Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
File: 7cPfBG4eHVvwUiu5E_KVcoekm0s.mft (raw, json)
Hash identifier: p5ZnFlOTckM84ZFyqHso+JQ6NL/dn4GwEt+BUNvz/5A=
Subject key identifier: 54:46:78:83:D9:09:D1:F3:62:1C:A6:C3:99:4A:65:11:E5:11:BE:0D
Authority key identifier: ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
Certificate issuer: /CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Certificate serial: 01A13F700F75A3508D09E22240AB397D35D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
Manifest number: 1215
Signing time: Thu 15 Oct 2026 12:01:10 +0000
Manifest this update: Thu 15 Oct 2026 12:01:10 +0000
Manifest next update: Fri 16 Oct 2026 12:01:10 +0000
Files and hashes: 1: 7cPfBG4eHVvwUiu5E_KVcoekm0s.crl (hash: 6vwTXsBdS6cn5YYzXsxxqY4msGd/fVC2pYT4x5Z7vTU=)
2: seylKk68qXKxhoBzXl7E0-tTkU0.roa (hash: 14ms6tysm87Rxm8W+2zvydPUm5MTtyrDqlszeDC47Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:0f:75:a3:50:8d:09:e2:22:40:ab:39:7d:35:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Validity
Not Before: Oct 15 12:01:10 2026 GMT
Not After : Oct 16 12:01:10 2026 GMT
Subject: CN=54467883d909d1f3621ca6c3994a6511e511be0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:5b:f6:d7:9e:1c:51:dd:a4:25:d1:f6:67:
0a:47:72:5e:fd:c9:09:da:96:3f:6e:a3:2b:57:ba:
5b:b6:91:1d:2d:42:e5:f4:79:b5:4d:3e:2a:29:56:
2d:ce:4a:2c:14:81:08:04:85:d6:7b:a4:42:26:b0:
6a:ba:f4:0f:fd:05:ab:4f:f1:c4:70:3c:8f:8e:78:
1c:7b:e9:1c:f0:db:96:6d:6f:55:29:7d:d7:ba:39:
5a:b8:b3:40:8d:1f:b4:42:e8:62:76:77:c1:a9:c4:
47:ab:93:80:96:46:e4:48:ff:ae:06:a7:98:56:bf:
05:74:76:e4:59:d4:25:2d:8f:cc:bc:e8:ee:87:37:
8b:bb:7b:c8:81:fc:39:c0:19:e4:bc:15:5d:56:e0:
ff:c4:61:c8:cc:18:e5:0c:46:07:e0:73:07:9d:7f:
3c:1a:19:a7:f5:4b:b5:dc:0b:99:11:0c:2d:45:b9:
a7:33:7f:6b:60:23:b9:f9:c2:25:bb:4f:72:b6:14:
ae:6c:13:e4:98:9a:01:78:ea:6e:d8:ac:1d:7e:82:
7a:17:ab:75:58:97:1c:8f:f7:6e:a1:db:31:80:67:
0d:23:c1:14:ba:6d:e2:20:8b:70:b0:62:3c:25:41:
cc:fa:ae:22:b4:a4:04:83:d0:25:f9:23:25:43:25:
ea:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:46:78:83:D9:09:D1:F3:62:1C:A6:C3:99:4A:65:11:E5:11:BE:0D
X509v3 Authority Key Identifier:
keyid:ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e8:59:ee:13:87:bf:e3:a4:92:60:16:b9:5c:60:7f:4b:8f:
ad:3d:93:57:db:8f:02:be:a0:44:bb:92:b4:bb:eb:01:27:7f:
d8:e5:8a:be:92:be:5f:f9:0b:06:4b:7f:b0:36:df:70:54:e1:
50:63:37:46:24:46:57:a4:b9:09:84:ac:de:07:dc:37:0b:78:
94:93:76:a1:8d:6a:7e:c9:f4:59:83:f4:2f:d5:60:d3:62:d0:
9b:d5:24:8c:b4:8d:8e:1c:0b:ba:e0:65:37:4b:c5:9f:92:24:
f0:30:57:60:19:99:29:7e:b3:8d:19:3a:8b:54:ee:4f:02:da:
66:bd:4c:dd:35:41:94:7b:bf:87:51:fb:67:3c:14:df:ed:5f:
8d:a0:69:6f:3f:21:3c:8a:4e:22:e2:d8:6f:40:08:24:f4:2d:
46:5a:87:8a:92:1c:16:e1:35:02:63:e7:5f:a5:d9:05:99:4d:
93:3a:54:95:a4:2a:21:98:52:82:a5:06:27:41:6a:12:0f:0d:
a5:2b:ff:0a:fe:59:30:52:1f:c4:a8:79:3f:ea:fc:2c:4d:34:
2f:81:d7:df:38:3d:33:98:ff:13:a8:4a:ee:83:91:f4:6c:12:
0c:24:52:5a:d9:d4:d8:9a:ef:95:c6:77:d9:99:e2:2d:c1:bb:
da:a4:02:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:34:13 2026 by rpki-client