Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
File: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft (raw, json)
Hash identifier: nvoRoyOvyzUltQwpB9A2+g7GwBOeZ1whrEB9TjbPvxo=
Subject key identifier: DB:A7:97:FF:93:BD:B0:4C:AD:09:B6:2F:C7:5E:3D:B4:1E:61:98:8D
Authority key identifier: ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95
Certificate issuer: /CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
Certificate serial: 01A146BC16832F55049C789DAF2335B9C182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
Manifest number: 097F
Signing time: Fri 16 Oct 2026 22:01:33 +0000
Manifest this update: Fri 16 Oct 2026 22:01:33 +0000
Manifest next update: Sat 17 Oct 2026 22:01:33 +0000
Files and hashes: 1: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl (hash: gLS0Do5jrtV8Ox7mBsrtDvRWhoT8lxgie73Mumbl7uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:bc:16:83:2f:55:04:9c:78:9d:af:23:35:b9:c1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
Validity
Not Before: Oct 16 22:01:33 2026 GMT
Not After : Oct 17 22:01:33 2026 GMT
Subject: CN=dba797ff93bdb04cad09b62fc75e3db41e61988d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:33:ce:4d:b5:f0:4f:27:ff:15:e3:1b:5e:b9:
3d:5b:51:4b:a9:65:fe:d7:1f:ba:e7:c2:dd:b9:97:
9e:06:9c:7a:55:9b:d0:19:9c:9e:dd:d5:92:87:30:
53:c1:c8:41:14:1a:47:08:dd:3f:3c:3c:67:d5:2e:
7a:f7:6f:1c:92:b2:9e:93:40:aa:76:b8:43:52:aa:
bb:ca:2d:e2:da:85:4f:43:c1:1e:2e:61:97:c1:23:
86:35:92:af:f9:a8:bc:6f:86:c8:98:12:e0:70:ef:
8f:0e:f1:6c:59:15:f9:cf:fc:bf:72:77:43:6a:d0:
a7:7c:5d:cb:8b:33:f8:59:85:48:7e:f1:b5:3e:db:
01:05:90:7e:74:b0:99:eb:19:9f:3e:e4:5f:dc:23:
4e:24:46:9e:12:08:37:55:25:2d:bb:cf:5c:c7:7a:
28:93:5d:11:6a:a4:18:92:3e:b5:ab:a3:52:6c:db:
d9:90:36:3c:d9:5c:6b:bb:22:41:b4:7a:ce:e0:e3:
05:21:8e:aa:35:0f:22:ad:30:b6:90:fc:7c:a2:7e:
4a:db:62:17:f2:38:59:ba:ae:8b:a0:d9:88:5b:f7:
f1:f4:3d:23:cb:31:d7:1e:27:ac:b2:f0:e7:65:b6:
5e:ea:8b:5d:bb:64:53:94:42:7f:a5:ca:22:3f:8c:
04:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A7:97:FF:93:BD:B0:4C:AD:09:B6:2F:C7:5E:3D:B4:1E:61:98:8D
X509v3 Authority Key Identifier:
keyid:ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:10:c1:6d:c4:da:ad:86:34:a1:fd:ee:e9:c0:d0:da:69:15:
db:02:46:f5:ac:0d:f8:09:e2:fb:e3:ce:3a:7b:48:fb:14:0b:
94:95:2e:fc:9f:2b:0e:d0:60:82:2e:25:ab:10:1c:f0:29:a5:
30:53:e1:33:a3:2a:e6:d8:71:b3:77:91:99:3b:f1:73:eb:85:
6b:83:a7:9e:4f:f1:d4:13:90:28:5e:1f:ec:64:5b:2e:ae:5d:
db:6b:f0:6c:e0:9d:85:96:9d:c1:42:1c:09:33:89:42:94:65:
d0:36:a3:ff:7c:73:69:8d:e2:a1:f2:26:af:74:ad:66:57:a8:
a5:a1:4a:2b:b5:24:7e:b7:e1:1a:10:56:2e:fc:4f:cd:e5:73:
9f:80:82:11:f6:2e:96:90:ed:26:9d:4e:e2:29:6f:8f:87:a0:
29:ee:06:b0:44:3a:ba:af:04:c4:94:96:9d:4d:7a:73:7c:64:
06:45:dd:e8:dd:f2:19:c8:de:94:2c:3e:65:f1:3f:f2:42:b9:
2f:11:7d:87:8c:22:c3:e6:8f:66:10:65:4b:ee:4f:2f:06:ae:
68:15:69:95:b4:9f:19:44:e7:82:c6:40:be:da:a2:e0:e1:e0:
64:08:70:b1:a7:02:34:15:97:0b:8e:b4:10:04:aa:73:e1:e7:
a3:cd:a5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:51:50 2026 by rpki-client