Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
File: 7FExTgTslnbytgJI4bm9Au8A4Wg.mft (raw, json)
Hash identifier: 5gsObqTmqJn6/de9lkrGRHwehml4Qb31SresarU3Kf4=
Subject key identifier: A3:B4:21:F5:A0:38:BA:16:F7:64:80:F8:DC:B2:6A:86:7B:4A:1A:FF
Authority key identifier: EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
Certificate issuer: /CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Certificate serial: 01A0D34B2EE97AD8FAFC890DC8B51EF465C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
Manifest number: 1A6B
Signing time: Thu 24 Sep 2026 12:01:54 +0000
Manifest this update: Thu 24 Sep 2026 12:01:54 +0000
Manifest next update: Fri 25 Sep 2026 12:01:54 +0000
Files and hashes: 1: 7FExTgTslnbytgJI4bm9Au8A4Wg.crl (hash: YD9aFjL663z/DsD5t36zAQpz2+ksgd0yKoVW2LGelA4=)
2: 955C7AtZAhtfMCkNkF_V4r29zNs.roa (hash: BzjiJ1i4x8f0IF+YLTcXKg5V1DmhNLRMYe5guMs7CHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4b:2e:e9:7a:d8:fa:fc:89:0d:c8:b5:1e:f4:65:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Validity
Not Before: Sep 24 12:01:54 2026 GMT
Not After : Sep 25 12:01:54 2026 GMT
Subject: CN=a3b421f5a038ba16f76480f8dcb26a867b4a1aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:b4:79:c2:5f:9e:e5:a7:72:0c:ca:fc:81:
33:b7:c5:b2:a5:80:79:03:2a:5f:c3:2d:95:43:6e:
a2:ba:79:a9:3d:10:ae:36:0d:e5:31:98:5d:06:cc:
85:8f:a9:d1:ef:de:df:b3:fb:a2:68:48:15:ae:e5:
e5:f9:5e:7e:45:9d:68:f7:3f:79:32:e4:2e:33:4e:
04:d3:b9:09:93:40:93:26:af:ce:52:9e:e9:8f:5e:
70:0a:5f:8a:de:f3:00:85:81:81:19:7b:1d:24:5f:
45:29:d1:39:3b:0d:59:fe:38:6d:b0:28:f4:c2:c3:
e9:21:ef:14:a4:8d:78:b7:ed:6b:14:9f:b8:06:57:
58:63:3c:fa:5d:7a:87:31:99:ae:0c:a2:b7:79:fe:
59:93:09:57:ab:0e:b7:2a:7e:70:62:4b:d5:2f:c6:
df:5c:83:37:45:44:2f:96:6a:ec:90:a8:47:b2:5c:
ec:d1:11:f8:e5:f5:94:f8:d2:f9:7d:8c:b5:7d:78:
bb:9c:e0:7d:ed:3c:44:e3:09:f7:a5:39:5f:41:d9:
8d:19:27:20:e4:4a:bc:c3:29:41:28:b4:cd:17:d4:
c6:58:d4:52:8e:28:f2:0e:0a:36:3d:71:a8:12:9f:
bd:3e:30:16:1f:44:66:fe:77:52:f1:cb:0f:64:75:
e3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B4:21:F5:A0:38:BA:16:F7:64:80:F8:DC:B2:6A:86:7B:4A:1A:FF
X509v3 Authority Key Identifier:
keyid:EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:63:cd:d0:d8:65:32:ed:75:94:a3:8c:28:e3:90:1d:1d:c8:
70:c5:c9:d3:76:2f:0f:44:90:9c:00:bc:ce:ae:30:5a:7e:f6:
f8:7b:59:de:4e:4d:9c:e5:61:0b:41:04:7f:35:4b:46:41:23:
30:0d:ac:73:de:1b:2a:b4:b0:8e:08:18:a5:68:3e:a4:0b:97:
88:e5:b7:89:7b:0a:3a:d6:3d:a6:55:dc:03:b3:68:1e:f2:23:
9b:b6:ba:99:c5:d8:e7:64:58:75:a6:da:e9:b4:1d:a4:42:e9:
0d:89:46:f1:ea:f8:be:46:ef:bb:38:81:14:86:c4:5c:5b:d9:
57:c9:5d:88:59:e9:50:de:6a:17:fe:db:4f:c6:ed:a6:b9:70:
ad:ca:a5:e2:e8:84:3f:85:07:33:07:ab:b9:e5:94:b5:10:02:
05:f4:7b:db:20:95:4a:a7:cb:45:ca:f5:d2:b5:da:33:13:3b:
08:fa:8d:49:b9:8f:8e:e1:9c:b3:01:95:59:6c:c9:91:1c:ac:
32:59:a9:d4:fd:8f:d6:38:63:50:a0:e9:80:dd:52:f1:0e:d9:
68:cf:55:cc:17:37:cc:f0:73:b1:df:03:91:8f:54:20:ba:41:
9b:bf:c1:83:ff:2f:34:2e:45:45:dd:57:90:ee:30:7d:a1:11:
84:80:bd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:33:38 2026 by rpki-client