Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/269572-5cbc-4868-b58f-8ab864730e0c/1/7JEAuxDnzedS5_fjLrefuXbfiu8.mft
File: 7JEAuxDnzedS5_fjLrefuXbfiu8.mft (raw, json)
Hash identifier: P5Xzg219bfdpOaSHvfgMp+qOlzi1jAf1KaGXUAaqXC8=
Subject key identifier: A3:D8:D8:B4:40:F1:2B:E9:90:0C:CA:DC:0E:88:DD:8D:BF:7B:C7:BF
Authority key identifier: EC:91:00:BB:10:E7:CD:E7:52:E7:F7:E3:2E:B7:9F:B9:76:DF:8A:EF
Certificate issuer: /CN=ec9100bb10e7cde752e7f7e32eb79fb976df8aef
Certificate serial: 01A0CF3641330F7AC7796614FA9C2AE22CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JEAuxDnzedS5_fjLrefuXbfiu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/269572-5cbc-4868-b58f-8ab864730e0c/1/7JEAuxDnzedS5_fjLrefuXbfiu8.mft
Manifest number: 04
Signing time: Wed 23 Sep 2026 17:00:34 +0000
Manifest this update: Wed 23 Sep 2026 17:00:34 +0000
Manifest next update: Thu 24 Sep 2026 17:00:34 +0000
Files and hashes: 1: 7JEAuxDnzedS5_fjLrefuXbfiu8.crl (hash: kliWIkUpNuaro3zyzEA2DZx+i/aR1HU3fJyUr0+IB7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/269572-5cbc-4868-b58f-8ab864730e0c/1/7JEAuxDnzedS5_fjLrefuXbfiu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/269572-5cbc-4868-b58f-8ab864730e0c/1/7JEAuxDnzedS5_fjLrefuXbfiu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JEAuxDnzedS5_fjLrefuXbfiu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:41:33:0f:7a:c7:79:66:14:fa:9c:2a:e2:2c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9100bb10e7cde752e7f7e32eb79fb976df8aef
Validity
Not Before: Sep 23 17:00:34 2026 GMT
Not After : Sep 24 17:00:34 2026 GMT
Subject: CN=a3d8d8b440f12be9900ccadc0e88dd8dbf7bc7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9e:7c:24:77:2b:28:f0:8c:55:f9:6e:f4:5f:
a2:cb:56:59:bc:07:4a:d3:51:bc:21:1c:52:f6:60:
2e:88:6b:97:02:88:ea:54:8a:da:2f:bc:87:a3:c7:
9e:f3:58:67:ce:db:64:8c:f0:93:c2:61:18:d2:6f:
70:ff:88:14:02:42:9e:89:8a:5d:d5:bc:3f:ef:8b:
f3:4c:77:ba:d6:95:9f:19:4f:2b:ad:5f:bc:c4:a2:
42:59:1e:b7:5c:36:83:6f:e1:c3:81:b8:cf:3f:c2:
2d:13:b1:e6:84:d7:57:a5:df:c5:f6:cb:3d:d7:07:
6c:f4:43:04:cc:a4:98:fe:4f:7d:0e:8d:ce:c8:61:
15:96:94:a0:57:56:86:22:ea:55:f8:32:99:26:8a:
7a:84:60:6b:dc:8a:09:b8:9f:cf:f6:33:bd:aa:be:
06:13:86:87:58:f6:b0:62:22:45:0f:d7:de:1f:33:
0a:0b:c4:e4:22:aa:c2:95:21:16:bc:e5:33:ec:6f:
31:93:c9:0a:03:94:0e:58:ec:a2:37:e9:7c:96:20:
b8:23:57:72:82:8d:29:a3:c3:2f:0c:44:bb:15:00:
e6:7b:41:98:b4:ea:e6:4e:68:6d:27:48:0d:a0:fa:
72:a5:ac:56:79:c9:bf:ea:a4:82:26:20:8a:c7:7d:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D8:D8:B4:40:F1:2B:E9:90:0C:CA:DC:0E:88:DD:8D:BF:7B:C7:BF
X509v3 Authority Key Identifier:
keyid:EC:91:00:BB:10:E7:CD:E7:52:E7:F7:E3:2E:B7:9F:B9:76:DF:8A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JEAuxDnzedS5_fjLrefuXbfiu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/269572-5cbc-4868-b58f-8ab864730e0c/1/7JEAuxDnzedS5_fjLrefuXbfiu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/269572-5cbc-4868-b58f-8ab864730e0c/1/7JEAuxDnzedS5_fjLrefuXbfiu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ec:5d:42:98:66:05:81:12:dc:1f:26:fd:1d:50:f1:7b:6e:
36:df:70:a1:94:0a:bf:99:48:83:a3:a1:d2:ea:2c:8f:f7:6e:
5a:b6:7d:db:9b:e6:63:0a:87:45:a0:27:1e:b1:4c:e5:cf:09:
f6:0b:82:c0:62:e1:04:0d:e6:28:00:4c:6c:5c:5d:9e:73:9c:
75:c9:45:0e:04:85:5d:cd:49:a2:ec:be:3d:af:de:2a:23:64:
47:52:d1:10:d4:d8:35:07:ef:60:80:25:ad:bc:fb:b5:98:cd:
de:c2:31:9b:c2:2a:7e:9e:ba:df:3f:ec:34:b5:9c:dd:50:07:
06:d9:20:21:04:51:3b:aa:a0:95:d5:06:d6:76:6f:2d:c9:64:
8d:87:be:84:a2:6f:fa:a0:a5:f5:95:e0:a2:ac:ca:7e:e6:75:
5f:42:f0:a7:d4:35:7c:68:5b:21:23:51:ee:ec:f1:0d:f9:00:
56:bd:83:df:5e:5f:63:36:3a:5d:e2:21:4e:4b:62:f1:a9:54:
32:8c:86:01:d8:e8:f1:78:26:31:0d:6c:0f:d6:33:19:f0:1f:
0d:08:64:97:72:a0:5c:5a:90:52:82:af:c7:a3:d1:36:3c:18:
75:2e:b4:66:6c:58:6c:c6:7d:11:ae:ab:fd:74:c6:1b:05:1c:
88:ed:fc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:07:14 2026 by rpki-client