Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
File: 7eXtRX90OCqO0LevaG4a2yk1IlA.mft (raw, json)
Hash identifier: SVGnu//YkOvGFCI1LExTc6eURmU/gMoE43HFckUDYXQ=
Subject key identifier: F4:50:D1:0B:65:1E:8A:43:45:23:71:CC:45:73:4B:47:9C:28:95:48
Authority key identifier: ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
Certificate issuer: /CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Certificate serial: 01A1DEA76FCEF543F7D94C30DF085036775C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
Manifest number: 148F
Signing time: Sun 15 Nov 2026 10:01:17 +0000
Manifest this update: Sun 15 Nov 2026 10:01:17 +0000
Manifest next update: Mon 16 Nov 2026 10:01:17 +0000
Files and hashes: 1: 6UcUmEautvpvMnTzbqlUFFqwHPk.roa (hash: ixisQXZ4Rb1bn7n/nHLhuuBXi93MfJ/FXdmklcMC01w=)
2: 7eXtRX90OCqO0LevaG4a2yk1IlA.crl (hash: gidknYjZy3K5kRiOtd+gZZNf1pQisfTcP4nolwNhvCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:6f:ce:f5:43:f7:d9:4c:30:df:08:50:36:77:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Validity
Not Before: Nov 15 10:01:17 2026 GMT
Not After : Nov 16 10:01:17 2026 GMT
Subject: CN=f450d10b651e8a43452371cc45734b479c289548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ad:37:d4:e2:20:ad:7b:9c:24:72:7d:d4:e7:
68:33:a2:62:05:55:9e:07:5d:5c:f3:2e:d8:e3:2d:
95:84:f9:c4:a9:be:85:f6:33:6f:f6:76:9d:10:73:
08:25:91:94:d0:51:d7:cb:0e:ca:3b:d0:fe:4b:c3:
6e:20:b9:c9:0b:a0:8c:c6:65:a9:4f:c4:1e:34:70:
a1:1e:49:7f:c7:34:11:ff:8b:45:2d:16:f6:1c:fd:
1f:4a:5d:1c:57:eb:b4:9b:b6:0e:f1:2d:c4:fe:49:
65:f4:9c:b4:10:71:07:25:2f:41:0f:96:d5:10:c5:
d1:28:03:a6:d4:df:c2:53:da:31:35:64:57:2b:a4:
85:a1:3c:6a:71:9e:dd:a7:8a:83:92:54:91:f4:37:
1b:16:5b:e5:b4:5e:8d:d7:47:9c:6d:d3:3f:19:d2:
e0:4e:fa:e1:ba:e6:bb:18:5f:9d:ea:3e:ce:cd:9d:
0f:3d:6d:e7:34:ff:e0:d4:6b:05:bc:0d:f4:39:1b:
e3:3c:c5:bd:81:30:f4:03:23:ba:4a:48:05:71:d6:
d0:b1:3c:07:d3:e8:41:fb:ae:6c:c2:47:0f:da:96:
05:91:68:21:94:9f:72:b7:9e:da:b0:4f:e5:49:c0:
86:67:4e:74:c0:02:c9:b5:71:f1:46:c6:fe:d3:5c:
21:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:50:D1:0B:65:1E:8A:43:45:23:71:CC:45:73:4B:47:9C:28:95:48
X509v3 Authority Key Identifier:
keyid:ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a6:0e:cf:e5:f9:7d:46:9a:d4:a3:41:50:54:3c:a4:ce:26:
ae:d5:ce:31:cf:33:3f:5c:20:a3:51:d6:6c:6e:10:3a:cb:5f:
78:8c:21:f3:42:6a:4a:d9:a7:fb:aa:61:bc:f6:fc:9d:8e:8e:
69:86:1b:38:79:b2:f7:2b:0a:f5:62:75:6c:67:58:96:56:74:
78:a2:94:70:f7:1d:b3:6f:a4:48:94:22:b3:4b:f2:32:4f:04:
3c:5a:ba:03:49:03:4f:72:d6:ae:d2:b4:a0:cb:3e:db:d1:d6:
17:cb:0f:1f:ce:d6:78:62:6e:8c:c0:02:56:4c:5e:7a:b3:73:
c3:61:27:80:4f:53:ec:61:28:b1:24:a2:10:5f:1b:58:c8:2a:
a1:2a:68:fd:84:9b:74:19:0f:be:57:14:3f:f6:97:61:d9:fd:
e9:4f:51:72:48:ea:8e:40:0e:13:68:c4:b4:aa:47:b0:dc:a2:
6a:df:24:7c:90:9f:4e:13:2e:e4:c0:dd:38:f5:bc:a2:ee:e0:
58:b3:c4:88:e0:12:54:07:53:df:11:13:03:2e:2a:d4:4e:10:
2e:4f:fb:2b:2e:2d:95:cc:a9:70:21:92:e1:d4:2b:f7:f5:0e:
7c:94:84:df:58:3b:e8:48:9a:7b:0a:8f:cb:ff:53:61:a5:c2:
b7:78:b6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:46:34 2026 by rpki-client