Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
File: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft (raw, json)
Hash identifier: eL5kuw0Ks6qcYysNo4U7hhqLFs72ckw4Ck41lcMk2vc=
Subject key identifier: 70:56:AD:AA:14:10:77:FD:2D:01:A3:AE:31:9E:BB:56:47:20:10:5C
Authority key identifier: EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
Certificate issuer: /CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Certificate serial: 01A0D0128750E9A2328B7489FFE9B8044F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
Manifest number: 11DA
Signing time: Wed 23 Sep 2026 21:01:10 +0000
Manifest this update: Wed 23 Sep 2026 21:01:10 +0000
Manifest next update: Thu 24 Sep 2026 21:01:10 +0000
Files and hashes: 1: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl (hash: WqW1UQHApj69aaJxo+of4HaoUp8TUv5yI8pSAobOtpo=)
2: MF5bEoN5sg-nawNjAIcgKbPLo2w.roa (hash: Eoby9ocfXIo2ysG9Id22HAzaklocSsTXx7pabi0Mev4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:87:50:e9:a2:32:8b:74:89:ff:e9:b8:04:4f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Validity
Not Before: Sep 23 21:01:10 2026 GMT
Not After : Sep 24 21:01:10 2026 GMT
Subject: CN=7056adaa141077fd2d01a3ae319ebb564720105c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:53:cf:ed:60:6f:c3:6b:61:f4:2e:7a:ea:ca:
45:a6:e4:0b:ed:90:0f:b0:6e:9c:9a:de:fd:0a:c9:
33:67:41:da:4e:79:e9:35:48:0d:da:cf:84:b3:12:
f1:c7:ee:00:b5:cf:9a:e0:16:31:30:4a:f1:27:a0:
f7:64:66:96:75:e0:1d:6a:a5:d5:0c:2e:27:ba:fb:
aa:b2:b5:00:b0:09:3f:eb:b3:82:8a:6a:3c:c1:5d:
c3:80:4d:83:22:3b:db:14:90:56:0d:3e:a9:1f:96:
70:dc:b5:05:79:f5:d6:04:39:fb:90:3e:e0:fd:7d:
4b:c1:0c:bb:f8:f0:8d:23:da:7c:ff:cc:8c:a5:ea:
16:62:13:e0:33:9a:5a:1a:76:bd:c0:36:bd:f2:f2:
93:32:45:99:5d:0e:5a:3d:c4:a6:2d:ee:75:c8:21:
0b:02:b0:b0:58:f4:ec:44:e0:b9:4d:7c:29:9c:a2:
e7:95:0d:e5:0d:a0:a7:1b:7f:38:93:89:ba:96:42:
73:70:03:eb:fb:cb:d9:4a:d6:7a:7e:ba:46:52:18:
12:9a:29:eb:61:c5:c6:58:c8:48:97:bb:a8:9c:09:
25:80:44:e1:64:be:f1:e9:e0:c5:13:70:5d:3a:94:
0f:5e:ea:95:87:09:fb:93:97:90:c2:5f:62:c1:10:
61:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:56:AD:AA:14:10:77:FD:2D:01:A3:AE:31:9E:BB:56:47:20:10:5C
X509v3 Authority Key Identifier:
keyid:EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7d:12:7f:c8:1f:a0:b8:56:69:ea:03:b8:03:66:bf:bf:0e:
69:0b:66:a2:6c:87:9a:a9:d3:62:13:d8:dd:47:b7:3e:03:e0:
00:7b:9a:a0:b6:4b:fe:a9:0a:ee:4d:d8:0a:0d:15:d4:04:bc:
78:c7:7f:43:9a:e8:c9:34:3e:7d:26:87:f7:d1:4f:ef:c3:33:
46:d4:41:10:59:b2:9f:ab:f0:57:97:32:78:0d:01:58:4a:b0:
5d:f4:24:c0:e6:63:78:b6:4c:c3:63:33:7e:68:8e:b1:35:11:
7d:61:70:12:b2:ba:fc:ee:b4:52:d2:48:06:af:fe:17:d8:5c:
e9:4e:c4:c8:ff:ce:54:2e:ff:89:a1:21:fe:b9:d7:0c:52:80:
2e:1e:1e:60:00:f9:79:1c:c3:1c:53:b8:7a:15:4d:fa:3b:f6:
4e:6e:99:f4:65:79:eb:f9:62:89:57:97:cb:10:07:bf:27:6d:
fe:9e:37:fa:64:cf:62:70:ee:32:2b:ae:c2:76:36:cf:1f:aa:
ec:c1:bf:2b:9b:8d:82:1d:73:20:9b:fa:2f:56:3b:c2:1e:73:
12:6a:1a:f9:d7:e4:e9:df:28:38:51:ac:45:fa:01:35:27:84:
d7:7d:d0:2f:31:ec:e4:a9:6a:82:18:37:6d:74:08:11:37:98:
9c:fb:dc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:08:54 2026 by rpki-client