Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
File: 7N10boF0dtVXj7y-1XTXwa0mQfE.mft (raw, json)
Hash identifier: qu+ImJtbXny+5RPIyoymY5gHfx7jHFLDs8jkUdpq6eM=
Subject key identifier: 28:6B:50:F7:EB:61:43:E0:1F:2E:BA:0E:43:E8:F7:2F:19:CE:26:BA
Authority key identifier: EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
Certificate issuer: /CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Certificate serial: 01A101DB444F48F3D47B1680A4E12208B9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
Manifest number: 1A84
Signing time: Sat 03 Oct 2026 13:01:49 +0000
Manifest this update: Sat 03 Oct 2026 13:01:49 +0000
Manifest next update: Sun 04 Oct 2026 13:01:49 +0000
Files and hashes: 1: 7N10boF0dtVXj7y-1XTXwa0mQfE.crl (hash: xC5GPkdamssQc+UrkEb5sCNHZVNe/AmTQnUHH/3uFiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:db:44:4f:48:f3:d4:7b:16:80:a4:e1:22:08:b9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Validity
Not Before: Oct 3 13:01:49 2026 GMT
Not After : Oct 4 13:01:49 2026 GMT
Subject: CN=286b50f7eb6143e01f2eba0e43e8f72f19ce26ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a2:04:ad:37:1d:1a:d4:4a:fd:33:aa:64:7c:
80:9a:f2:47:21:b4:6e:07:ec:32:fd:af:8c:e3:dc:
a8:26:7b:a0:74:16:65:75:5c:33:77:b5:2e:7e:4e:
c3:67:4c:d1:50:9c:09:ed:7b:a8:4d:a1:13:8a:19:
df:08:8d:a6:99:2e:7c:c0:e3:40:65:fa:c7:63:3d:
b3:26:db:e4:8c:43:3e:47:05:29:0f:b6:92:40:49:
0f:f9:b0:65:ab:2a:27:db:3f:5e:e8:03:bd:ec:c5:
d2:c0:3b:30:f6:58:e2:f6:c5:d3:45:1e:d7:b0:70:
93:42:25:49:d1:c9:85:e2:17:0f:7b:35:f8:05:13:
39:60:7f:c5:cf:5f:8b:84:15:b3:00:2d:0b:d2:53:
4f:f4:be:34:6b:d9:7a:df:95:af:c6:95:c5:94:45:
af:4b:fd:7a:aa:db:79:c9:0f:c3:4b:1b:24:29:77:
2d:8c:49:ba:1e:2d:13:b8:4f:6c:47:c0:08:d8:56:
aa:0e:a5:56:b0:e5:2e:8c:20:9d:0b:6a:f0:c7:ed:
f6:ed:80:17:8b:64:da:1c:45:cb:36:c0:06:66:27:
a5:43:a3:35:48:cc:bd:40:ab:51:ca:5c:83:22:bd:
19:e3:cb:0a:07:b6:f8:99:6c:26:31:84:99:e1:50:
11:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6B:50:F7:EB:61:43:E0:1F:2E:BA:0E:43:E8:F7:2F:19:CE:26:BA
X509v3 Authority Key Identifier:
keyid:EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:49:64:52:44:12:6c:48:49:7d:e8:b0:d8:e2:f1:9e:34:ff:
93:51:ca:eb:1f:1e:0d:ec:69:f0:8b:c6:99:d1:3c:d3:19:59:
c9:e0:f5:cc:d8:83:4b:86:da:75:56:45:fe:ac:71:7d:c1:2b:
f7:5f:2f:ab:b7:07:c0:69:40:85:c4:8f:6a:a6:a8:32:f1:75:
9d:6b:d7:2c:db:7b:2a:0c:95:fc:ba:31:75:c6:15:69:70:8e:
36:aa:05:50:ef:af:25:21:df:91:76:6b:2c:f1:e4:fa:27:99:
63:a0:8e:ee:11:cf:dd:31:32:c2:1f:58:65:27:b1:af:2a:c1:
de:f6:2d:87:88:bf:8e:96:db:2f:a4:5f:5d:45:26:51:5e:e0:
bd:c8:43:9c:68:0d:d3:ed:6b:38:d1:22:8d:4d:98:52:02:00:
70:79:c6:08:89:c7:9e:61:ce:9a:ca:b3:16:46:fa:f5:80:d0:
69:de:aa:09:47:f5:20:6d:10:ea:de:23:fe:b9:94:b5:47:a8:
6c:ae:58:ee:b5:e0:ff:bd:49:c3:16:de:12:bd:4d:34:12:8c:
b0:e3:6c:75:6c:ce:ed:c1:3b:e6:af:b7:46:57:ad:38:e6:5b:
01:48:45:18:d7:db:c3:36:6b:0a:50:3e:da:f7:a2:72:f7:94:
31:7e:14:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:38:49 2026 by rpki-client