Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
File: 7ix0WZPMS28UcK6rRhTwhdSuQKk.mft (raw, json)
Hash identifier: Jehmec3nt2ObjdwYVyTMIEPMzGNF6AQkmVBmF0C5JY0=
Subject key identifier: FC:80:85:DB:8E:67:0B:0A:47:D7:1D:3F:4B:1F:CE:0C:33:D0:C3:3A
Authority key identifier: EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
Certificate issuer: /CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Certificate serial: 01A0D0803E18ADB1C96BACED5AACFB6F2728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
Manifest number: 16FE
Signing time: Wed 23 Sep 2026 23:01:00 +0000
Manifest this update: Wed 23 Sep 2026 23:01:00 +0000
Manifest next update: Thu 24 Sep 2026 23:01:00 +0000
Files and hashes: 1: 7ix0WZPMS28UcK6rRhTwhdSuQKk.crl (hash: CNhswTKK120l2/eeB5jBE8ZSM2xgK19rD0QORULEW2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:3e:18:ad:b1:c9:6b:ac:ed:5a:ac:fb:6f:27:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Validity
Not Before: Sep 23 23:01:00 2026 GMT
Not After : Sep 24 23:01:00 2026 GMT
Subject: CN=fc8085db8e670b0a47d71d3f4b1fce0c33d0c33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:65:69:f8:0c:00:73:5a:4a:9d:46:96:bc:
b5:9f:98:0c:c6:a3:cb:2e:83:b6:7a:72:e9:61:d9:
27:60:b0:37:14:ae:c3:7f:72:62:f9:47:0c:03:da:
4e:22:c6:b5:bf:07:cf:fa:96:97:c5:99:d2:e8:62:
76:1b:7d:1d:ce:7c:fe:a1:03:2a:8e:a1:2e:8e:80:
3c:63:4d:bc:b6:f2:b3:bd:f8:88:f8:73:30:64:c0:
42:22:ed:72:76:2a:91:e9:fc:aa:8a:53:aa:0f:e3:
97:27:23:83:70:88:01:3a:49:25:96:9b:a0:51:d4:
f5:ba:ae:30:71:f0:f9:2f:84:22:6a:0f:d5:3d:a5:
90:80:f0:4e:8a:06:16:33:bc:35:0e:a3:a4:1a:13:
94:45:fb:75:7a:8b:70:cc:42:b5:cf:c7:6c:1c:b1:
e1:cd:40:6a:0a:60:1f:55:21:b0:81:53:51:09:52:
e2:35:39:3f:8c:1a:97:f7:92:fa:0b:ee:2d:e1:0b:
17:b4:19:a7:01:7d:0f:55:5c:df:cb:45:55:79:c7:
b4:db:a2:68:77:da:8e:8e:d6:6a:21:6e:e4:b7:f5:
d7:6e:46:ab:62:82:24:0b:40:b9:e5:be:0f:b3:28:
fa:a2:d3:f2:e0:4a:28:80:34:f2:52:53:44:d2:1e:
f9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:80:85:DB:8E:67:0B:0A:47:D7:1D:3F:4B:1F:CE:0C:33:D0:C3:3A
X509v3 Authority Key Identifier:
keyid:EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b7:59:c3:4a:c5:20:c2:8b:60:b5:2f:b8:ae:91:a5:f0:64:
38:ed:40:e4:9a:d3:03:e7:27:8b:6b:e7:fd:a0:1c:a9:2b:d8:
ef:3e:eb:86:08:95:44:a0:f2:64:6d:ba:da:73:ea:fe:bd:88:
59:ad:ea:3c:86:26:82:91:b0:fc:c3:cb:74:74:91:f5:e4:38:
19:32:34:38:e3:60:2f:16:a4:39:3a:db:8f:c5:5f:8b:f0:9c:
f0:d7:74:45:b5:39:a5:25:85:54:18:7d:00:31:6b:ee:1c:d1:
20:1a:da:36:fb:cd:d2:e6:4c:8d:a0:fc:c4:17:6a:c9:7a:1f:
c7:92:29:57:81:61:a6:cf:e2:90:5d:fe:83:f5:e1:99:37:d6:
c0:de:97:b3:01:aa:25:b8:1f:4a:8d:c3:09:fb:1e:d2:6f:6b:
c2:9e:fe:57:1d:34:8e:a6:98:68:8c:f7:0b:ca:41:2e:55:47:
42:75:9d:5b:21:2e:5c:13:42:27:ce:b0:65:03:5f:89:64:89:
a1:25:45:9c:00:a1:ef:db:59:7c:e1:2e:9c:89:17:5b:29:b0:
97:90:37:96:98:ee:e0:ec:51:f3:78:03:5c:6c:5d:4e:69:b7:
9f:6c:63:7d:70:f9:ac:b3:1d:12:83:ef:fb:f1:35:f9:56:7c:
97:82:8a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:53:44 2026 by rpki-client