Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
File: 7KM8lvAqnwvvJc04BqJGfKFlY3s.mft (raw, json)
Hash identifier: K9lp0z+nAylp3mVaft0cZQ4G+E0z1UWQ/QozM47QfXs=
Subject key identifier: 64:FC:10:5D:45:D9:AB:F9:82:66:71:CF:04:9E:AF:C8:AD:60:C1:1C
Authority key identifier: EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
Certificate issuer: /CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Certificate serial: 01A13FA7696F4984E68FCCADBD99263C5EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 13:01:38 +0000
Manifest this update: Thu 15 Oct 2026 13:01:38 +0000
Manifest next update: Fri 16 Oct 2026 13:01:38 +0000
Files and hashes: 1: 7KM8lvAqnwvvJc04BqJGfKFlY3s.crl (hash: e70MC72wCjUE1+agF2L9p8zgUMFaPgbkxWpxcW+7rEk=)
2: C7fQ7Ve9jd1KjW3OO8oxR9QhSyI.roa (hash: R/aIjhVfQy4DuH2HYkC6Yf9teDlMa+Wx7kzzvb2vFZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:69:6f:49:84:e6:8f:cc:ad:bd:99:26:3c:5e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Validity
Not Before: Oct 15 13:01:38 2026 GMT
Not After : Oct 16 13:01:38 2026 GMT
Subject: CN=64fc105d45d9abf9826671cf049eafc8ad60c11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:bb:a7:23:2e:ab:5d:02:37:ac:44:7d:50:
1a:78:c1:3d:66:dd:12:08:9d:ab:36:d3:d6:da:49:
67:66:f3:75:47:90:ce:fb:fa:76:94:17:61:fb:f5:
37:c0:c5:e6:5c:a7:68:62:ea:f6:98:a5:3f:75:e1:
3f:e1:4f:9d:47:51:f0:45:f3:c1:66:08:e8:6b:ab:
70:28:ba:af:76:d3:47:fc:a9:18:92:bd:3c:0f:ed:
48:46:1a:82:02:ee:ec:2e:06:24:0c:f8:63:98:c2:
a9:32:a0:a5:ac:4e:c0:91:7b:65:bc:8e:0c:8e:b9:
00:42:7b:3a:fb:f6:d8:8a:c1:8e:82:bc:19:85:a6:
94:7e:41:96:da:c8:29:c6:02:57:04:2e:f5:59:c3:
7d:93:59:7c:76:08:11:62:51:4b:d0:a7:a8:fa:09:
69:df:0a:d7:5a:ba:94:86:50:3f:2e:c2:43:dc:6e:
45:df:5a:a0:b5:9d:93:7f:60:c0:33:6f:68:28:3c:
1d:f8:82:1c:86:36:a7:d9:3c:58:46:58:3a:75:86:
b7:94:9d:20:d1:d4:af:c4:f0:75:55:79:4f:77:10:
cd:63:ab:02:2c:ea:2c:95:c1:30:7f:ab:15:b4:21:
ba:cb:00:87:ce:84:53:67:68:cc:89:36:fa:25:ca:
7a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FC:10:5D:45:D9:AB:F9:82:66:71:CF:04:9E:AF:C8:AD:60:C1:1C
X509v3 Authority Key Identifier:
keyid:EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:6f:37:1c:92:46:f9:60:e4:e2:d8:0b:6d:4a:18:2f:c5:90:
95:8e:b1:b7:54:b6:f7:0f:ca:13:bb:fa:f0:b1:d0:fd:cf:1b:
25:00:99:9c:b1:fe:75:87:1a:2b:8e:bb:ea:05:17:05:b5:e9:
99:75:4b:45:85:5a:5f:fa:42:1d:7b:b6:7f:8f:74:bd:27:a9:
be:e6:24:62:67:31:74:2a:81:4c:81:6d:78:45:d1:f2:2c:2e:
67:a4:5f:b0:e6:22:80:33:3a:27:7a:fe:12:50:1d:4a:c1:c4:
eb:14:f2:70:e2:af:0e:b4:e6:6a:84:b5:93:4c:ca:b0:22:07:
b4:1f:5a:a1:bf:3d:01:27:14:c2:cc:d3:be:58:be:22:11:92:
2c:4c:d3:da:f0:b2:e9:5e:cd:20:23:c0:6c:2b:52:2d:1f:ba:
30:6b:0c:0b:5c:2d:04:4f:d2:2a:50:30:6e:22:ac:60:f9:c8:
9a:ed:42:98:81:3c:0f:38:53:b7:26:a5:0d:44:1f:de:ad:d3:
db:fa:5b:1c:f6:02:92:11:1d:3f:b3:1e:ef:51:ee:60:5a:ef:
67:8f:93:1b:49:e4:a6:6e:2c:10:0f:82:e0:b3:91:31:50:6c:
53:59:03:35:a3:67:a1:91:75:b3:74:30:fb:02:59:37:8c:b1:
a3:9a:fa:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:25:59 2026 by rpki-client