:fc:33:9b:
34:51:72:20:84:2b:f1:7a:d9:80:80:e0:74:e9:76:b3:d1:49:
a4:1c:35:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:52:16 2026 by rpki-client