Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
File: 7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft (raw, json)
Hash identifier: YpVWa/AcYTGe89dec85AhTBlhkqldkubuLB68xyDZb4=
Subject key identifier: 78:8C:48:A8:B4:84:70:AB:B5:0A:7F:8E:5B:AC:D8:E5:AA:67:A5:4D
Authority key identifier: EC:06:B5:60:61:45:7F:F5:C0:83:8A:F1:D2:53:5E:E0:D1:F2:B4:3C
Certificate issuer: /CN=ec06b56061457ff5c0838af1d2535ee0d1f2b43c
Certificate serial: 01A17BF27D64D147D46944E06EB3E2D26BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
Manifest number: 0256
Signing time: Tue 27 Oct 2026 06:00:51 +0000
Manifest this update: Tue 27 Oct 2026 06:00:51 +0000
Manifest next update: Wed 28 Oct 2026 06:00:51 +0000
Files and hashes: 1: 7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl (hash: I+Q0RguDDYiAajXvQZltIFp52elI+kDWyKW/DO9nANo=)
2: rBifEteMiJ25R5DQDU12NebJRS4.roa (hash: zud/trrJppI6pE83KUPt6r47Ql1iRfoDUPjneuGZTLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:7d:64:d1:47:d4:69:44:e0:6e:b3:e2:d2:6b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec06b56061457ff5c0838af1d2535ee0d1f2b43c
Validity
Not Before: Oct 27 06:00:51 2026 GMT
Not After : Oct 28 06:00:51 2026 GMT
Subject: CN=788c48a8b48470abb50a7f8e5bacd8e5aa67a54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:36:99:e1:af:97:fe:88:2b:6e:cd:e3:ac:28:
09:d1:7c:5c:98:24:f6:3b:a8:b6:a4:a3:f9:e5:ae:
a3:1e:5f:78:57:f3:bb:8f:09:ac:f8:58:8f:d2:55:
4c:45:66:e4:9b:23:00:bb:e6:1c:de:8f:93:1b:45:
ed:d8:e1:ea:3e:53:f8:ef:83:fe:a7:28:6b:7b:9d:
94:fe:a6:32:37:20:58:9a:95:17:6f:ba:1c:4b:5e:
58:55:c6:47:4c:51:20:b0:3c:d8:96:79:be:7d:b7:
49:fb:fc:e4:91:02:17:99:8f:42:3b:79:12:c6:b3:
b9:ad:79:95:e8:ec:d4:41:6f:f5:ed:c6:6d:da:8a:
8d:43:3d:8e:9d:74:e0:20:17:fa:81:53:e6:39:cb:
e2:48:cf:45:59:13:a3:dc:37:ac:ab:a5:0a:96:1d:
5d:1a:8d:de:df:b2:df:4a:8a:4e:f0:06:e8:ac:40:
b2:20:3a:c9:a6:4e:64:af:68:03:c0:0e:6e:bb:83:
6e:94:2a:56:e9:e4:79:75:03:47:8e:cd:80:58:21:
c4:ab:82:e2:ea:27:10:7b:ab:b3:84:58:a7:94:ab:
c9:25:95:7b:9e:ed:7b:7c:ae:20:01:c9:cd:39:09:
7c:1f:b4:a7:ca:d1:1f:98:30:14:65:92:69:2b:87:
13:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8C:48:A8:B4:84:70:AB:B5:0A:7F:8E:5B:AC:D8:E5:AA:67:A5:4D
X509v3 Authority Key Identifier:
keyid:EC:06:B5:60:61:45:7F:F5:C0:83:8A:F1:D2:53:5E:E0:D1:F2:B4:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fa:3a:1c:d5:d8:94:b7:48:2e:96:88:e5:00:bc:65:c7:56:
77:e8:70:34:fd:e7:aa:e9:d5:db:68:2c:cc:de:21:b3:3b:f1:
a2:e6:d5:c7:ef:2e:02:28:d4:cb:99:f3:31:c4:bf:47:85:69:
ce:72:a8:27:a6:eb:6b:2a:a4:78:3e:77:10:cd:36:df:23:df:
b5:3c:d4:d3:60:18:1d:f7:7f:3e:c2:09:fc:74:aa:ff:93:13:
c8:8b:cf:57:30:bd:cc:28:40:a7:3b:b9:40:08:d5:2f:01:bd:
88:b2:0d:33:27:8a:73:04:e0:32:b3:6c:ec:a6:ba:b2:99:b7:
41:09:0c:32:b0:4b:16:58:4a:a8:49:b4:8e:d1:8f:b1:91:00:
76:87:51:ed:ec:cc:9e:07:37:60:c4:3a:0f:70:d2:ae:e2:7f:
ca:91:e6:11:2d:c4:f1:4c:c8:53:fc:b5:5c:8b:28:82:ff:b4:
48:1c:4d:32:de:3e:f5:cb:68:81:2f:67:29:d0:a9:ab:fd:17:
e2:e9:dc:77:00:d0:bc:fe:9f:da:21:47:c7:f9:c0:27:f7:72:
11:7b:b2:6c:70:34:0f:f0:26:66:64:2d:ae:61:2a:12:53:37:
69:e4:5a:40:e5:59:44:75:fc:75:c2:94:2f:12:5b:03:de:f4:
1a:a1:d2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:14:07 2026 by rpki-client