
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
File: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft (raw, json)
Hash identifier: ik3S4mqShi/+kuhFuTf7CZrQ00hpgyHXZTYXSY9mm78=
Subject key identifier: 5C:82:F1:69:1B:00:F5:2B:2B:33:73:F9:96:6C:40:9E:91:DA:E7:D8
Authority key identifier: EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
Certificate issuer: /CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Certificate serial: 01A0DC171BF07F74B1D2EC2070D7889F07DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
Manifest number: 1151
Signing time: Sat 26 Sep 2026 05:01:37 +0000
Manifest this update: Sat 26 Sep 2026 05:01:37 +0000
Manifest next update: Sun 27 Sep 2026 05:01:37 +0000
Files and hashes: 1: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl (hash: 59o6X3lU4APxwd8Y1mtfLN+ZyHoXf3VMn9ne+Mu83TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:1b:f0:7f:74:b1:d2:ec:20:70:d7:88:9f:07:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Validity
Not Before: Sep 26 05:01:37 2026 GMT
Not After : Sep 27 05:01:37 2026 GMT
Subject: CN=5c82f1691b00f52b2b3373f9966c409e91dae7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:f5:0c:0b:99:bf:54:dd:68:c9:15:f3:a9:
e2:9f:b0:61:8f:f6:a4:45:4b:cf:89:5b:26:d8:2a:
db:ad:fb:27:cb:e4:65:61:50:27:eb:df:bc:59:fe:
42:f6:63:0c:df:fe:99:36:8e:79:ff:8e:fd:6e:49:
d1:12:72:53:74:0b:31:2a:e2:ed:b8:23:f3:fa:bd:
08:05:1d:11:ed:d3:11:b6:08:c5:5f:9f:fb:75:30:
e9:42:1b:a3:0c:c5:8c:5d:da:b6:18:f3:4f:80:d6:
4c:2c:5c:ee:f0:6b:ff:53:d9:61:99:bb:83:2a:63:
e7:ea:e2:49:8b:f8:9a:7e:29:ad:ff:9a:94:9c:6c:
33:2b:06:0c:9b:46:56:c0:8a:bc:77:b8:22:b3:94:
61:73:73:36:21:59:90:0b:fc:35:da:ee:3a:a8:f8:
c2:e7:d0:50:0a:f5:a4:90:c1:73:dc:cb:50:78:32:
c9:4e:68:b7:7d:0c:70:ab:c4:dc:2a:6b:9d:ca:54:
91:3e:55:07:ef:2d:56:67:28:90:02:85:94:88:92:
e0:08:c5:ba:32:5f:57:ed:52:fb:75:51:6d:b6:82:
70:91:a4:c7:d9:57:ce:39:a1:32:0b:b2:9f:57:34:
32:50:c1:1e:ac:36:c0:e2:ea:b6:73:5e:25:7e:37:
8b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:82:F1:69:1B:00:F5:2B:2B:33:73:F9:96:6C:40:9E:91:DA:E7:D8
X509v3 Authority Key Identifier:
keyid:EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:95:0f:e2:b9:29:f4:06:3d:c0:9d:23:ea:2e:65:53:2e:b4:
bd:7f:1f:aa:9c:5e:85:da:76:fd:7e:2e:e3:ca:dc:c4:97:aa:
3e:a3:eb:0e:c4:12:b1:3e:43:47:65:c6:e0:07:3c:db:64:c7:
77:c0:66:c3:85:4c:34:c7:22:dc:2c:73:78:0c:a5:ca:3f:93:
76:91:98:67:7c:22:d9:27:9e:68:47:e8:8d:ff:0b:2a:31:75:
70:6c:b7:a8:60:c4:6d:54:81:8d:a5:e6:b5:8d:78:bc:2c:85:
a9:37:57:fb:71:b3:c5:87:e5:eb:d9:f8:f4:91:5d:20:e2:a5:
e7:4e:b9:48:1e:8b:f3:76:a1:2e:b4:95:9b:9b:e8:5a:38:4e:
37:ef:08:da:9c:66:b4:16:66:9b:a0:3a:88:09:ef:c7:08:f4:
b1:31:77:b3:ce:a2:0b:31:f5:c7:d4:6c:eb:19:84:f0:96:6f:
e9:d3:be:7c:30:f3:96:9d:0b:33:e3:c5:62:76:98:88:cf:6e:
10:39:87:bb:33:7f:10:79:81:57:90:aa:f0:b0:df:1e:06:b1:
10:be:93:3e:f6:e0:24:c8:4c:65:8a:1c:8d:41:af:48:66:02:
9c:a7:5a:34:93:67:84:86:c2:7c:7d:62:9a:60:09:7c:85:86:
11:b0:33:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:44:08 2026 by rpki-client