
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
File: 7kDaG04w_7sypOSkt61zHAMeRCk.mft (raw, json)
Hash identifier: +vIelLoJMwm7MQwwLMpQl5Kzd/m2psJIbY+FVhVIWjs=
Subject key identifier: E1:1D:16:55:18:9B:61:AC:ED:0E:43:29:10:0E:F3:3B:00:64:33:1E
Authority key identifier: EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
Certificate issuer: /CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Certificate serial: 01A13F394645AD44DBC91798D8A9D1E12188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
Manifest number: 0938
Signing time: Thu 15 Oct 2026 11:01:20 +0000
Manifest this update: Thu 15 Oct 2026 11:01:20 +0000
Manifest next update: Fri 16 Oct 2026 11:01:20 +0000
Files and hashes: 1: 7kDaG04w_7sypOSkt61zHAMeRCk.crl (hash: 89lrobGLubq+c/I47RcTVZIUF+lRlQ8MMOPpgUPcgSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:46:45:ad:44:db:c9:17:98:d8:a9:d1:e1:21:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Validity
Not Before: Oct 15 11:01:20 2026 GMT
Not After : Oct 16 11:01:20 2026 GMT
Subject: CN=e11d1655189b61aced0e4329100ef33b0064331e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:1c:7e:f8:82:78:7c:3b:73:a1:1d:1e:48:
59:a4:35:ce:aa:3e:7a:a1:22:04:94:b6:87:dd:6b:
85:9f:24:b1:cc:df:58:96:a7:4b:20:8f:98:4e:07:
65:44:39:0c:fe:76:f8:6d:70:44:b0:50:19:65:99:
fd:38:50:08:a7:4b:d0:66:0a:13:0d:b2:bb:0e:b5:
ec:4e:54:73:2d:86:4d:5e:10:54:5d:16:58:e5:e4:
14:19:5f:0d:b6:fd:92:7b:d0:11:e7:6c:d4:b5:40:
cf:b4:18:4c:7b:f4:6f:e6:a1:54:dc:3d:c8:45:3f:
e3:30:70:fa:5f:5c:64:48:0d:e2:04:07:f0:fe:35:
94:5c:d5:db:42:80:79:f8:1b:cc:52:7f:c9:6d:59:
bb:a7:78:83:c4:fb:aa:86:0b:84:32:8d:0e:31:97:
12:bf:11:76:0d:b0:b7:e7:56:eb:91:d4:6b:ab:f7:
cd:41:1c:a3:98:c0:f7:d7:77:f4:8b:82:00:dc:5c:
a6:aa:0a:48:65:10:a4:c6:44:e1:d7:45:5e:04:eb:
30:eb:95:b1:0c:50:3f:20:66:fe:43:86:b3:5b:37:
12:dc:55:ed:75:eb:ff:4f:54:0f:fc:8f:89:c5:72:
66:90:94:bc:35:41:f7:f8:8c:05:83:3f:9a:d5:f6:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1D:16:55:18:9B:61:AC:ED:0E:43:29:10:0E:F3:3B:00:64:33:1E
X509v3 Authority Key Identifier:
keyid:EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:95:f3:00:76:4a:98:9d:51:15:df:cb:db:e5:1d:13:99:53:
e3:ef:46:7c:ad:78:b3:4a:96:bd:e7:3b:28:b5:1d:95:36:77:
0e:68:13:72:de:da:0b:d8:b9:a6:80:01:ce:de:c9:ab:b9:b6:
82:54:4d:9f:a2:45:7e:f7:a8:d1:47:bd:ce:8f:d2:da:78:2c:
c0:0f:45:5e:d0:92:42:41:ee:74:58:7d:ef:f1:ae:8d:26:48:
97:c6:6b:f7:0d:88:63:83:fe:f6:87:c9:00:05:3f:b7:36:05:
1e:42:15:d8:a0:5c:4a:5f:62:3a:04:23:c5:f4:42:31:40:dd:
9f:32:36:28:6f:78:2a:55:bd:66:20:f8:cd:ac:fe:ff:39:96:
dc:7f:76:d5:c8:4c:e3:c7:3e:bf:b7:e6:55:b1:a7:80:31:4e:
24:d2:b6:b6:a0:ff:3b:7b:ba:3c:6f:9a:27:5c:b9:47:3d:89:
da:2c:58:95:13:9f:7c:10:e4:85:a3:ad:6c:18:dd:62:ee:9b:
0a:a3:b9:3e:af:cc:af:63:1f:89:80:f4:fc:1a:0d:ab:1a:07:
ec:25:01:87:52:12:76:3e:62:1e:67:a9:f6:9d:c4:6d:f8:86:
6a:64:50:2d:13:3c:0f:10:9a:4a:31:cb:eb:1c:91:15:3e:5c:
66:32:30:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:19 2026 by rpki-client