Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
File: 7N0ioeDFuwAoDxkz7uz4HNig5rI.mft (raw, json)
Hash identifier: 4itci1KGeslNZWZVe9vLzh4cRmcdDRimZiQ1IfC2BZo=
Subject key identifier: CB:7D:04:29:AA:E9:01:EB:2C:47:6E:7A:A2:3F:7C:E2:4B:0C:BF:B7
Authority key identifier: EC:DD:22:A1:E0:C5:BB:00:28:0F:19:33:EE:EC:F8:1C:D8:A0:E6:B2
Certificate issuer: /CN=ecdd22a1e0c5bb00280f1933eeecf81cd8a0e6b2
Certificate serial: 01A1114DB4077BFFB7E5F5DF41AD57C0BD06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
Manifest number: 1A1D
Signing time: Tue 06 Oct 2026 13:01:07 +0000
Manifest this update: Tue 06 Oct 2026 13:01:07 +0000
Manifest next update: Wed 07 Oct 2026 13:01:07 +0000
Files and hashes: 1: 7N0ioeDFuwAoDxkz7uz4HNig5rI.crl (hash: 79FCfKknbzSKMVO2b4vOyrGmhyrgyd9OreTck7CtptE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:4d:b4:07:7b:ff:b7:e5:f5:df:41:ad:57:c0:bd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdd22a1e0c5bb00280f1933eeecf81cd8a0e6b2
Validity
Not Before: Oct 6 13:01:07 2026 GMT
Not After : Oct 7 13:01:07 2026 GMT
Subject: CN=cb7d0429aae901eb2c476e7aa23f7ce24b0cbfb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b8:ce:a8:27:37:be:1a:73:b2:36:c3:3d:bc:
1c:fa:69:4d:08:6c:68:19:44:b1:39:f8:b9:77:28:
fa:d1:82:ea:ce:96:22:86:f9:02:15:fc:83:80:be:
bb:53:45:50:e5:5d:95:b1:78:64:63:12:6c:b8:14:
8b:81:cf:d0:20:7d:5b:55:6f:a6:72:8c:75:ec:73:
bf:77:14:b0:73:d8:de:ae:48:74:1a:29:4d:9c:53:
f6:87:3a:a3:f9:50:c0:a2:40:9a:d9:38:fd:5c:59:
1b:1a:7b:5b:f4:e6:26:5d:75:e4:63:0e:46:78:a3:
5c:8a:07:78:d3:69:91:a7:28:97:ba:88:43:6b:92:
83:c4:b9:98:e4:e3:c5:45:2a:ac:b7:f1:8a:dc:0c:
bb:bb:24:1f:dc:fc:d5:4a:30:de:5f:86:fc:c6:e9:
c4:7d:d5:61:20:cb:9e:cb:ff:55:a7:ae:c0:a6:7f:
67:46:22:d9:e4:12:e0:59:58:a3:39:77:b6:4a:de:
ce:fb:0c:17:5c:b3:ed:ff:f9:bd:91:ec:e9:39:51:
94:72:2b:84:41:76:20:c0:0d:27:19:af:df:93:cf:
c8:69:ab:22:f9:52:41:ae:f9:09:6f:04:93:2d:69:
1a:2b:6a:57:5f:66:6c:77:ae:18:47:66:3e:65:d1:
b7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7D:04:29:AA:E9:01:EB:2C:47:6E:7A:A2:3F:7C:E2:4B:0C:BF:B7
X509v3 Authority Key Identifier:
keyid:EC:DD:22:A1:E0:C5:BB:00:28:0F:19:33:EE:EC:F8:1C:D8:A0:E6:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:01:79:c5:2c:e7:3c:9e:83:e8:9d:df:50:3b:ae:dd:59:21:
15:b8:fe:b9:ee:e0:03:74:ed:4c:02:9f:40:1f:20:e0:24:2b:
be:64:59:d6:8d:5d:b3:41:8d:e3:b5:7a:d3:87:7b:f5:2e:79:
eb:de:e1:4d:92:47:04:97:c7:de:30:e1:93:56:c1:5a:e5:76:
ac:41:e2:ea:ba:65:57:60:16:73:85:67:34:23:c3:9b:1a:30:
62:df:16:c4:d9:62:f3:53:0a:55:92:40:61:89:51:2f:f4:d9:
e6:f6:da:68:7b:71:75:44:ac:25:73:5e:bb:23:e0:23:56:c1:
15:9a:00:39:27:2f:65:58:46:8a:1b:40:31:82:4f:5b:45:d3:
bb:76:04:bd:38:27:ca:32:20:07:99:05:ce:eb:91:a1:3d:2f:
87:5b:e8:8e:ef:85:8c:05:e0:38:33:21:ad:94:21:50:84:8f:
70:33:fa:35:17:cb:52:00:e5:70:a5:82:0a:f7:c7:2e:c2:20:
27:f0:49:13:c8:0d:34:bc:42:56:4b:b3:5a:7e:a9:84:6d:4a:
09:b2:4c:72:63:76:db:09:7e:ed:17:68:32:02:93:78:2a:b0:
2d:ae:3b:e3:28:40:26:5d:47:d5:aa:1d:cc:7e:12:b7:38:8b:
3e:1f:55:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:37:59 2026 by rpki-client