Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
File: 7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json)
Hash identifier: nkfduteKzQBfVuem7kBXEVDe6qIi9jfRUYpzUeuSU+4=
Subject key identifier: 3D:24:A5:16:7F:90:2A:AD:75:E8:63:A9:F0:62:9E:96:6E:65:A1:AF
Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
Certificate issuer: /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Certificate serial: 01A0E8F6702A8ED370C82CCA6BE76939B5D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
Manifest number: 070B
Signing time: Mon 28 Sep 2026 17:00:59 +0000
Manifest this update: Mon 28 Sep 2026 17:00:59 +0000
Manifest next update: Tue 29 Sep 2026 17:00:59 +0000
Files and hashes: 1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: iMCYugA67BlGwjDjty56azwC+j8PGBV8pTcUp80ztqk=)
2: 9agfB9dVL-Kd6aIq8hf6VJQFr-c.roa (hash: 0rqJmTL+IHF4zuPR+5EuCzywtP32Y0FzvoOjmasnRjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f6:70:2a:8e:d3:70:c8:2c:ca:6b:e7:69:39:b5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Validity
Not Before: Sep 28 17:00:59 2026 GMT
Not After : Sep 29 17:00:59 2026 GMT
Subject: CN=3d24a5167f902aad75e863a9f0629e966e65a1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7e:11:5c:db:c9:94:b3:60:18:e8:41:31:b2:
c9:98:dc:92:59:36:99:66:5b:0d:9a:99:6e:f0:cb:
3f:d0:63:0e:68:60:b1:db:6e:33:48:24:7f:5c:3e:
d3:99:82:88:e4:d8:fc:0b:44:80:92:e5:17:34:ea:
53:92:68:85:6a:ac:5c:66:5a:1f:1d:44:40:95:c3:
d2:ea:73:6f:3f:01:b2:3c:41:29:cc:02:53:ef:a6:
a3:7e:39:00:da:7b:9f:f3:a5:20:9a:51:55:47:71:
f5:e8:f3:e5:df:02:68:9e:29:06:6c:83:b3:cb:ae:
89:95:c5:da:0f:cb:89:d9:f8:40:e1:9a:be:3b:a8:
83:d7:f5:1a:e7:7c:c8:50:6d:39:e0:d6:9c:63:b0:
ce:40:4d:16:e8:0f:c8:55:ba:30:cc:71:1e:8d:b8:
c5:12:7c:82:3f:62:fe:85:21:c0:22:72:75:c9:7c:
16:fc:c2:70:79:b0:0c:4f:2c:b9:3f:76:74:77:27:
c2:9c:d7:e4:3e:f1:79:ac:ad:4b:38:8a:08:ac:c7:
fd:9c:a9:e2:3e:b7:2d:54:c5:27:7a:c0:cd:c1:ca:
b8:7c:51:0c:25:cc:0c:71:ba:f8:34:67:55:fe:0c:
9d:c1:2f:42:29:07:cb:be:f4:a5:1a:b3:1f:e6:5b:
5a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:24:A5:16:7F:90:2A:AD:75:E8:63:A9:F0:62:9E:96:6E:65:A1:AF
X509v3 Authority Key Identifier:
keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e2:4b:4e:51:41:79:8e:f1:55:df:48:51:d0:c5:76:f9:8e:
44:33:67:9e:ec:ef:99:3d:f4:57:30:f1:6a:25:3d:48:85:c1:
bc:45:26:1a:53:1d:e7:c3:ce:9b:6b:bd:b8:59:2e:d4:7d:3b:
66:4b:4a:51:69:b1:dd:00:5a:31:64:c6:d8:a5:a8:58:93:8c:
89:7f:ca:c3:40:a1:c3:4b:8e:27:1a:dd:6e:b2:32:c7:2b:1e:
31:6c:e2:7c:63:7d:40:a1:1f:8b:c9:3d:18:d4:e1:82:91:07:
2c:12:0d:f4:eb:23:09:e0:14:fe:df:49:65:27:6c:0d:86:2f:
bb:28:2b:e8:41:7e:4c:8e:fc:c3:e9:fd:ed:f1:2f:70:45:39:
78:29:93:78:51:46:c5:0a:6d:4d:c2:9e:1e:02:1b:c8:ec:76:
0e:a5:20:17:5d:ec:61:be:cc:3b:00:c9:b0:40:f8:82:dc:f3:
f0:b5:92:6d:6f:a3:cf:db:bb:3f:d0:7e:ec:3a:87:49:4a:11:
66:59:14:0d:16:69:8d:93:65:be:4c:d1:b8:e4:77:0e:46:2d:
64:91:00:27:aa:49:a1:a0:6a:4c:5d:c6:cf:77:ee:cc:38:a8:
70:d9:a0:de:cf:27:47:a7:4e:3a:18:ca:09:68:c2:bc:3a:0f:
84:5d:6e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:41:31 2026 by rpki-client