Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
File: 7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json)
Hash identifier: aMUpF41xfGO+ObyJaGKUej3TKaebWB47J9HexHxRgfw=
Subject key identifier: BC:AD:B7:FF:58:97:B8:F8:6B:74:54:90:EF:42:50:80:7C:51:81:B6
Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
Certificate issuer: /CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Certificate serial: 01A14C18D41EB6912A5975B3E5717C810640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
Manifest number: 1416
Signing time: Sat 17 Oct 2026 23:00:57 +0000
Manifest this update: Sat 17 Oct 2026 23:00:57 +0000
Manifest next update: Sun 18 Oct 2026 23:00:57 +0000
Files and hashes: 1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: mbYpW4Gf946UVyUr8zogJH80X534Reemo7TZmut05vY=)
2: ROD76SwfYB6C6gAmh6ocy7RmvzY.roa (hash: 8kz9BVZL6aAIte+oXvcJlqrJDsa6yWdXpOPNdQQYCKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:18:d4:1e:b6:91:2a:59:75:b3:e5:71:7c:81:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Validity
Not Before: Oct 17 23:00:57 2026 GMT
Not After : Oct 18 23:00:57 2026 GMT
Subject: CN=bcadb7ff5897b8f86b745490ef4250807c5181b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:ef:3c:7a:eb:a1:6c:95:4c:06:1c:71:bd:
e1:c0:c3:fd:72:14:ad:9e:21:62:cd:f8:ce:0c:fb:
19:ff:1e:ec:97:bb:89:62:fd:52:2c:4e:02:8c:be:
10:5a:3e:b1:b6:6b:28:49:cb:cd:c4:63:53:88:ec:
09:3c:29:85:86:38:6a:dd:a0:6d:a5:0c:b6:2a:6a:
55:22:ed:64:a7:0f:55:98:53:fe:ba:1b:ce:a8:9a:
e9:0c:3e:b3:94:88:79:a6:00:85:d3:6b:f7:c2:d4:
ea:90:97:2a:5b:50:97:ad:6d:39:d1:52:33:42:c1:
56:59:eb:47:73:aa:07:98:97:16:fd:6c:d2:cb:ef:
0d:dc:56:c6:d6:7e:d6:01:d5:91:50:92:03:c3:12:
f6:7c:08:d9:1d:b0:f2:b9:c5:21:67:3e:65:a5:eb:
32:3d:7c:28:16:78:1c:be:90:66:fc:f3:b2:e0:ac:
f2:bf:0c:70:07:ee:14:b9:2d:0d:be:23:1a:91:b0:
78:7e:56:80:56:31:e5:20:54:80:92:ba:a3:22:f9:
8e:de:7f:4e:8a:64:20:b5:a8:b3:8f:b3:16:78:d9:
fd:43:04:28:62:58:c7:b0:72:8b:9f:3c:fd:7c:5d:
58:c4:1d:b1:37:de:e9:dc:b2:b0:52:95:a9:4c:3c:
e2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AD:B7:FF:58:97:B8:F8:6B:74:54:90:EF:42:50:80:7C:51:81:B6
X509v3 Authority Key Identifier:
keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:20:a6:ab:ce:d9:eb:5d:95:93:40:51:3c:e8:b2:bd:ad:60:
6e:ec:81:10:d9:e6:80:f8:dd:4c:5d:1c:3f:df:5c:94:b5:97:
78:0d:d1:87:51:bd:ed:00:bf:25:86:8c:96:3d:33:a2:b5:0f:
00:9a:25:7c:3e:c5:e6:0e:19:e6:db:76:38:75:ec:be:2c:ce:
81:a5:c9:5f:cc:10:60:4b:34:e5:ec:4b:fa:63:36:75:43:dc:
ec:ac:5f:98:52:53:76:95:df:71:0f:68:1a:f7:9f:24:d1:35:
00:ca:61:68:90:c0:a6:23:5e:db:16:0e:fc:11:eb:da:03:fa:
57:b3:88:fc:6c:a1:67:83:10:2a:a7:09:94:86:88:6e:95:8a:
1a:68:aa:11:79:b7:e3:d4:ff:43:b0:c1:d1:00:c5:82:78:53:
19:46:3f:75:54:f9:ef:80:92:df:dd:2f:8c:6d:6d:6f:0f:85:
ab:a3:9a:81:a8:08:0c:6d:c1:e7:4d:81:27:ae:17:2f:e6:a0:
10:e0:67:c0:56:57:5e:93:57:dc:73:91:6b:bc:1c:8b:ca:d3:
a0:5a:f8:fe:17:39:39:6d:b2:1e:e5:b7:4a:11:07:7b:ce:56:
80:e7:e1:81:13:6b:3d:2f:bb:23:eb:75:bb:53:29:e1:15:75:
a4:63:08:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:18:58 2026 by rpki-client