Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
File: 582m42RtyToNLUKV0esJR2xmvKY.mft (raw, json)
Hash identifier: I8q4OXa/Ab+qrB6NT3MZ/jMfSVgwkQoSkAPaSzlbLTA=
Subject key identifier: 42:9B:7D:D9:0F:C4:45:6F:09:CA:48:56:EC:4A:CF:8D:9E:49:D3:7D
Authority key identifier: E7:CD:A6:E3:64:6D:C9:3A:0D:2D:42:95:D1:EB:09:47:6C:66:BC:A6
Certificate issuer: /CN=e7cda6e3646dc93a0d2d4295d1eb09476c66bca6
Certificate serial: 01A0D8DF52A732E17ECA68E0C1806EB058A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/582m42RtyToNLUKV0esJR2xmvKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
Manifest number: 0797
Signing time: Fri 25 Sep 2026 14:01:49 +0000
Manifest this update: Fri 25 Sep 2026 14:01:49 +0000
Manifest next update: Sat 26 Sep 2026 14:01:49 +0000
Files and hashes: 1: 582m42RtyToNLUKV0esJR2xmvKY.crl (hash: 7PF7wfu7ZYx/W1/epR1LemBVMSITDN0yUC7eIQd4kQw=)
2: zM4gg4epclePPLRTJtVaIJWeepc.asa (hash: MRTLDlocXHNiWSSlm+nZxDJcnI87lYWJ5A0tSmJ5h6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/582m42RtyToNLUKV0esJR2xmvKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:52:a7:32:e1:7e:ca:68:e0:c1:80:6e:b0:58:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cda6e3646dc93a0d2d4295d1eb09476c66bca6
Validity
Not Before: Sep 25 14:01:49 2026 GMT
Not After : Sep 26 14:01:49 2026 GMT
Subject: CN=429b7dd90fc4456f09ca4856ec4acf8d9e49d37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:62:17:c7:e6:82:bd:af:1d:74:9f:f0:59:
ef:a1:fb:8a:84:1b:b7:26:9e:c9:4a:57:0a:de:36:
04:c5:21:3b:95:40:4f:13:9d:4e:05:e6:d7:39:3d:
7b:4e:b5:68:b9:08:66:f4:ee:32:87:6a:a0:22:2b:
99:3c:9d:b9:b6:68:b2:80:e7:1c:de:53:65:01:a7:
dc:5a:87:50:c1:7f:53:d3:5c:5f:66:58:fc:aa:e2:
ff:d6:4b:98:6e:53:cb:2c:86:c9:4f:61:03:6f:28:
43:78:3d:14:87:a0:5b:3c:9c:39:9d:da:35:2f:9a:
4b:62:87:a7:5e:49:19:1d:d7:51:35:58:15:31:d3:
05:90:81:50:11:96:f3:46:96:8e:3b:c9:f1:5e:d0:
86:a3:7f:49:d9:d1:8a:97:c6:65:6f:f1:e6:49:74:
32:a6:cd:45:3a:ec:4f:b1:bc:69:35:f0:d4:eb:49:
34:b3:45:e7:03:fa:88:c7:1f:9c:84:65:68:92:cb:
6c:9d:4e:f3:a2:0f:d9:b3:aa:cd:7e:0e:f9:78:b1:
b3:5d:0f:be:f6:6a:56:b4:25:4b:39:b4:76:00:bf:
9f:21:01:76:8c:57:19:03:5a:b3:c0:d1:35:01:5a:
78:ba:a2:7b:6c:8e:c1:8b:89:4f:9c:0d:cb:6d:b3:
f1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9B:7D:D9:0F:C4:45:6F:09:CA:48:56:EC:4A:CF:8D:9E:49:D3:7D
X509v3 Authority Key Identifier:
keyid:E7:CD:A6:E3:64:6D:C9:3A:0D:2D:42:95:D1:EB:09:47:6C:66:BC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/582m42RtyToNLUKV0esJR2xmvKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:09:fe:60:7e:f5:d0:ae:c9:f8:a7:f6:a6:7c:a9:df:72:e4:
4c:81:ba:42:fd:8b:96:23:7b:36:41:b3:e7:0e:57:0a:b5:2a:
98:72:4e:88:8a:db:d4:3f:41:d3:4d:96:3c:12:1d:ac:a5:84:
ef:5b:ad:f4:2e:09:6f:3f:43:1c:32:d9:f5:83:b5:eb:a4:54:
36:70:11:c6:7d:be:d2:41:67:2a:13:e5:85:71:2d:b6:cd:1a:
66:73:cc:57:e8:26:d1:74:a9:40:5e:75:d2:35:d4:4d:e6:67:
81:72:de:42:a6:23:4c:46:c4:a4:76:76:89:95:e9:27:c2:74:
f6:a3:f8:e3:88:1b:e1:94:f8:16:13:b3:f0:07:fd:5a:68:1c:
a5:22:36:44:a3:e9:c8:d2:14:d0:60:fd:46:76:d4:b8:46:74:
73:47:f8:9e:30:6f:e9:9c:26:69:44:db:08:b8:44:83:ec:bc:
45:11:dd:b0:50:66:7a:ab:9e:fd:7e:d2:58:26:c7:a4:4a:d8:
b0:b7:80:b6:f1:92:62:92:eb:a7:73:49:f5:7e:86:fb:1e:c9:
a9:d2:3f:c9:8e:5f:9b:30:12:39:56:44:b4:fd:5c:a1:36:97:
20:3f:b5:10:d9:aa:db:2b:4c:08:6c:69:97:d5:10:22:e3:16:
56:c8:6e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:24:41 2026 by rpki-client