Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7RK18zX7kujDKXDERhbgHq8jmrA.mft
File: 7RK18zX7kujDKXDERhbgHq8jmrA.mft (raw, json)
Hash identifier: p1xMgixHF6ba3NbtDB2OtlpYifslh1eMbnyWEgBkn6Q=
Subject key identifier: 51:BF:D6:AB:D0:0D:F0:95:0F:19:B4:89:18:50:9A:72:54:21:32:A3
Authority key identifier: ED:12:B5:F3:35:FB:92:E8:C3:29:70:C4:46:16:E0:1E:AF:23:9A:B0
Certificate issuer: /CN=ed12b5f335fb92e8c32970c44616e01eaf239ab0
Certificate serial: 01A0DD2950A36FB2B63DFC6E332767786072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7RK18zX7kujDKXDERhbgHq8jmrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7RK18zX7kujDKXDERhbgHq8jmrA.mft
Manifest number: 01D9
Signing time: Sat 26 Sep 2026 10:01:07 +0000
Manifest this update: Sat 26 Sep 2026 10:01:07 +0000
Manifest next update: Sun 27 Sep 2026 10:01:07 +0000
Files and hashes: 1: 7-oT0AkSh3pG6EhZ9rNvss7aH3U.roa (hash: cdPmFAv0nM43yTJZJ31SNuMyR8udSPe9a/EWFqSoOcs=)
2: 7RK18zX7kujDKXDERhbgHq8jmrA.crl (hash: iziDaTn8Tg4XNLSYIHqGr5IBhB782yjsfkkljyiRKhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7RK18zX7kujDKXDERhbgHq8jmrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7RK18zX7kujDKXDERhbgHq8jmrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7RK18zX7kujDKXDERhbgHq8jmrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:50:a3:6f:b2:b6:3d:fc:6e:33:27:67:78:60:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed12b5f335fb92e8c32970c44616e01eaf239ab0
Validity
Not Before: Sep 26 10:01:07 2026 GMT
Not After : Sep 27 10:01:07 2026 GMT
Subject: CN=51bfd6abd00df0950f19b48918509a72542132a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c5:54:d8:7f:62:3c:e5:de:e6:02:31:c0:f4:
61:2e:82:96:83:c1:30:b3:b2:e3:78:88:5b:a8:95:
54:9c:fb:b9:ef:bd:ff:a3:5b:36:41:84:29:05:e3:
96:fb:24:bd:a0:07:09:7c:b9:1e:24:86:13:31:20:
ee:4c:04:b0:f9:8d:8b:99:ba:0e:7e:e4:a4:a0:83:
db:ca:5e:46:cd:30:b2:04:e6:07:7c:54:3d:2b:09:
67:d2:fd:df:67:06:58:15:9e:ac:5e:b5:16:31:06:
a1:7c:50:09:da:77:ea:a1:ee:0c:08:bd:35:cf:e5:
68:f8:87:4b:73:89:6d:af:61:23:56:54:56:ee:dd:
f2:94:15:79:e0:28:12:24:a6:5d:56:ea:0d:2b:d8:
5d:e0:ce:cd:5f:7e:eb:ea:ff:1e:9c:a2:c1:9a:13:
37:36:cf:28:08:38:b3:41:0b:c8:f9:b5:36:4e:37:
62:b5:72:bc:a8:99:6d:10:72:b5:2e:03:92:fc:19:
29:c1:6b:40:e1:06:fd:c8:93:a3:53:f4:c4:a0:1c:
be:c0:e5:91:38:09:03:7e:c2:e7:c4:bb:fb:db:a2:
3e:b2:25:d6:82:7b:99:e7:db:53:b3:74:fb:7b:fd:
a0:c0:0e:bc:db:2d:84:d1:67:bc:7b:04:bc:5a:77:
82:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BF:D6:AB:D0:0D:F0:95:0F:19:B4:89:18:50:9A:72:54:21:32:A3
X509v3 Authority Key Identifier:
keyid:ED:12:B5:F3:35:FB:92:E8:C3:29:70:C4:46:16:E0:1E:AF:23:9A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7RK18zX7kujDKXDERhbgHq8jmrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7RK18zX7kujDKXDERhbgHq8jmrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7RK18zX7kujDKXDERhbgHq8jmrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:72:7d:8f:a9:cd:da:61:a5:4b:7e:25:b8:29:c5:37:67:60:
23:41:42:2a:9c:a1:a7:06:fe:ea:56:eb:be:ba:79:cd:d4:04:
47:9f:13:8f:22:74:c3:b5:77:bc:db:a2:83:5d:bd:3a:21:5b:
61:11:4e:d6:11:5e:e9:6a:ba:cc:9e:2b:e3:47:fd:c7:a3:1d:
2f:81:ec:9c:82:07:64:6e:97:fd:e9:c2:cb:9f:46:58:22:d7:
5f:08:d5:b6:77:a6:b6:a5:f8:4e:e1:d1:87:ca:1d:97:4b:c4:
0d:65:c9:b1:b6:34:20:b8:8c:88:d3:ba:79:63:70:ac:65:f4:
80:c6:8a:a2:55:dc:0f:6b:65:41:6a:e8:31:74:9e:34:ca:cf:
a8:86:18:6b:ed:c0:b8:6a:cb:a6:47:8a:c5:06:0a:08:25:f4:
6d:a7:66:03:96:ac:bd:bd:3e:06:6c:6f:71:74:e3:d0:0e:bf:
99:0e:8d:96:0f:9f:93:7e:1e:d2:0c:bf:19:20:db:3b:a8:0a:
cd:9c:93:c8:19:ca:60:46:16:73:4e:91:61:15:bf:99:00:4c:
d1:48:60:dd:d7:eb:9c:6f:9c:35:a8:0d:77:c1:99:ff:90:7b:
39:51:8a:a2:c6:ba:19:9e:29:6a:46:a3:f1:c0:31:12:2d:8e:
c3:8d:e7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:33:09 2026 by rpki-client