Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
File: 7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft (raw, json)
Hash identifier: M+Ue+2auD0u5oecv96rLMWTVBTO4AWFPk3g9xg9qkGs=
Subject key identifier: 4D:62:5C:56:4B:49:8D:9E:B5:B5:04:06:AE:02:1E:6D:E7:7C:0F:B7
Authority key identifier: EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D
Certificate issuer: /CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
Certificate serial: 01A0D94C671AE59E2A365061B716EA823CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
Manifest number: 0ACD
Signing time: Fri 25 Sep 2026 16:00:57 +0000
Manifest this update: Fri 25 Sep 2026 16:00:57 +0000
Manifest next update: Sat 26 Sep 2026 16:00:57 +0000
Files and hashes: 1: 7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl (hash: z026xcliz6VvLMCAdn76xDSC1qCwSymgFprv/muIBl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:67:1a:e5:9e:2a:36:50:61:b7:16:ea:82:3c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
Validity
Not Before: Sep 25 16:00:57 2026 GMT
Not After : Sep 26 16:00:57 2026 GMT
Subject: CN=4d625c564b498d9eb5b50406ae021e6de77c0fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:24:60:04:02:ca:98:72:c0:41:2f:bf:72:01:
80:f2:15:6a:c9:3e:53:96:9b:71:14:83:1d:d2:41:
f5:1d:fe:5e:68:1c:48:ac:9a:c2:0a:f8:14:aa:9b:
39:44:d5:dc:a8:ae:24:c5:cc:2d:44:3e:10:7e:15:
bf:9a:7c:70:3a:90:15:34:b9:78:e9:07:bb:fb:1a:
02:ac:2e:43:fd:7f:41:dd:f3:f7:3a:8b:b8:4a:90:
2b:7f:1b:bc:e8:8b:e7:fe:17:ea:c7:d9:49:19:52:
6f:54:c3:31:28:3a:63:1e:63:4e:fe:3a:d7:dc:01:
86:4c:eb:e9:3b:7c:4b:02:76:f7:f3:1b:14:e1:de:
ce:92:a9:e9:6b:63:71:ac:13:d9:f5:45:7b:79:e3:
61:b6:03:03:18:8b:7b:f2:be:87:68:a5:82:07:5b:
1c:ed:f6:7e:17:ac:e7:bf:d8:e9:20:15:dd:98:af:
7f:47:91:21:50:5b:d1:1e:5f:34:ad:c6:8d:5c:86:
7d:00:ac:a4:e6:f9:cd:ee:80:e6:cd:4c:1c:0c:27:
91:17:45:5f:c4:66:07:b4:c5:66:7b:a6:59:b8:67:
cb:03:b2:67:4f:fa:df:99:28:02:ca:26:10:3b:64:
df:23:fc:84:07:1e:8c:2b:61:bb:ed:26:2b:d9:f8:
3f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:62:5C:56:4B:49:8D:9E:B5:B5:04:06:AE:02:1E:6D:E7:7C:0F:B7
X509v3 Authority Key Identifier:
keyid:EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5c:75:16:1d:fb:2e:c4:9f:e7:78:5c:de:04:95:6c:61:c5:
15:7e:fc:e0:0e:c1:03:83:01:18:fa:2f:76:ef:50:74:f0:85:
20:c1:89:be:78:4b:54:01:a0:e7:08:6d:6a:17:a1:8d:e7:31:
18:e1:0b:88:88:3d:21:33:b2:71:ea:83:4c:24:35:34:11:e5:
dc:e5:13:13:a9:dd:4e:ad:c4:2a:9b:3e:eb:43:28:ed:99:c7:
41:43:cd:d1:bc:a2:d2:32:35:01:be:8f:9c:a5:e7:85:e8:38:
93:57:7d:4d:07:2b:2a:61:3d:c2:74:66:b4:6c:f7:db:68:b2:
92:94:42:25:a2:d5:a3:c1:49:ad:ed:0d:55:25:5a:75:86:9c:
25:e3:b8:ba:44:9f:f8:6c:22:50:c9:18:f4:76:6d:c7:f6:b8:
f1:ae:92:7c:27:c1:05:dc:d0:7c:dc:cb:ba:66:16:a2:b2:6c:
3e:eb:1a:3a:db:66:c8:8b:36:7d:93:4d:3a:f6:e1:51:71:6a:
33:b4:62:1b:ee:b7:4d:80:c4:89:12:4f:ee:94:5f:5b:23:f9:
86:23:71:3a:e8:14:2d:4f:1b:02:d7:8c:fb:a0:ff:59:cc:c2:
70:a3:63:dd:a9:79:f6:28:f7:bb:02:6c:8f:4f:6f:43:0d:60:
dc:dd:a9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:34:07 2026 by rpki-client