Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
File: C7M4e-bSDUos4TzAkuh_d3uLmVY.mft (raw, json)
Hash identifier: hghE/14Wd0TbkYkKycfs+F698ek72YeTSzMPje/Ooh4=
Subject key identifier: EB:92:14:2D:2B:61:6C:40:DC:80:C8:DE:BB:E8:B7:96:47:AE:32:18
Authority key identifier: 0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
Certificate issuer: /CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Certificate serial: 01A0CB22B04AAAF7547FE357D2CEAF6CB1FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
Manifest number: 153D
Signing time: Tue 22 Sep 2026 22:00:43 +0000
Manifest this update: Tue 22 Sep 2026 22:00:43 +0000
Manifest next update: Wed 23 Sep 2026 22:00:43 +0000
Files and hashes: 1: C7M4e-bSDUos4TzAkuh_d3uLmVY.crl (hash: yhGYeGcU7xTV20nWlMBqwevgtIyO7/tmZqnl6E2sjVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:b0:4a:aa:f7:54:7f:e3:57:d2:ce:af:6c:b1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Validity
Not Before: Sep 22 22:00:43 2026 GMT
Not After : Sep 23 22:00:43 2026 GMT
Subject: CN=eb92142d2b616c40dc80c8debbe8b79647ae3218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8b:77:7c:6e:00:0f:9e:77:21:b4:ef:ce:73:
2a:74:cb:02:45:79:95:77:51:c8:a2:a6:d2:46:2b:
63:23:0f:be:37:8d:c3:ea:35:7f:7e:0e:f3:d3:35:
8c:e6:91:0d:da:85:ca:eb:d1:bf:57:22:1d:83:06:
28:27:df:27:f8:21:c1:30:0f:a3:a9:04:b6:47:38:
8d:cd:46:cc:6a:47:91:4a:64:ae:59:39:bb:6b:70:
0a:af:4b:a7:ef:f6:9a:24:92:18:33:50:01:25:38:
f3:c2:a3:c2:bf:b6:8d:b4:85:a5:e8:4e:e7:d2:78:
7e:31:9f:b3:1b:6c:b6:97:70:7a:2c:1a:f5:55:fb:
41:94:32:82:c6:8f:50:4f:e9:5e:78:8b:8c:17:ee:
c3:e7:38:b3:f7:dd:ee:0e:5b:e8:a4:62:37:91:e9:
d8:69:85:65:40:47:37:16:67:ce:f0:66:bf:af:f8:
da:38:56:84:4a:f3:a6:16:98:cb:6a:0d:41:1c:c2:
17:d7:7e:f8:ce:98:64:70:99:3a:1c:a8:60:00:cd:
99:e1:8c:13:bb:6b:db:3e:25:fe:69:c5:0e:ce:dc:
10:d0:7f:ed:ab:ee:d3:5a:75:2a:a5:ff:66:db:9e:
ab:b1:88:e0:2d:00:7d:d4:ea:af:0d:48:5a:37:3c:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:92:14:2D:2B:61:6C:40:DC:80:C8:DE:BB:E8:B7:96:47:AE:32:18
X509v3 Authority Key Identifier:
keyid:0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:00:9a:e1:32:ed:0d:9a:d9:eb:c9:33:35:72:67:7e:40:e6:
64:f6:75:30:8e:cc:6e:0a:5b:01:f3:1a:e2:c1:e2:ae:9e:da:
f5:51:8f:05:31:06:b1:fd:26:0d:70:42:98:c3:38:5d:93:d9:
86:9b:78:f3:21:1b:71:e4:cc:0f:73:24:df:70:38:c2:13:6c:
08:ab:aa:f6:82:82:a1:eb:58:b4:20:b7:9f:7a:9e:ff:54:a4:
cd:1d:12:10:2f:69:7b:31:eb:ac:ec:00:77:dc:d1:f7:19:66:
63:99:8d:53:11:6c:d0:63:4f:7f:8c:b2:8a:fd:8a:72:b2:a9:
ce:a8:cd:6c:3d:e5:e4:72:33:2a:5e:b8:df:46:d3:dd:61:fa:
a3:a5:e2:5e:49:26:80:bf:fa:59:a3:bc:9b:37:16:fb:71:49:
fc:76:9b:3f:ad:10:93:18:ec:0f:2f:06:3a:7a:87:63:ce:0d:
65:9f:88:62:b5:b2:00:21:a9:49:53:08:9d:85:ed:d5:d3:02:
72:98:16:d2:8b:8d:0c:81:c1:74:04:66:05:49:e3:da:86:9d:
48:e4:c8:a4:a8:0c:7e:71:fa:d4:0f:0d:d1:ce:5c:f0:71:9c:
eb:8e:0e:da:d3:c4:c5:d0:7b:ce:3d:29:7e:6c:4c:1d:d8:76:
c0:7e:71:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:35 2026 by rpki-client