Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
File: 7fBEw2PXiOdDNOE24DzH_R5JohY.mft (raw, json)
Hash identifier: gospjGDC73iNEsC9ib9Ecx7XoRN4wTksXiidaTqiFg0=
Subject key identifier: 1C:76:71:A6:76:13:D5:27:5D:FD:B9:9E:D8:6B:32:69:6F:2C:8E:4F
Authority key identifier: ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
Certificate issuer: /CN=edf044c363d788e74334e136e03cc7fd1e49a216
Certificate serial: 01A0CBC767A130FAEB4E62A14948E82BC3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
Manifest number: 0CDF
Signing time: Wed 23 Sep 2026 01:00:38 +0000
Manifest this update: Wed 23 Sep 2026 01:00:38 +0000
Manifest next update: Thu 24 Sep 2026 01:00:38 +0000
Files and hashes: 1: 7fBEw2PXiOdDNOE24DzH_R5JohY.crl (hash: EgvcITK028NUz0xRZBx0vXczVGDlCP89N+/c7hFfI5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:67:a1:30:fa:eb:4e:62:a1:49:48:e8:2b:c3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf044c363d788e74334e136e03cc7fd1e49a216
Validity
Not Before: Sep 23 01:00:38 2026 GMT
Not After : Sep 24 01:00:38 2026 GMT
Subject: CN=1c7671a67613d5275dfdb99ed86b32696f2c8e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:99:c4:5b:b6:f0:e6:12:a8:64:4a:06:aa:
fb:b6:08:4a:f5:2e:66:78:02:96:2f:f7:0f:db:04:
b0:f3:9e:48:a6:e7:ba:58:9b:79:d3:f5:e2:15:4d:
e5:cf:f5:32:55:15:05:48:8c:d7:f6:15:26:e8:61:
17:28:3b:f0:0d:43:3c:16:38:c2:a4:43:51:f6:f6:
24:88:82:49:b9:bd:25:56:8d:a0:6a:6b:36:a1:8a:
e5:a5:1d:fe:e9:f5:fe:58:14:3b:29:11:5e:cb:11:
bf:a5:bf:02:d8:bb:be:4f:29:e5:8b:6d:0c:16:04:
02:67:60:23:a7:8b:d2:41:6c:2e:39:33:11:8a:5b:
d1:3e:62:bb:2c:46:52:a8:21:7e:31:f2:e0:95:b9:
08:e5:4e:7d:d1:9d:0a:f2:ef:00:3b:1f:7d:33:4b:
6e:fd:62:44:29:b9:73:a4:57:48:c6:a7:ff:b7:4e:
8d:41:8d:7a:8f:1c:c9:51:c3:9c:d9:a8:5c:a2:7e:
6b:02:a6:69:8d:5e:17:45:5c:1c:77:de:0a:ac:af:
d5:55:14:75:9a:88:29:93:1b:fc:c6:a2:38:24:27:
4e:9c:b4:b8:b1:ec:b3:56:d5:f3:8e:93:87:d1:66:
a6:f6:2d:1b:c1:b0:a2:2c:f3:89:c9:b6:7c:4a:bb:
8b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:76:71:A6:76:13:D5:27:5D:FD:B9:9E:D8:6B:32:69:6F:2C:8E:4F
X509v3 Authority Key Identifier:
keyid:ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b7:05:d7:6e:e6:c8:15:77:f8:98:b5:57:29:65:54:2e:00:
9d:05:1e:50:2e:a0:fe:42:cf:46:81:27:5b:1f:17:c1:51:86:
22:80:76:47:6c:38:13:eb:5d:11:c1:6a:5c:43:8b:71:12:e6:
51:07:44:7b:25:a6:f3:03:62:7c:20:00:92:01:99:a2:ac:53:
94:e5:7c:39:b4:71:f8:86:2e:7f:a3:32:28:10:6d:d9:cb:a7:
e0:54:75:1d:eb:41:36:41:fe:58:7c:36:5d:ac:82:ed:50:ac:
d6:4a:20:69:5c:9c:c6:ed:01:54:d2:a3:02:38:d4:53:10:2c:
af:30:83:f0:ee:89:24:0c:8c:16:1a:57:00:f6:06:21:aa:07:
38:a3:6f:a8:b9:0d:1e:3f:27:e7:9b:ff:b2:2e:0c:65:fb:02:
cc:62:d2:ac:48:ac:a4:7c:cc:f6:8a:bd:02:ee:a6:0e:22:16:
db:8b:09:3e:2f:eb:61:38:c6:44:a9:84:f3:57:9a:63:01:3a:
f2:3f:ff:25:dd:ae:44:2f:76:c9:0d:9e:ba:52:45:b0:0b:18:
b9:86:3f:f6:55:24:11:cb:f2:24:c4:4d:ca:52:d1:82:38:dc:
9e:99:19:17:6d:51:7c:c3:91:d9:75:66:58:02:db:7b:85:aa:
8c:18:02:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:38:27 2026 by rpki-client