Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
File: 15WKlFA6cEIXSd7wXv5joxfRisI.mft (raw, json)
Hash identifier: Hdn4QkVVJvOtYQrZSUcDtooPXc/aJc9qaIi/VU1Cnvg=
Subject key identifier: 9C:2D:A8:2F:25:72:E3:C5:63:59:C7:18:9C:A9:79:B8:2C:3E:29:0A
Authority key identifier: D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
Certificate issuer: /CN=d7958a94503a70421749def05efe63a317d18ac2
Certificate serial: 01A0D07FEDCDF9036E54871849B81CB24988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
Manifest number: 0B7A
Signing time: Wed 23 Sep 2026 23:00:39 +0000
Manifest this update: Wed 23 Sep 2026 23:00:39 +0000
Manifest next update: Thu 24 Sep 2026 23:00:39 +0000
Files and hashes: 1: 15WKlFA6cEIXSd7wXv5joxfRisI.crl (hash: 4Yd+C7YiAiBON3YNJqM/0PGjfAbfP3/AriPoPRpz2XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:ed:cd:f9:03:6e:54:87:18:49:b8:1c:b2:49:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7958a94503a70421749def05efe63a317d18ac2
Validity
Not Before: Sep 23 23:00:39 2026 GMT
Not After : Sep 24 23:00:39 2026 GMT
Subject: CN=9c2da82f2572e3c56359c7189ca979b82c3e290a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:3f:e1:2a:c3:02:9a:8b:60:e7:98:d3:c5:
a5:1a:32:a1:97:ef:c2:e4:ab:0f:1c:9b:13:d8:3c:
3b:85:8d:af:75:34:ed:26:80:90:64:ff:04:00:f4:
76:db:13:e3:b1:af:c5:05:d8:9a:1f:c5:98:fd:35:
43:1a:fb:48:93:99:b8:4b:d2:1c:68:ae:2c:c4:30:
9a:be:95:5a:47:bf:fd:92:4d:fc:07:8f:0b:a9:00:
c0:2e:ba:38:30:e0:7c:1a:50:b0:a3:22:f0:54:d4:
a5:d9:a5:51:94:7a:16:0b:3c:70:f7:e2:65:3a:8d:
5e:4b:e0:c1:0d:9e:89:af:96:ec:0a:f5:be:ba:ac:
2c:e4:0a:e1:68:7a:0e:c2:79:62:e5:49:84:6d:64:
d1:44:8a:92:ec:72:23:d7:b2:ba:c3:bf:af:58:f2:
0d:5c:6b:2c:4e:08:2a:ed:90:a2:f2:6d:b0:1b:1d:
47:08:9a:1c:fe:a5:f6:95:37:98:59:83:7c:66:40:
63:f5:41:23:c5:4a:fc:68:0c:a1:42:15:22:4d:c7:
39:26:37:99:e0:01:d2:94:80:b5:ca:ab:d0:a5:a5:
c4:12:61:35:cf:ae:55:df:d5:dd:3c:80:f6:49:56:
ba:44:df:51:9d:da:71:95:6f:51:cd:69:48:ae:85:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2D:A8:2F:25:72:E3:C5:63:59:C7:18:9C:A9:79:B8:2C:3E:29:0A
X509v3 Authority Key Identifier:
keyid:D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e8:64:92:a6:76:ed:0d:1f:be:37:8c:0a:3e:6c:ca:d3:4c:
b2:68:e1:30:fa:6b:33:2a:52:b0:cd:b8:f5:94:34:81:d5:3e:
d2:27:57:d2:f8:4b:4d:39:f5:4f:cb:38:b5:0f:bd:d6:31:0d:
f3:8b:35:12:3e:9f:8f:ee:1b:59:d8:d2:da:09:3e:dc:a7:f7:
f4:3f:1e:1c:56:2f:ef:0d:7f:43:28:9e:f2:fe:c6:55:55:1e:
12:95:58:dd:eb:26:7a:93:82:f7:a0:0c:06:51:42:d8:3f:06:
d2:b0:af:69:e0:7f:7f:c7:99:a5:9f:5e:a3:d3:12:14:5a:57:
48:04:eb:76:56:f2:32:ef:c4:01:32:e0:c9:15:a6:ae:00:35:
66:36:4a:b4:16:fc:cf:df:a7:5e:4b:9b:7c:29:73:90:e7:63:
11:6b:2f:46:0b:5a:b5:7c:f8:e7:06:7d:a1:7b:48:be:2a:7e:
d6:2e:d5:65:b3:98:d9:70:8c:ef:8f:9c:9d:e1:f9:97:c5:04:
f2:92:df:13:3a:a0:73:e1:38:00:7a:e1:00:12:bc:7d:53:cf:
a8:bd:48:34:fd:01:41:8c:b5:8f:4b:62:df:5f:23:d4:4b:f0:
96:e7:b5:0c:d2:db:81:05:52:bf:f3:b8:15:c3:bb:a9:ca:74:
68:09:8f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:38:38 2026 by rpki-client