Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
File: 7crL2itLMjHQi1HxbxsqfAgjetE.mft (raw, json)
Hash identifier: vqpJmxhNK1M6YK9njFgvge3nsRCIO3ltDBmYAfW57Dw=
Subject key identifier: 5A:D2:73:97:2E:6E:AE:12:73:DA:10:5B:CF:19:20:F5:16:48:AA:DA
Authority key identifier: ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1
Certificate issuer: /CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
Certificate serial: 01A0D5DE4F5F10C82BA7F8FFCC4356BFF7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
Manifest number: 06DA
Signing time: Fri 25 Sep 2026 00:01:51 +0000
Manifest this update: Fri 25 Sep 2026 00:01:51 +0000
Manifest next update: Sat 26 Sep 2026 00:01:51 +0000
Files and hashes: 1: 7crL2itLMjHQi1HxbxsqfAgjetE.crl (hash: YeYuknzIhe/ew8tamthNZSKEua580x0ErjnFfttceqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:4f:5f:10:c8:2b:a7:f8:ff:cc:43:56:bf:f7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
Validity
Not Before: Sep 25 00:01:51 2026 GMT
Not After : Sep 26 00:01:51 2026 GMT
Subject: CN=5ad273972e6eae1273da105bcf1920f51648aada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e1:7f:ec:42:e0:a5:95:fa:9a:b0:8d:c8:46:
2e:f3:19:96:7a:5d:d0:34:30:95:51:01:97:66:ce:
db:4e:27:39:8e:c0:9f:a4:7f:8f:5d:0e:f1:8e:2b:
db:6e:97:54:66:54:42:4d:e4:10:f0:84:35:79:05:
b8:52:1a:a9:79:cb:a9:1c:95:25:24:d0:14:88:02:
19:b7:b1:2f:cc:0e:ae:30:8c:ea:19:90:c1:53:12:
0c:00:8d:c4:4c:79:08:54:a6:47:cc:8e:b3:6f:37:
89:51:9b:c7:d6:f9:2e:bc:7e:1f:77:89:4e:60:a9:
b4:44:65:0a:c7:db:2b:d5:8a:9b:21:f4:01:32:e2:
d2:a0:eb:f9:f2:09:ce:c4:a1:0c:31:35:03:9f:c6:
17:ce:83:18:7b:cc:5e:7a:30:13:d3:75:35:b1:99:
5a:c4:f3:b8:39:5e:9a:57:cd:c7:a3:9c:2c:12:da:
4a:99:15:14:12:57:63:ed:70:77:17:a3:84:85:3b:
6a:68:2d:3a:56:60:3c:9b:76:3f:e6:1d:29:e1:f0:
d7:ab:91:f7:18:c4:73:f6:b0:a4:62:f3:7e:12:79:
47:4a:f6:00:30:8f:90:a6:d8:f3:b6:8b:20:9d:d2:
9f:72:9d:e4:5b:c3:89:2e:a6:a8:7e:ba:da:3d:53:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D2:73:97:2E:6E:AE:12:73:DA:10:5B:CF:19:20:F5:16:48:AA:DA
X509v3 Authority Key Identifier:
keyid:ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:05:8f:87:de:50:bc:00:73:4b:8e:6c:db:c6:8d:8a:41:03:
5e:0c:32:38:64:d0:19:63:05:b3:96:fa:36:fd:ba:12:0a:89:
30:d8:1e:e9:d6:ec:74:72:ec:2b:63:13:46:ee:71:96:38:cc:
10:cd:1d:f7:9d:f2:1b:ec:9b:d1:05:35:94:99:d0:91:84:7f:
b1:63:ad:c3:f6:3a:5a:99:af:a3:ba:4e:cf:d8:18:14:91:af:
a2:8a:12:08:a6:59:71:0c:8e:4b:1f:33:90:2a:14:de:ee:e7:
cc:5c:8d:c6:24:ec:23:6a:e6:93:90:99:6e:ad:59:d7:bd:e6:
fc:fe:56:45:d0:d4:d3:0d:5b:40:67:50:3b:87:d3:05:bb:a7:
04:47:2f:d6:41:83:b5:07:3f:93:4b:7c:69:d8:0a:dc:f6:a6:
f5:3b:50:b2:d5:e9:a6:b1:ab:86:e4:51:0f:91:dc:fd:f9:27:
1d:19:6b:3f:28:d4:13:64:7e:d6:35:30:bf:0d:42:33:19:1c:
18:c1:5a:e1:59:6a:c7:69:b8:df:82:4a:fe:cb:43:cf:62:98:
7c:e6:b6:4a:21:30:aa:6a:5d:62:0b:d8:d0:b2:7c:fb:1d:5b:
f7:9d:05:ad:c1:cb:78:f4:84:ab:51:90:f2:d9:98:23:89:6e:
02:58:ea:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:45:21 2026 by rpki-client