Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/3ae423-e5bd-4e34-a399-3b953cca67c6/1/7VsKouaD6NtXVqQ-NI654ci-xw4.mft
File: 7VsKouaD6NtXVqQ-NI654ci-xw4.mft (raw, json)
Hash identifier: Gz1Rth5aO87l+bGDLuM98EAwfCUFtbjAUP6GOSXO2bw=
Subject key identifier: FD:8F:0F:83:46:CF:BC:E4:04:20:47:2B:1A:DD:9F:1E:DF:54:F5:AD
Authority key identifier: ED:5B:0A:A2:E6:83:E8:DB:57:56:A4:3E:34:8E:B9:E1:C8:BE:C7:0E
Certificate issuer: /CN=ed5b0aa2e683e8db5756a43e348eb9e1c8bec70e
Certificate serial: 01A0D01256EA6EA61B21255221FDE9277061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VsKouaD6NtXVqQ-NI654ci-xw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3ae423-e5bd-4e34-a399-3b953cca67c6/1/7VsKouaD6NtXVqQ-NI654ci-xw4.mft
Manifest number: 010D
Signing time: Wed 23 Sep 2026 21:00:57 +0000
Manifest this update: Wed 23 Sep 2026 21:00:57 +0000
Manifest next update: Thu 24 Sep 2026 21:00:57 +0000
Files and hashes: 1: 7VsKouaD6NtXVqQ-NI654ci-xw4.crl (hash: Hgqa8HgNJkUpbGX4qHS0uH1mVLyf9x+XYepvug+3LIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3ae423-e5bd-4e34-a399-3b953cca67c6/1/7VsKouaD6NtXVqQ-NI654ci-xw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3ae423-e5bd-4e34-a399-3b953cca67c6/1/7VsKouaD6NtXVqQ-NI654ci-xw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VsKouaD6NtXVqQ-NI654ci-xw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:56:ea:6e:a6:1b:21:25:52:21:fd:e9:27:70:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5b0aa2e683e8db5756a43e348eb9e1c8bec70e
Validity
Not Before: Sep 23 21:00:57 2026 GMT
Not After : Sep 24 21:00:57 2026 GMT
Subject: CN=fd8f0f8346cfbce40420472b1add9f1edf54f5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9d:ff:ed:b8:b1:6e:73:cf:24:8f:5c:c2:99:
29:53:e6:47:c2:f3:eb:1f:66:3d:d2:08:a1:eb:90:
59:56:67:f6:f7:a5:69:0d:d3:dd:6e:6c:e0:10:18:
73:cd:1b:b1:e8:b0:c9:e2:a2:d3:c1:a1:4d:4a:db:
45:ff:76:34:b8:cb:09:c8:c6:83:1f:d0:e8:4a:a6:
cc:7d:10:f3:30:14:c0:d8:11:a1:ca:be:99:b9:ca:
38:e1:95:74:95:bc:c7:6d:6a:db:83:37:1c:00:54:
d8:44:c3:82:98:ee:02:a1:68:18:30:c0:a3:1c:5a:
2e:5b:33:c3:34:f9:49:df:7a:f1:d0:ea:40:3f:d5:
6d:31:54:08:1d:9b:f8:ed:fa:d1:ae:f7:a4:59:72:
76:4b:9f:b3:f0:15:97:3d:54:7d:f0:7d:f3:1f:f8:
cf:de:32:cb:09:e3:50:08:a1:fd:99:e8:42:eb:0a:
e8:1b:5c:69:34:53:ce:3b:94:1c:d0:b9:45:2b:25:
50:02:2c:bb:49:8c:9c:5a:6d:09:42:1e:3f:62:be:
26:59:ff:ae:db:8f:37:d4:bb:24:45:c8:09:3c:97:
b7:8e:f0:c3:37:53:6e:38:1e:f0:e9:a7:1b:b3:d7:
2c:71:23:a9:0a:cf:3c:96:61:da:13:16:61:04:09:
37:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8F:0F:83:46:CF:BC:E4:04:20:47:2B:1A:DD:9F:1E:DF:54:F5:AD
X509v3 Authority Key Identifier:
keyid:ED:5B:0A:A2:E6:83:E8:DB:57:56:A4:3E:34:8E:B9:E1:C8:BE:C7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VsKouaD6NtXVqQ-NI654ci-xw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3ae423-e5bd-4e34-a399-3b953cca67c6/1/7VsKouaD6NtXVqQ-NI654ci-xw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3ae423-e5bd-4e34-a399-3b953cca67c6/1/7VsKouaD6NtXVqQ-NI654ci-xw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bd:69:95:b5:fc:29:2c:a8:65:e8:78:0a:e8:ff:f8:f2:c7:
bb:11:c7:8e:d3:2c:56:a4:e2:55:e1:72:f8:94:f6:ed:bd:02:
fa:f2:88:6d:65:df:91:d4:9a:73:79:06:9e:81:fd:d3:5d:75:
f8:e1:87:f1:d5:66:ec:30:23:4c:77:6f:5f:8c:d2:36:62:db:
a0:ff:e3:9a:8e:de:77:38:0f:33:76:67:46:a9:3c:74:7f:ad:
eb:fc:40:b1:20:44:43:b5:03:49:3d:b0:56:ec:e5:4e:23:38:
f0:54:cb:88:12:7c:4a:7a:f1:7b:06:25:82:ae:76:16:87:cf:
cd:3b:2f:0c:f6:b5:f7:26:af:57:72:e0:79:cb:c8:3f:59:c2:
3d:ec:e3:de:f1:3e:cb:1c:28:80:3b:f0:04:2e:6c:e8:ae:40:
0d:c1:03:62:15:6b:f0:47:46:f6:de:31:98:ab:b7:35:81:fc:
e8:c3:c0:c4:4f:29:1d:ee:c5:02:a7:d3:28:18:71:2f:7f:e6:
c2:39:ff:f2:ad:05:9b:39:d4:70:74:c7:55:26:33:54:8d:04:
2c:28:26:26:93:20:7a:fe:c1:d2:47:e8:8e:b4:83:5f:74:54:
a8:34:4d:1a:07:3a:1f:53:14:ee:7b:9a:49:aa:49:82:44:5b:
61:b0:84:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:33:45 2026 by rpki-client