Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
File: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft (raw, json)
Hash identifier: 9K/NxGFsN1vabe5UBN0NOMPcJKa7WtQc+vKNJWqXyd0=
Subject key identifier: B5:F3:E2:34:7C:86:F0:96:CE:A1:7D:AD:7E:23:A6:C9:8A:CA:99:CE
Authority key identifier: EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
Certificate issuer: /CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Certificate serial: 01A0CC3664BE326EC9E3192BA3B25D912E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
Manifest number: 0EEB
Signing time: Wed 23 Sep 2026 03:01:51 +0000
Manifest this update: Wed 23 Sep 2026 03:01:51 +0000
Manifest next update: Thu 24 Sep 2026 03:01:51 +0000
Files and hashes: 1: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl (hash: dsnUkFEWwN4WiibPkAUTDoTJD49MjI8lX4pkhAuX9ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:36:64:be:32:6e:c9:e3:19:2b:a3:b2:5d:91:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Validity
Not Before: Sep 23 03:01:51 2026 GMT
Not After : Sep 24 03:01:51 2026 GMT
Subject: CN=b5f3e2347c86f096cea17dad7e23a6c98aca99ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7f:03:32:86:de:a9:00:d6:a2:60:fc:02:b2:
1e:ed:38:ec:9c:13:7f:25:c0:e3:7b:32:60:6f:eb:
0d:61:a5:ac:95:f6:be:fe:a7:7a:37:93:82:d0:40:
32:e9:cf:a1:23:7f:98:d4:96:05:c0:26:0b:43:49:
65:ab:dc:34:6c:f3:19:9f:da:7a:17:83:3a:08:b0:
bb:05:f6:63:9b:bd:fc:a4:60:c0:00:0e:e1:92:90:
ae:eb:92:15:d3:f3:9d:1c:0a:60:e3:31:9f:2a:ae:
89:dd:ea:e1:29:50:cc:18:c3:83:27:99:40:8b:8b:
38:3b:ba:fc:ff:cf:d3:34:04:e8:19:22:09:68:e3:
68:b8:d6:53:00:5a:0b:ee:60:3b:d3:31:b5:62:d7:
6f:c6:60:6d:4b:fa:dc:89:96:0e:55:45:5d:8d:f7:
53:5f:60:87:b6:4e:25:15:f8:fa:8d:fc:d1:2d:52:
0d:b9:f8:30:81:d9:fb:bd:e2:4b:76:74:ed:ee:31:
0a:86:83:b7:b7:97:26:51:86:26:6c:e8:c3:4f:19:
f4:31:f2:5e:83:2c:44:9e:09:b3:dd:45:fc:58:a7:
55:34:f3:d5:05:10:0e:41:c3:50:4d:6b:64:7d:6e:
07:27:56:2a:55:33:e7:6f:ac:5d:f8:67:02:8b:60:
8d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F3:E2:34:7C:86:F0:96:CE:A1:7D:AD:7E:23:A6:C9:8A:CA:99:CE
X509v3 Authority Key Identifier:
keyid:EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:41:dd:9e:5f:11:24:76:25:9d:9f:fd:86:98:ee:1b:5d:d7:
89:e6:c1:05:94:e4:95:f5:b7:89:f3:17:96:ed:39:61:ac:f6:
5f:26:8b:f5:68:0f:f2:8a:97:ab:d9:8e:74:48:2d:3a:0a:cb:
f3:48:d4:2c:05:f3:66:aa:c6:0b:6d:99:49:97:d4:ca:c0:3d:
16:bc:90:f7:ac:4d:ab:31:ea:7d:f9:4e:9b:da:fa:d3:e1:00:
ac:59:68:42:0a:cb:09:53:95:ac:97:11:6c:97:cc:62:b3:5b:
3c:2c:62:c0:23:a3:c2:38:93:72:65:3f:28:4a:a1:b0:9c:ea:
86:11:37:65:c1:80:85:ec:48:ba:22:45:73:7d:fb:38:c5:21:
56:64:f1:a9:53:06:72:22:0f:0a:fb:a0:1b:e7:bd:17:52:8c:
af:84:e4:cb:4c:96:69:e4:30:91:78:12:93:9d:96:0f:76:f5:
c8:35:20:65:15:fe:2b:d1:2b:7b:13:47:c2:00:6c:4d:46:75:
70:08:a8:8e:bd:72:3e:57:14:99:99:45:eb:e8:04:e0:1e:0c:
d2:13:cd:e6:7a:d3:24:3e:59:ff:6c:e2:d1:e3:f9:6b:86:13:
1c:80:11:30:f9:3a:36:48:ca:11:2f:37:50:ea:6e:0f:fe:5c:
76:33:88:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:23:09 2026 by rpki-client