Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
File: 7nwowZyp0nBozrxpyBVBZ13BLN8.mft (raw, json)
Hash identifier: GE6tKVnxdsCI0Q7VEMDzL2IrPDS8ng3SZHWcmEsP5e8=
Subject key identifier: 08:BC:13:9D:FC:41:A4:6E:5E:BD:DE:BD:D4:68:92:BF:12:7F:84:12
Authority key identifier: EE:7C:28:C1:9C:A9:D2:70:68:CE:BC:69:C8:15:41:67:5D:C1:2C:DF
Certificate issuer: /CN=ee7c28c19ca9d27068cebc69c81541675dc12cdf
Certificate serial: 01A0CDB580655652100C115D72DCE08AA1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
Manifest number: 1A68
Signing time: Wed 23 Sep 2026 10:00:19 +0000
Manifest this update: Wed 23 Sep 2026 10:00:19 +0000
Manifest next update: Thu 24 Sep 2026 10:00:19 +0000
Files and hashes: 1: 7nwowZyp0nBozrxpyBVBZ13BLN8.crl (hash: l5euBSZ1+NaX7wmyHIBtYvh+Bovqnn6TziMLDOQ4Y7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:80:65:56:52:10:0c:11:5d:72:dc:e0:8a:a1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7c28c19ca9d27068cebc69c81541675dc12cdf
Validity
Not Before: Sep 23 10:00:19 2026 GMT
Not After : Sep 24 10:00:19 2026 GMT
Subject: CN=08bc139dfc41a46e5ebddebdd46892bf127f8412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:51:3f:da:85:10:1c:7d:8e:76:b6:83:48:
46:6e:2a:a6:95:9b:af:c4:98:5f:ec:d3:0c:2c:cb:
ea:b4:df:f5:78:c1:aa:1c:b0:f2:2d:37:7c:81:57:
33:be:f9:d6:02:45:53:58:54:fc:ee:49:30:39:a6:
bb:f1:64:87:dc:05:12:1d:cb:4f:81:4f:f4:64:35:
16:a4:53:c8:3b:32:53:5c:e5:d2:84:01:7d:f8:e5:
bd:af:cd:c1:c0:13:07:3a:9a:a5:95:50:19:cc:e7:
b5:5d:20:53:ba:42:e1:62:11:1d:11:3b:0f:39:3c:
b9:29:87:33:ec:b2:21:35:fa:2f:88:39:6c:cd:7a:
b1:94:8c:c8:cd:bf:d5:63:63:65:05:6e:6f:83:e5:
46:b4:80:2d:4f:ca:30:16:12:7d:6c:f3:bc:a3:40:
ff:8b:b3:8d:0f:59:51:87:fe:71:ae:3a:c7:85:88:
b7:5b:50:85:a0:26:f3:2c:8c:bf:da:34:06:f8:9e:
8f:89:8e:97:df:37:8e:d7:46:c7:78:7d:8a:a3:18:
d3:92:1b:0a:92:ea:af:a7:a2:0b:9b:4f:92:f5:50:
22:e5:cb:2a:36:8d:a3:17:47:2e:6e:d5:2a:7e:c9:
b9:22:23:0e:40:3f:05:08:11:fb:b6:df:b0:eb:e8:
be:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BC:13:9D:FC:41:A4:6E:5E:BD:DE:BD:D4:68:92:BF:12:7F:84:12
X509v3 Authority Key Identifier:
keyid:EE:7C:28:C1:9C:A9:D2:70:68:CE:BC:69:C8:15:41:67:5D:C1:2C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:61:5e:d9:d6:ab:27:25:36:df:2e:8e:fa:ae:89:61:b6:c2:
3e:e5:f9:44:58:9d:c4:a4:cc:8c:24:3a:71:36:95:6f:82:f9:
1c:dd:1e:a0:63:a9:d3:cb:5f:87:fa:da:8e:b8:7a:48:1d:b7:
b2:f4:9e:f3:7b:08:34:64:22:74:1d:5f:f2:2d:10:60:65:43:
a5:63:e6:88:c3:21:d8:26:f2:97:aa:8c:3e:bc:26:df:94:9b:
cb:a1:25:9d:b2:b5:a2:1c:24:da:c5:68:c6:44:61:51:60:44:
b7:bb:79:c8:88:5c:2d:5a:69:6d:c4:a2:9d:b6:28:91:bc:80:
76:87:3f:c5:d4:81:85:50:97:ec:3d:36:13:6f:ca:df:ac:68:
d4:34:76:62:68:02:94:90:be:68:3e:51:3f:54:03:58:6e:54:
c4:a7:c9:e8:49:7c:f7:81:f3:10:fd:17:31:20:3b:b8:d6:6c:
59:2d:94:82:c3:33:5e:93:02:ad:ee:3b:78:41:64:65:47:52:
f5:84:c6:71:d6:16:ff:d3:f9:55:74:87:4d:ae:ca:ad:0f:59:
0f:ea:d8:24:4d:6a:ee:4b:55:4c:89:0e:70:6f:36:8b:a0:a3:
90:c9:fd:a7:98:25:42:6f:e8:f8:29:a4:7b:41:2e:53:ee:69:
c6:0a:67:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:24:03 2026 by rpki-client