Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
File: 7MzCuQnHyBXKzLX85THDJSb63Vo.mft (raw, json)
Hash identifier: Up0U4hP2YPp9PHcQGggryPG3OK2yRlKts73oPxMBkjY=
Subject key identifier: 19:D2:09:67:E7:AF:E1:3B:FA:49:C8:53:07:7E:3C:A9:7D:A3:B7:AE
Authority key identifier: EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
Certificate issuer: /CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Certificate serial: 01A13ECBD163A94F65A81308868E2B708A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
Manifest number: 17A2
Signing time: Thu 15 Oct 2026 09:01:47 +0000
Manifest this update: Thu 15 Oct 2026 09:01:47 +0000
Manifest next update: Fri 16 Oct 2026 09:01:47 +0000
Files and hashes: 1: 7MzCuQnHyBXKzLX85THDJSb63Vo.crl (hash: ALokmSMDF6CTeCOKwK2SWi3KcN7rKb0YZ6ws4x02x9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:d1:63:a9:4f:65:a8:13:08:86:8e:2b:70:8a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Validity
Not Before: Oct 15 09:01:47 2026 GMT
Not After : Oct 16 09:01:47 2026 GMT
Subject: CN=19d20967e7afe13bfa49c853077e3ca97da3b7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:21:87:4f:d5:65:b8:7e:af:6a:ad:9c:38:
1b:dc:f2:c2:00:fb:6b:8d:75:16:6e:88:29:ab:72:
23:a2:3a:5b:6e:21:c5:f8:c0:ac:5c:c9:9e:6b:93:
4a:98:7b:a1:69:ee:67:03:81:85:e5:9a:9e:23:59:
86:a0:84:e1:0e:42:d6:b0:8a:b3:fe:bc:9e:32:80:
bc:84:b2:6d:94:9b:93:c7:d6:2e:d0:0e:ca:a5:84:
89:d8:5d:3b:bd:bb:55:7c:99:e0:b4:dd:fe:0a:53:
8f:47:ff:c5:3c:66:6b:4e:83:89:3d:8d:f7:3c:43:
54:c0:75:6b:d3:ee:91:ba:51:1e:62:ca:88:55:fd:
19:f3:ca:c3:64:dd:37:73:05:e0:e0:52:72:7d:c3:
0d:ea:3e:a8:9c:24:05:3e:d3:62:03:25:86:27:64:
9f:e2:c4:19:d0:fc:97:c1:91:db:79:65:23:5a:6b:
78:3b:21:fe:95:08:db:fb:69:7c:ba:cf:6e:d5:ad:
49:b3:82:f2:27:97:a8:4a:78:59:11:05:17:b8:b4:
12:5d:65:a5:f6:f1:21:6e:c7:ce:7c:5d:d2:5c:a1:
39:58:e9:75:ec:6f:2b:90:3a:72:58:f8:75:3b:fa:
27:e9:d2:ba:c0:39:54:80:a5:20:9a:20:d2:dd:70:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D2:09:67:E7:AF:E1:3B:FA:49:C8:53:07:7E:3C:A9:7D:A3:B7:AE
X509v3 Authority Key Identifier:
keyid:EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7d:e6:14:33:2d:5d:28:24:c0:dd:d9:98:f7:d7:7a:2f:ef:
42:a0:12:02:aa:ac:e4:d0:7a:ea:f7:cf:42:7d:44:47:35:a3:
16:05:e4:8f:a3:55:dd:ff:cf:a8:aa:28:bc:72:83:50:0d:a4:
b6:d5:9d:74:f5:32:d3:cd:ad:ad:79:49:56:cc:5f:4f:32:58:
ab:58:16:2d:81:ee:a7:74:8d:be:7d:d6:14:ad:27:83:f1:dd:
63:8b:b7:cf:fd:c5:47:50:58:88:00:a5:d4:37:78:72:e9:2b:
e2:1e:f9:5b:6e:e1:be:68:b2:7c:c3:71:d6:c8:49:73:cb:57:
fb:57:b2:1b:2b:26:63:7a:cc:30:8c:04:aa:dd:b4:7b:ce:1e:
51:f4:b4:e6:ca:3d:41:28:40:05:55:41:9f:c5:ef:fb:ca:a8:
f1:1a:43:00:92:8a:4f:74:f0:06:6c:44:4e:30:e9:92:72:43:
a9:80:0f:c8:0f:da:c8:4f:af:fd:78:99:52:0b:db:d3:ee:7a:
91:29:7c:93:23:07:9c:65:c0:d2:24:94:a6:e6:f1:cc:49:f1:
2a:40:e2:89:a2:d5:f8:cf:6f:09:0b:d4:7c:69:d0:c1:01:ea:
54:bd:76:e7:05:4a:87:0b:6a:fe:99:38:f2:0b:8e:58:72:75:
50:b3:81:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:03 2026 by rpki-client