Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/469ede-d1b0-475a-9483-ce603f554b38/1/7TgnbvJgDustyAwGvXFejwcItHg.mft
File: 7TgnbvJgDustyAwGvXFejwcItHg.mft (raw, json)
Hash identifier: EP/gwGgOUGzyH1Baa6F/GcaYr+pJCIjdO2AyDGHjRcM=
Subject key identifier: AA:76:72:B8:A9:56:B2:6A:0A:46:1C:A6:31:05:14:19:E0:E1:17:CC
Authority key identifier: ED:38:27:6E:F2:60:0E:EB:2D:C8:0C:06:BD:71:5E:8F:07:08:B4:78
Certificate issuer: /CN=ed38276ef2600eeb2dc80c06bd715e8f0708b478
Certificate serial: 01A0CFA44DFD9A6BD1C0F7ACDC580A8E0446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TgnbvJgDustyAwGvXFejwcItHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/469ede-d1b0-475a-9483-ce603f554b38/1/7TgnbvJgDustyAwGvXFejwcItHg.mft
Manifest number: 11
Signing time: Wed 23 Sep 2026 19:00:46 +0000
Manifest this update: Wed 23 Sep 2026 19:00:46 +0000
Manifest next update: Thu 24 Sep 2026 19:00:46 +0000
Files and hashes: 1: 7TgnbvJgDustyAwGvXFejwcItHg.crl (hash: 0uPKsuI6IcDH51pnKMy+jCDa6vWrDtbh04iKA+Ohl+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/469ede-d1b0-475a-9483-ce603f554b38/1/7TgnbvJgDustyAwGvXFejwcItHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/469ede-d1b0-475a-9483-ce603f554b38/1/7TgnbvJgDustyAwGvXFejwcItHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TgnbvJgDustyAwGvXFejwcItHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:4d:fd:9a:6b:d1:c0:f7:ac:dc:58:0a:8e:04:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed38276ef2600eeb2dc80c06bd715e8f0708b478
Validity
Not Before: Sep 23 19:00:46 2026 GMT
Not After : Sep 24 19:00:46 2026 GMT
Subject: CN=aa7672b8a956b26a0a461ca631051419e0e117cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:72:2a:70:50:34:e2:e1:7f:45:d1:6b:07:7f:
d5:10:e8:06:7e:9b:76:77:30:ab:0b:66:0e:31:af:
ca:ef:5e:d3:77:fc:16:07:ab:22:45:f8:49:57:5f:
eb:d0:59:b1:c6:4b:01:5a:64:5c:ae:dd:79:0e:ce:
11:56:07:75:82:77:62:ed:d3:52:4e:34:4e:3d:0e:
fe:04:1a:dc:c8:07:85:fc:23:ed:f1:aa:43:2d:0c:
87:92:3c:aa:20:b1:26:7c:8b:f9:e9:c4:df:cf:af:
0e:38:4a:80:ef:3f:aa:58:4b:68:d1:26:83:8d:e3:
38:df:47:95:78:0c:74:8f:ce:42:bc:51:f0:68:a0:
7a:7a:2c:83:bf:42:3b:8b:16:92:16:d3:a5:6b:d2:
b3:fb:b6:64:e0:9a:a7:49:cb:a9:60:07:2d:86:83:
e6:49:02:bc:98:08:7e:af:72:c2:c4:81:e2:4d:92:
d5:9d:a9:0e:f6:9a:eb:a8:75:00:cb:71:f2:1c:d7:
99:69:19:a2:f0:48:2b:f8:b2:98:ef:1b:6b:48:a7:
20:af:91:9a:5b:7c:e1:a7:49:a4:bb:0e:a2:73:e8:
14:37:b0:2b:3b:27:13:3a:32:f6:4d:39:71:5d:54:
4d:9d:a2:b2:60:04:33:45:a1:63:f4:27:f5:5f:07:
3f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:76:72:B8:A9:56:B2:6A:0A:46:1C:A6:31:05:14:19:E0:E1:17:CC
X509v3 Authority Key Identifier:
keyid:ED:38:27:6E:F2:60:0E:EB:2D:C8:0C:06:BD:71:5E:8F:07:08:B4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TgnbvJgDustyAwGvXFejwcItHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/469ede-d1b0-475a-9483-ce603f554b38/1/7TgnbvJgDustyAwGvXFejwcItHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/469ede-d1b0-475a-9483-ce603f554b38/1/7TgnbvJgDustyAwGvXFejwcItHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f1:cd:5a:ed:32:7f:76:da:97:10:f5:8b:ce:99:4e:5a:5f:
83:22:ce:4b:f0:5a:2d:36:32:49:43:07:c1:c0:ed:9a:3c:47:
9b:a0:78:8b:19:9c:88:07:62:f2:3c:8e:6c:2e:34:ac:cd:76:
c0:c0:82:35:6e:cc:67:7a:73:1c:50:21:f8:f1:d7:a6:72:21:
43:ea:81:ed:db:46:f4:f7:bb:4f:05:fa:bd:39:63:77:f3:89:
3e:48:fb:66:7e:e0:d1:88:de:e0:68:56:9f:9f:76:a1:bb:f4:
aa:f1:65:ad:29:e1:67:c3:09:59:ee:7e:3f:e0:b0:67:4c:df:
f1:21:0a:06:c4:fd:a3:8b:1f:b1:ad:b3:72:60:eb:0a:4e:1d:
a6:d2:48:f3:2d:65:99:19:e5:f0:8f:e3:5e:67:12:4a:c3:05:
84:8b:99:1c:8f:e6:5a:91:77:f3:27:3d:7e:38:0d:70:b6:c9:
07:02:cb:59:95:9a:11:e3:8d:70:11:fd:24:52:05:22:7a:be:
79:fe:f2:87:53:a1:50:ad:bf:8f:01:b4:04:8e:87:20:0a:76:
45:2c:b0:24:18:22:f4:51:29:8f:cd:1b:c9:42:4e:d5:8d:44:
5c:a1:c2:24:73:61:27:d3:47:f0:59:62:fb:8b:0c:3e:a1:89:
f0:ee:e9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:17:28 2026 by rpki-client