Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft
File: 7B-pzoPKFB0pqr7sAMX598upk8Y.mft (raw, json)
Hash identifier: UAzgMbCZdYXD71/nu1esEThBHqTPVh3BScgaGWfIUAE=
Subject key identifier: F2:3F:54:FC:2B:F8:87:E6:6F:30:20:DC:A4:96:65:DD:AD:35:38:4E
Authority key identifier: EC:1F:A9:CE:83:CA:14:1D:29:AA:BE:EC:00:C5:F9:F7:CB:A9:93:C6
Certificate issuer: /CN=ec1fa9ce83ca141d29aabeec00c5f9f7cba993c6
Certificate serial: 01A1803E07E7C04C3A60EBE11A4C1AD7F775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7B-pzoPKFB0pqr7sAMX598upk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft
Manifest number: 01C9
Signing time: Wed 28 Oct 2026 02:01:51 +0000
Manifest this update: Wed 28 Oct 2026 02:01:51 +0000
Manifest next update: Thu 29 Oct 2026 02:01:51 +0000
Files and hashes: 1: 7B-pzoPKFB0pqr7sAMX598upk8Y.crl (hash: XrZ5EL3jE6X5kFwEYvHShUtDO1gP18uVBdBdl108v4k=)
2: lty9FU9-lvCivlXe3WOpvJPkZAU.roa (hash: w7emHClyLxjQcPa4VKPJS2kQf8ZhF6GvGuiuy4vd4PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7B-pzoPKFB0pqr7sAMX598upk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 02:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3e:07:e7:c0:4c:3a:60:eb:e1:1a:4c:1a:d7:f7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec1fa9ce83ca141d29aabeec00c5f9f7cba993c6
Validity
Not Before: Oct 28 02:01:51 2026 GMT
Not After : Oct 29 02:01:51 2026 GMT
Subject: CN=f23f54fc2bf887e66f3020dca49665ddad35384e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:50:52:dd:64:03:1e:e4:d8:e1:d7:83:39:c1:
e8:f9:9d:68:f4:6e:51:50:e2:92:cb:e4:fc:27:c7:
77:20:ae:d9:9e:15:d4:cd:5b:b1:1f:4b:d9:e5:df:
f5:e4:fd:d5:eb:41:4a:38:6c:38:8e:27:5f:04:11:
c1:da:2f:b3:b1:58:18:76:3e:44:63:6e:34:00:52:
df:b2:86:1b:c6:a7:cd:98:ac:c9:e8:89:17:76:c7:
5b:be:a5:e9:a0:ee:72:e2:a8:6e:68:d5:a6:bc:a2:
69:e8:01:ea:e4:fc:60:c7:0b:a8:27:38:1a:83:c5:
88:a0:51:a9:52:f4:96:46:c7:92:93:48:4a:10:d7:
ca:14:04:6d:25:e7:40:f6:15:d9:c9:01:ac:2b:2e:
ac:d3:37:68:f7:49:05:14:ab:a7:16:80:d0:13:21:
64:e5:65:ab:ec:6b:7f:1f:df:37:de:3a:17:6d:1d:
e0:9a:92:b2:68:e1:a4:af:98:f2:18:19:1b:50:d8:
39:4d:aa:59:8b:0f:51:b7:75:ad:c7:ce:af:fe:34:
18:40:c9:86:0c:7e:ae:42:9a:20:42:7f:19:dd:e0:
dd:82:42:af:c1:00:5c:05:a4:4a:41:7c:43:08:20:
a8:da:24:ff:9e:be:fb:1d:a1:0e:2a:75:c8:81:48:
40:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3F:54:FC:2B:F8:87:E6:6F:30:20:DC:A4:96:65:DD:AD:35:38:4E
X509v3 Authority Key Identifier:
keyid:EC:1F:A9:CE:83:CA:14:1D:29:AA:BE:EC:00:C5:F9:F7:CB:A9:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7B-pzoPKFB0pqr7sAMX598upk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e5:fa:76:48:c7:3a:3c:f5:0e:86:7a:4f:cc:1e:60:83:10:
e0:94:16:25:00:cb:d1:53:87:91:03:51:ec:0a:56:43:d6:fd:
2b:54:57:13:d3:ce:b4:d4:87:d0:1c:4c:b0:55:8f:d3:d8:e1:
e8:0f:0e:c6:78:74:bd:7c:fc:b4:90:1f:c1:98:fe:b5:48:df:
59:f4:a3:db:ff:04:79:79:36:4a:64:61:12:ce:24:87:3c:cd:
31:63:9d:4a:b0:bd:5c:be:02:81:ef:18:6d:e8:42:59:50:26:
f1:a7:7b:0f:30:37:0a:46:78:04:39:11:2a:51:6f:01:37:9b:
8b:b8:64:fe:e0:06:44:92:8f:ab:d9:81:a0:1d:5a:16:74:7f:
ed:3a:7e:34:78:a9:6b:3d:a8:00:27:33:16:b6:41:75:8c:40:
28:0c:6e:1d:59:bb:27:44:26:d2:a5:f8:99:a7:7e:3e:72:2f:
0b:f5:61:2b:b2:fa:06:5f:b2:4e:1a:bc:d3:48:23:c5:03:98:
b6:4e:eb:6e:53:85:09:72:78:d1:9f:c8:5b:30:d4:28:77:f5:
a8:c3:5b:1e:c1:ed:ad:f3:85:0c:ea:d7:44:0d:ef:b2:2c:41:
4c:62:1d:b4:b8:ea:c6:3b:31:73:95:a3:bd:a2:bb:fc:74:b4:
e7:cd:c1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:39:49 2026 by rpki-client