Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/15cb3e-87c2-486a-920c-ab3989d42d70/1/7CGvMvHB-zrn8hK8a3c-5b8g_hQ.mft
File: 7CGvMvHB-zrn8hK8a3c-5b8g_hQ.mft (raw, json)
Hash identifier: HlmIF9xdldlXyt3Z+SeZ5uGab0eSyyXPX2chOvYbZ8g=
Subject key identifier: 4A:53:EB:A7:A5:FB:DE:9E:BD:75:E7:D9:6C:BF:FF:6D:59:F5:EB:5B
Authority key identifier: EC:21:AF:32:F1:C1:FB:3A:E7:F2:12:BC:6B:77:3E:E5:BF:20:FE:14
Certificate issuer: /CN=ec21af32f1c1fb3ae7f212bc6b773ee5bf20fe14
Certificate serial: 01A1DE70AA080B78118A20CABD11CAF80317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CGvMvHB-zrn8hK8a3c-5b8g_hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/15cb3e-87c2-486a-920c-ab3989d42d70/1/7CGvMvHB-zrn8hK8a3c-5b8g_hQ.mft
Manifest number: 0149
Signing time: Sun 15 Nov 2026 09:01:27 +0000
Manifest this update: Sun 15 Nov 2026 09:01:27 +0000
Manifest next update: Mon 16 Nov 2026 09:01:27 +0000
Files and hashes: 1: 7CGvMvHB-zrn8hK8a3c-5b8g_hQ.crl (hash: oQ4jfE/MC47BViHFWf8A7IRfRr/Juj0oTgwBzQCd2Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/15cb3e-87c2-486a-920c-ab3989d42d70/1/7CGvMvHB-zrn8hK8a3c-5b8g_hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/15cb3e-87c2-486a-920c-ab3989d42d70/1/7CGvMvHB-zrn8hK8a3c-5b8g_hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7CGvMvHB-zrn8hK8a3c-5b8g_hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:aa:08:0b:78:11:8a:20:ca:bd:11:ca:f8:03:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec21af32f1c1fb3ae7f212bc6b773ee5bf20fe14
Validity
Not Before: Nov 15 09:01:27 2026 GMT
Not After : Nov 16 09:01:27 2026 GMT
Subject: CN=4a53eba7a5fbde9ebd75e7d96cbfff6d59f5eb5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:91:2a:ae:40:8d:0d:8a:cf:a6:a5:52:ed:a1:
b6:15:b6:7a:0c:87:d7:fa:bf:a3:9d:94:19:6b:30:
e5:27:98:f0:c2:3d:80:76:36:9f:02:84:1f:f7:84:
48:16:35:16:35:c0:d9:10:fd:76:d3:a9:d4:9e:19:
86:48:35:06:7a:1a:77:e4:c0:dc:6d:4d:9a:f8:6a:
85:60:08:fc:eb:f3:2e:e0:9c:cc:09:18:ed:1a:49:
fb:3d:b9:a5:14:ad:4d:4f:c6:f3:4b:f9:e7:8b:70:
e2:4f:11:3d:5f:a6:41:d9:d6:36:86:dc:e5:f2:53:
a3:6e:eb:41:65:26:99:f4:b9:72:e0:8d:ec:ee:64:
8d:c8:c4:9d:04:65:e8:59:c1:0b:39:ab:db:bf:ba:
27:75:ed:fd:de:a3:c8:53:69:8e:6d:6b:cc:f6:88:
53:d4:9b:56:6f:d7:17:19:f3:99:31:3c:20:c1:4b:
18:cd:c4:12:32:05:67:3a:c8:52:8b:76:cf:53:d5:
30:cb:9d:2c:ab:72:7a:ff:bd:ab:29:f8:65:8e:68:
1a:4b:07:30:6c:15:00:ef:36:00:26:03:bc:14:64:
48:45:c6:a1:83:c1:30:39:d7:2f:fc:a3:7a:c5:00:
91:af:d5:45:55:cd:27:e1:42:8a:16:26:c1:f3:e0:
8e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:53:EB:A7:A5:FB:DE:9E:BD:75:E7:D9:6C:BF:FF:6D:59:F5:EB:5B
X509v3 Authority Key Identifier:
keyid:EC:21:AF:32:F1:C1:FB:3A:E7:F2:12:BC:6B:77:3E:E5:BF:20:FE:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CGvMvHB-zrn8hK8a3c-5b8g_hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15cb3e-87c2-486a-920c-ab3989d42d70/1/7CGvMvHB-zrn8hK8a3c-5b8g_hQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15cb3e-87c2-486a-920c-ab3989d42d70/1/7CGvMvHB-zrn8hK8a3c-5b8g_hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1e:17:00:e1:f1:6b:53:43:3d:13:3c:43:72:db:4f:80:2b:
db:29:cd:ff:4d:be:ff:84:c4:74:6d:96:d2:c6:2e:5b:d6:bc:
c3:9b:2c:32:62:38:3a:bd:a9:7e:b2:1d:b4:9c:fe:36:a1:91:
77:fc:b3:1f:dd:ea:e5:04:98:a0:0d:27:a5:02:ee:01:c0:7c:
50:c4:0e:8b:c2:7d:5e:e1:21:98:97:e4:37:ca:cc:52:d1:44:
3c:a3:bf:79:fc:0e:40:f6:e0:92:c0:c5:2c:cd:56:c4:83:39:
49:e6:fe:1e:ce:61:c6:7b:ba:b6:a5:c1:52:1c:48:1d:b0:8c:
a3:89:73:44:69:61:e2:a7:8d:1e:1e:35:9e:3d:06:ad:c9:73:
07:9c:d6:f9:92:d8:21:bc:3d:8d:7d:2f:69:9c:6f:5d:65:49:
ac:5a:cd:a8:60:e8:04:61:53:6f:a3:11:56:58:a8:2c:11:76:
74:59:af:99:94:6e:39:83:7c:2a:8c:25:99:d6:7b:5d:94:02:
b4:11:5f:8d:d7:52:bf:04:d5:9a:95:3e:f9:4d:f5:59:1e:2b:
81:f1:83:b2:73:d0:45:a0:24:9f:ac:d1:a4:d4:70:df:22:26:
1c:05:4a:31:4c:48:a2:38:51:7b:eb:9a:1f:10:3e:31:1d:01:
64:6d:dc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:35:44 2026 by rpki-client