Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
File: 7JjcJavXq2PjW2KOqsKlTZSan0Y.mft (raw, json)
Hash identifier: c+J2gRtnaoqDuEnOKT8i8P8Xo595Df/v+tJ8zhCkWl8=
Subject key identifier: E6:72:B1:34:EA:FA:00:75:3F:76:BF:59:2C:DF:75:F0:75:BD:59:87
Authority key identifier: EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
Certificate issuer: /CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Certificate serial: 01A0D94D9418140B72F3FFA2D430F6078C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
Manifest number: 0DF4
Signing time: Fri 25 Sep 2026 16:02:14 +0000
Manifest this update: Fri 25 Sep 2026 16:02:14 +0000
Manifest next update: Sat 26 Sep 2026 16:02:14 +0000
Files and hashes: 1: 7JjcJavXq2PjW2KOqsKlTZSan0Y.crl (hash: 4J30umLx/ueYMSDtMja0vVDzcSRUED3CbSRXxS3UnlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:94:18:14:0b:72:f3:ff:a2:d4:30:f6:07:8c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Validity
Not Before: Sep 25 16:02:14 2026 GMT
Not After : Sep 26 16:02:14 2026 GMT
Subject: CN=e672b134eafa00753f76bf592cdf75f075bd5987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:b9:a3:f7:5b:c7:d5:ab:a5:e1:f4:7e:20:
85:c3:b3:30:a1:13:ec:9d:29:f9:64:27:7b:f2:af:
6b:fd:3c:3d:5d:a8:29:d3:da:18:c5:6d:64:9a:1d:
d9:23:dd:79:58:c5:4f:3b:d2:f8:f2:88:bb:63:5a:
fb:d5:ed:55:6d:44:98:49:43:ed:90:5f:d4:ed:a2:
84:f9:24:d4:6a:40:48:45:4a:80:72:78:32:e0:68:
dc:04:57:6b:12:d0:87:37:4b:11:3a:55:b7:a8:a7:
9e:ef:62:2b:d2:68:8c:8c:87:9b:0b:7a:19:dc:6c:
53:26:50:b0:d6:f0:24:71:7e:fb:62:b3:73:ef:98:
c2:c5:c0:30:43:9a:69:4f:86:80:f7:56:7d:f6:bb:
2d:27:38:07:24:2f:32:cb:74:00:cf:c6:ce:af:61:
12:b4:ab:63:90:c1:7f:a4:29:2d:a0:3b:74:71:13:
e3:07:c0:90:8d:b7:dd:95:86:3c:dc:77:ad:00:18:
cd:50:63:21:57:d1:c5:a5:f3:6c:50:b5:6a:4e:1b:
0f:97:73:3e:20:2a:9d:68:b5:b3:0b:15:3f:a2:31:
54:4b:81:e3:39:29:61:6e:ab:df:9d:52:00:62:2e:
81:b2:d0:8b:c9:7a:c7:c8:22:50:88:e5:0e:c6:08:
e4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:72:B1:34:EA:FA:00:75:3F:76:BF:59:2C:DF:75:F0:75:BD:59:87
X509v3 Authority Key Identifier:
keyid:EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:45:b2:83:d0:c7:03:1a:ec:ae:b9:71:eb:d6:80:8d:63:12:
10:9d:f6:8a:ca:51:4f:68:a4:14:21:80:df:7f:20:c6:22:80:
df:f3:39:7d:98:ac:a6:dc:7a:46:ea:2e:4b:a5:a0:f6:dd:19:
9d:e1:c1:ef:25:6f:0e:d7:28:7e:e7:2e:8f:60:7d:35:fd:06:
0a:92:85:8a:be:83:6d:73:15:55:b7:5c:b0:24:6c:49:e0:6d:
63:3a:7e:23:96:10:eb:61:5d:2b:fb:27:e9:d7:e4:ea:02:70:
2a:34:ea:f2:11:09:c8:e0:55:40:c0:ca:85:ba:d4:2e:3e:28:
9f:9e:46:47:a1:19:18:e5:e8:07:64:1a:d6:ff:1b:0b:27:5f:
1e:ab:bd:fb:7e:be:57:53:9f:7c:fd:6c:93:b2:1e:9c:89:a9:
81:3e:31:72:a1:1d:38:c0:2c:4d:83:cc:f9:56:84:7e:70:61:
df:87:4f:f2:3e:3e:14:8f:bd:53:b0:70:1d:18:34:09:82:fc:
0f:02:6a:d5:c4:ae:e2:f4:c7:2c:0d:ae:1b:47:ad:73:b6:ac:
5e:09:f8:1d:b4:42:57:1e:8e:0e:5f:91:12:a5:e4:f3:18:96:
e3:c0:9d:c1:ac:57:26:b9:9a:bf:67:23:fe:75:4d:a0:7d:a2:
ac:81:42:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:43:30 2026 by rpki-client