Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
File: c7vCE8b5C9jwBxOerm_gyvpDXs4.mft (raw, json)
Hash identifier: ChFjf3FTgFfWxuQHat7Kl6mDgMtBT5R4BYBg+cPqsBQ=
Subject key identifier: 2D:AA:B8:80:10:F9:D4:3F:7D:A7:84:8B:23:CF:0F:80:E7:6F:C1:E1
Authority key identifier: 73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
Certificate issuer: /CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Certificate serial: 01A1DFBA34D174DBADFC9D5F27DE9449FECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
Manifest number: 0FAB
Signing time: Sun 15 Nov 2026 15:01:24 +0000
Manifest this update: Sun 15 Nov 2026 15:01:24 +0000
Manifest next update: Mon 16 Nov 2026 15:01:24 +0000
Files and hashes: 1: c7vCE8b5C9jwBxOerm_gyvpDXs4.crl (hash: BGfNK6Nny/Jz1ub+NPDhX6ZXXlk9Og3AuEgqpjcj4WU=)
2: s7ALXCsQ6iydnmcMndLJwyBEVrA.roa (hash: 2KKTFrZRTTsfpxmpCTn5aGO1P1QcLn41Vrt2Tl7hzrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:34:d1:74:db:ad:fc:9d:5f:27:de:94:49:fe:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Validity
Not Before: Nov 15 15:01:24 2026 GMT
Not After : Nov 16 15:01:24 2026 GMT
Subject: CN=2daab88010f9d43f7da7848b23cf0f80e76fc1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1d:76:d8:5f:71:6b:cf:4d:1c:f3:80:75:01:
13:7b:73:6c:09:0c:84:23:f8:43:32:8f:ee:5e:04:
3b:f0:8e:12:72:cf:df:f0:f6:e2:09:24:8d:51:fa:
8c:d1:d7:08:a4:59:75:4d:83:65:eb:15:8d:a7:ac:
a7:7b:69:86:53:b4:fb:ea:6a:91:56:78:73:62:cd:
95:3e:ac:53:86:cf:ca:65:7e:88:83:ca:25:b1:bc:
60:c3:4c:4d:83:ab:43:f1:d3:c8:3a:8d:36:96:40:
b1:4a:6d:7e:08:da:39:c8:97:0d:0d:e8:ff:0a:4f:
47:80:c8:84:4c:14:56:03:79:4d:57:da:04:39:51:
ab:87:e2:a4:4b:33:a8:48:da:ed:e3:8b:bf:36:f0:
1d:bf:3b:de:3b:64:13:35:c6:3b:36:6b:ba:f0:64:
e4:2f:9f:99:da:6c:f1:ce:8f:0b:18:95:d4:ae:7b:
e1:59:eb:3b:06:61:0a:69:f5:84:8e:32:4f:fd:47:
61:68:c4:1a:b6:9e:a9:0a:d9:77:7f:b9:91:aa:65:
ef:c0:3a:e2:53:93:fe:18:4f:2a:e7:49:85:f2:99:
1c:b3:3b:0c:72:64:51:7b:dd:f4:41:0a:a7:10:ed:
4e:c3:9c:1f:cd:2c:4b:d0:5e:cf:5f:49:ec:2a:c2:
01:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AA:B8:80:10:F9:D4:3F:7D:A7:84:8B:23:CF:0F:80:E7:6F:C1:E1
X509v3 Authority Key Identifier:
keyid:73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:6b:48:51:b5:5c:d4:0a:f1:b2:e9:ff:6f:1d:69:63:39:65:
c2:46:e4:34:c1:58:44:d3:9a:d2:4d:3b:43:53:e6:da:51:d0:
1f:ff:06:20:71:94:62:81:20:bc:84:aa:b3:3d:32:9a:36:f6:
8b:f3:a5:3c:d8:ac:5e:0c:c8:66:a7:4c:4d:84:76:28:b9:68:
22:99:58:36:81:8e:a5:8a:af:a9:f0:cd:09:b0:90:02:cb:b7:
3c:a8:23:3f:df:ab:9d:ae:fa:ce:f2:8b:0d:a4:e6:c1:0b:6d:
62:88:78:d4:e2:dc:7c:9f:f5:7b:0e:b2:18:49:1b:a1:d9:ae:
34:8d:fb:21:dc:d9:1c:d6:bd:a8:1c:81:82:23:a5:56:ae:1f:
fa:dc:eb:3f:d1:28:f3:e7:6d:0f:9c:aa:5c:84:e0:38:1a:2b:
94:e2:25:29:c6:82:89:e0:b7:88:34:68:08:0e:08:28:39:c3:
07:6d:5f:0f:ba:d9:c4:13:68:ce:65:2f:aa:88:cd:3b:dd:f1:
88:9e:e5:b8:2a:05:ae:28:36:a8:d4:3c:ef:43:00:9c:3a:81:
3c:ba:ce:31:71:2e:7d:62:3c:3c:8a:c4:60:9e:c4:8c:59:f8:
b0:9d:46:2d:f3:9f:14:be:60:af:ba:e6:e8:62:d9:da:a0:d2:
37:d7:03:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:33:58 2026 by rpki-client