Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
File: 7e4lp4qBa942LEDIbjm5R9DuL_M.mft (raw, json)
Hash identifier: OfzxbZdV5ojsx5lLMyATjBnv6j/YtOr1WKXeJ8bmUdk=
Subject key identifier: 46:D1:3B:C8:B2:D5:71:71:9E:54:EC:B3:91:7E:B1:68:09:8D:03:AA
Authority key identifier: ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
Certificate issuer: /CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Certificate serial: 01A0CBC7BE164054B45E8CB30F7EE896707C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
Manifest number: 17AE
Signing time: Wed 23 Sep 2026 01:01:00 +0000
Manifest this update: Wed 23 Sep 2026 01:01:00 +0000
Manifest next update: Thu 24 Sep 2026 01:01:00 +0000
Files and hashes: 1: 7e4lp4qBa942LEDIbjm5R9DuL_M.crl (hash: ND5yDFiPSOSk1+R0LVvBS4Ekk3OkceZR4LNVO/Y2Gk0=)
2: Ro8iEiW7rbl5__Js738-X47zd7o.roa (hash: +phYjFZmxaM+pbKEjfOqXvZnYdeDvt8m3Nbx57x5ex4=)
3: xzeSROAZ4o5YtWLRSODt0z_nT28.roa (hash: ewTMl0RKi+Myrcx5oJN4DOCA09oZLzVzmbs3wk5czR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:be:16:40:54:b4:5e:8c:b3:0f:7e:e8:96:70:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Validity
Not Before: Sep 23 01:01:00 2026 GMT
Not After : Sep 24 01:01:00 2026 GMT
Subject: CN=46d13bc8b2d571719e54ecb3917eb168098d03aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:67:ac:23:64:7e:92:2e:5d:ff:4e:14:98:d0:
c9:8b:5b:48:c9:ee:8b:4f:a4:7f:f5:c7:17:34:59:
14:ee:51:8e:9b:06:21:3d:d0:f5:1c:24:ec:61:55:
db:72:35:2e:f3:bd:e5:0a:39:1a:d6:7d:d0:6c:a4:
48:90:79:d8:1d:64:d2:df:c7:b4:36:d9:7f:29:28:
90:d1:8e:8a:58:14:5b:89:dd:bb:1b:2a:93:e1:95:
9f:d7:d4:5b:00:2b:5e:09:cd:ec:27:75:55:fc:e8:
a9:44:43:37:3a:d9:97:12:91:b8:27:f3:66:0a:23:
9f:e6:e3:da:ca:e4:18:43:5a:e8:02:09:12:21:6f:
53:de:7d:3f:e0:96:f6:47:1f:f1:6f:6b:1d:78:44:
ba:08:c6:68:6b:22:45:7b:9a:24:24:47:45:bc:0c:
78:11:67:54:ac:f6:51:29:71:30:89:2b:35:a0:64:
fe:7b:a5:44:85:34:ca:95:e8:ec:54:72:49:c8:8a:
8e:cd:aa:be:c3:07:5c:34:73:fd:82:70:fe:30:11:
62:9c:6c:81:9c:c2:d5:d8:06:42:b3:27:ea:f2:f0:
ea:cf:45:db:8b:7b:0b:1a:7c:ca:75:f3:7f:69:2e:
e8:3b:60:fa:30:2a:56:ad:d5:5d:0f:45:ed:2c:9c:
f9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D1:3B:C8:B2:D5:71:71:9E:54:EC:B3:91:7E:B1:68:09:8D:03:AA
X509v3 Authority Key Identifier:
keyid:ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:66:91:60:41:97:15:d0:0a:ba:29:02:35:34:65:af:8f:4d:
69:9b:55:9e:14:95:76:11:56:cf:1b:32:9c:79:1b:0c:85:8f:
7d:19:41:80:d1:2c:e5:00:73:e2:89:23:d1:b0:c9:00:29:4c:
45:12:dc:dc:6a:56:75:15:cc:eb:54:38:0d:1f:b3:ee:1e:1d:
3e:52:1e:eb:35:7f:06:13:67:62:75:9c:66:42:4b:05:20:4a:
9f:b1:53:65:7b:ca:7f:52:ff:ac:ef:31:fb:72:76:f9:35:e5:
a4:ae:25:9b:00:af:58:06:03:a5:f9:68:39:8a:e4:b9:dc:11:
0b:a1:69:aa:5a:c0:fa:33:31:ce:ac:c9:4d:66:c2:10:a5:46:
db:3d:49:9a:23:7c:4a:08:b6:4f:39:ad:fc:3f:b6:9c:82:38:
5c:82:db:17:6f:de:f2:69:fc:90:f8:0e:4a:c5:8e:86:80:73:
81:5a:bb:98:3d:fc:e4:49:d3:55:fb:83:31:aa:88:4b:a8:46:
cb:d4:5a:21:0d:43:7a:e5:3d:b1:ed:29:eb:42:81:be:22:d8:
71:b1:5a:4e:52:89:e5:1b:fb:e8:85:b5:bd:81:1e:94:13:d2:
47:98:81:20:85:8d:5a:76:67:d9:cf:1e:b6:09:e1:94:7f:8d:
5f:77:ce:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:22:52 2026 by rpki-client