Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
File: 7GV-idqz-xXjuuDrGsf6yT32OF0.mft (raw, json)
Hash identifier: lSbnQiNm8jAH+kjTkHIX8D6szHPGPzwIM5piW8HcBxA=
Subject key identifier: 8A:3C:FD:10:97:61:A5:F4:57:76:61:DB:E3:F7:F2:85:65:41:EB:85
Authority key identifier: EC:65:7E:89:DA:B3:FB:15:E3:BA:E0:EB:1A:C7:FA:C9:3D:F6:38:5D
Certificate issuer: /CN=ec657e89dab3fb15e3bae0eb1ac7fac93df6385d
Certificate serial: 01A0CAEB3A54EEDE2852652C3D08F1E3DA1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
Manifest number: 0A5A
Signing time: Tue 22 Sep 2026 21:00:08 +0000
Manifest this update: Tue 22 Sep 2026 21:00:08 +0000
Manifest next update: Wed 23 Sep 2026 21:00:08 +0000
Files and hashes: 1: 7GV-idqz-xXjuuDrGsf6yT32OF0.crl (hash: kXJ8vM8Zd0fR93FSlaNxb1Trsl2y9w57sxthvzNfbHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:3a:54:ee:de:28:52:65:2c:3d:08:f1:e3:da:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec657e89dab3fb15e3bae0eb1ac7fac93df6385d
Validity
Not Before: Sep 22 21:00:08 2026 GMT
Not After : Sep 23 21:00:08 2026 GMT
Subject: CN=8a3cfd109761a5f4577661dbe3f7f2856541eb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:7b:b9:37:5a:bc:43:eb:e8:ee:be:93:80:
93:65:87:e7:31:e6:cf:01:73:7b:ef:e2:80:be:74:
ba:21:2c:53:f5:03:ab:50:59:4f:10:1d:a7:1b:90:
9b:3a:bc:16:fc:2c:24:a1:4e:55:c3:47:14:77:75:
85:6f:fc:75:be:db:90:2e:23:95:6d:ba:a8:a4:d8:
6f:b9:3c:ef:9c:f0:8a:83:7d:25:b9:08:9b:bf:e8:
fa:47:3c:bd:9a:27:d8:e2:6a:10:82:05:19:d0:37:
9f:aa:5a:d5:23:3c:83:7b:fc:5e:0e:39:4a:50:28:
f9:66:5b:43:c3:20:c5:75:59:92:1b:18:54:16:76:
e7:f9:d9:b2:fe:6b:67:da:3c:81:19:e9:27:6a:8a:
ac:76:8f:c7:f4:46:e6:7e:e9:83:24:96:17:cf:19:
b7:55:3c:15:39:cc:3e:40:e2:43:98:eb:46:8b:1c:
64:5c:d2:b0:5c:5a:26:3f:8e:71:15:92:d2:00:d2:
a9:bf:27:63:73:df:58:20:b5:1c:76:4e:e8:44:0b:
1a:0c:19:ee:85:51:0b:6a:61:2a:c6:4d:56:c2:2b:
a0:16:1c:16:31:7a:5f:ad:42:58:cf:31:e6:d4:8f:
a1:f7:16:6d:3c:cb:f6:fc:b6:c0:72:ce:15:02:b6:
04:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3C:FD:10:97:61:A5:F4:57:76:61:DB:E3:F7:F2:85:65:41:EB:85
X509v3 Authority Key Identifier:
keyid:EC:65:7E:89:DA:B3:FB:15:E3:BA:E0:EB:1A:C7:FA:C9:3D:F6:38:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:79:bb:35:6e:33:ae:c7:c6:8b:b7:cb:dd:c7:3c:7f:e8:49:
10:dd:b2:98:f9:23:a6:74:1f:19:51:5b:2f:16:17:b5:7a:5f:
96:61:9f:f9:34:43:2b:6d:f9:9c:ec:b8:7e:43:75:46:6a:5a:
1c:df:34:3e:a1:ec:b8:19:fe:b6:70:41:3a:4e:e8:78:e4:45:
03:21:e8:e7:ec:6d:01:ad:ee:aa:f0:5e:b7:7c:b0:33:af:76:
c8:fd:36:6d:e4:59:c4:a6:5f:aa:e7:6e:fb:22:7f:d7:4c:95:
cb:c7:02:b9:42:ed:ed:73:dc:80:18:84:d0:30:7f:73:1f:51:
8c:39:72:66:3e:fb:4a:e5:eb:b1:62:41:1a:f4:fb:91:aa:2a:
c6:9b:16:14:43:ae:b6:78:3d:65:61:5a:7d:c2:e4:47:e9:a0:
05:6e:d8:0f:e8:c7:7f:5a:84:8b:be:90:b9:76:ab:91:f5:4b:
cb:17:a8:9a:1c:e7:1f:3b:1b:f6:6c:ae:86:d4:56:bb:0c:2c:
37:a5:29:79:ba:02:6d:2e:67:b7:04:51:46:4b:b8:04:d7:df:
9b:9a:49:f0:b7:b3:81:8d:33:22:78:c1:49:f9:c3:e9:ff:1a:
cf:02:59:04:c7:02:13:56:ee:f4:d8:27:1a:04:fb:f0:fb:b3:
45:45:af:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:42:35 2026 by rpki-client