Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
File: 7dUb8eKlMAC8IwYFYPLMCznUlu8.mft (raw, json)
Hash identifier: HZuwqe88YFXxGvZ2UO3XnCaFcRaquugACQ8853EzMJE=
Subject key identifier: 57:D6:3B:2E:29:F5:1E:2B:DE:76:F7:D6:24:11:79:8F:D3:B5:8B:66
Authority key identifier: ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
Certificate issuer: /CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Certificate serial: 01A13FA7A3B3B13909A54F0FE7581A537DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 13:01:53 +0000
Manifest this update: Thu 15 Oct 2026 13:01:53 +0000
Manifest next update: Fri 16 Oct 2026 13:01:53 +0000
Files and hashes: 1: 7dUb8eKlMAC8IwYFYPLMCznUlu8.crl (hash: rndhLNaR2yMwavtMtr43jAt+AuE3PqB0O5wch8SAMfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:a3:b3:b1:39:09:a5:4f:0f:e7:58:1a:53:7d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Validity
Not Before: Oct 15 13:01:53 2026 GMT
Not After : Oct 16 13:01:53 2026 GMT
Subject: CN=57d63b2e29f51e2bde76f7d62411798fd3b58b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:c8:4a:5b:ce:d5:99:d1:2d:e7:0a:28:83:
57:4d:fb:8d:91:aa:c2:5c:11:d4:5a:79:ed:5b:03:
28:51:cb:4c:a6:d8:22:db:b6:16:50:ad:d4:6d:98:
6f:cb:1a:58:41:31:7b:71:54:6a:11:6b:2a:48:5c:
62:9f:9c:f8:7a:78:07:f6:27:eb:e6:cc:a0:e3:bf:
95:4b:67:2e:30:42:f7:7d:0f:5e:d9:b9:2c:42:26:
d0:2b:d9:58:52:0d:6e:27:f6:43:48:eb:ee:95:53:
27:d4:db:29:5b:2d:64:f1:44:ea:d6:27:a0:45:fe:
12:9c:e1:6d:51:0a:c7:08:de:fd:63:e3:98:bd:02:
8e:62:b6:5c:ee:22:ba:45:a5:78:ac:27:e5:7a:43:
23:cd:20:c8:44:dc:da:fc:80:96:16:0f:aa:dc:13:
d6:3e:72:a5:4a:cb:75:cf:7b:87:2f:6b:68:fc:c5:
f2:0d:6a:c2:41:7d:66:8f:4a:1d:73:0e:60:bd:47:
2c:55:fa:c6:e6:30:a9:ba:fb:07:cc:1b:bf:b8:11:
ca:87:f5:76:e6:08:7b:e0:38:b2:cc:1c:7c:58:f1:
04:1e:8a:a9:a7:b2:3f:b5:25:b1:68:af:c5:da:62:
1b:fb:d0:39:fd:ce:83:5a:ba:3a:48:45:2f:37:0c:
06:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D6:3B:2E:29:F5:1E:2B:DE:76:F7:D6:24:11:79:8F:D3:B5:8B:66
X509v3 Authority Key Identifier:
keyid:ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b7:4e:38:04:40:69:e2:9f:80:c7:b6:2f:fb:91:1f:c8:6a:
de:2b:bf:8d:2d:97:b1:b9:5c:77:9f:0a:87:5c:86:da:86:9e:
21:13:71:92:5e:94:b2:63:1a:41:55:cd:47:18:b2:86:35:ef:
cf:12:ae:61:c4:88:be:f9:5e:dc:65:69:fc:1b:f8:e2:44:25:
f0:45:8a:af:09:8f:81:06:2a:35:a3:5e:d5:ae:1c:65:f6:5f:
99:61:20:a5:f9:80:a2:3b:1d:60:93:5d:ed:64:13:ae:1f:d6:
3e:50:3a:1b:f5:65:6b:f6:c7:ff:8b:5f:0d:81:76:28:0d:bd:
3c:bc:42:90:39:8d:a4:1f:de:52:6f:5d:31:1d:26:6d:29:4c:
4a:fd:95:64:db:54:c5:df:fd:6e:7f:98:31:4e:eb:8d:c9:9a:
76:07:d8:6b:0a:47:97:b9:36:05:ae:a0:22:14:64:3f:c0:3c:
27:fd:96:db:93:89:88:1b:3d:1c:eb:4b:68:10:4b:bc:1a:84:
00:d3:6b:39:f3:1f:7d:af:23:ed:f0:2e:6b:1a:b4:f3:99:6b:
02:51:4d:95:41:36:c9:00:00:f8:96:74:5a:65:18:57:30:e4:
d2:3a:44:80:a3:1a:51:0d:79:3e:38:6a:89:19:29:e2:58:01:
95:06:5c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:06:25 2026 by rpki-client