Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
File: 7N10boF0dtVXj7y-1XTXwa0mQfE.mft (raw, json)
Hash identifier: WJLYp6zYxlIYZsQORTqiwnsA0aBLaHlebPLzoTF+Iow=
Subject key identifier: 40:A6:DA:AD:E0:85:9F:7A:66:C6:DC:EB:17:3F:FA:E7:43:25:83:0C
Authority key identifier: EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
Certificate issuer: /CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Certificate serial: 01A1494E8F0B3833E24616474F05DC2D1194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
Manifest number: 1AA9
Signing time: Sat 17 Oct 2026 10:00:47 +0000
Manifest this update: Sat 17 Oct 2026 10:00:47 +0000
Manifest next update: Sun 18 Oct 2026 10:00:47 +0000
Files and hashes: 1: 7N10boF0dtVXj7y-1XTXwa0mQfE.crl (hash: SJCO9+k3VvlA2nsTg3noBDZr18l2qp7N4NfnCP2Swhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:4e:8f:0b:38:33:e2:46:16:47:4f:05:dc:2d:11:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Validity
Not Before: Oct 17 10:00:47 2026 GMT
Not After : Oct 18 10:00:47 2026 GMT
Subject: CN=40a6daade0859f7a66c6dceb173ffae74325830c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0c:f1:d1:33:f1:ed:cd:6b:6f:49:fa:ea:3f:
47:f6:9c:a2:8a:f6:55:3a:d0:ed:03:20:9e:b3:bd:
1f:fe:84:6f:3a:ce:5d:78:f4:57:9d:44:d3:ef:da:
29:95:88:55:80:8f:8f:eb:35:5b:79:c8:74:53:b4:
10:f9:c1:81:f4:75:8b:9f:4f:b2:46:8b:d2:15:68:
cf:a5:26:4e:ca:49:73:47:44:93:b2:1a:63:20:c2:
d2:09:99:1f:77:cc:36:06:6d:f8:7f:1e:2f:46:56:
7c:02:f5:93:67:0e:ea:92:61:a1:4b:51:51:68:28:
da:97:54:0e:ac:e0:d1:42:94:4a:17:4a:d9:c8:21:
06:85:1a:7a:8b:bc:8b:da:37:19:56:d7:8a:ac:24:
8c:6a:f3:33:04:55:4b:f9:50:da:b3:3a:e5:7c:ad:
27:6a:88:16:0b:ad:c1:6b:65:87:52:8c:24:a9:21:
04:87:61:ef:4e:b6:60:c9:77:a7:b8:f3:dd:1d:96:
aa:30:4e:61:bb:9c:31:08:ea:af:07:b7:47:15:15:
2d:8b:9d:ab:b9:6e:16:08:e0:de:80:77:31:d2:6b:
42:02:b0:c8:64:6b:0b:ca:c9:df:bb:78:39:3f:45:
13:bc:40:db:dd:dc:e0:23:e9:4e:24:98:20:a5:00:
88:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A6:DA:AD:E0:85:9F:7A:66:C6:DC:EB:17:3F:FA:E7:43:25:83:0C
X509v3 Authority Key Identifier:
keyid:EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:22:89:fe:3f:92:a2:5a:2f:69:ad:75:bb:e5:77:04:b2:02:
40:3a:5a:92:4c:6e:cb:91:fe:d0:1c:0a:77:f5:60:8e:0f:7d:
73:e8:b9:a6:01:af:3d:1d:5c:b4:9c:5b:bc:28:7f:a5:3e:2e:
92:b6:1b:be:38:96:93:01:80:95:b0:8e:02:90:c0:0c:ca:dd:
80:07:1e:1a:a3:b4:e6:3c:45:51:3a:1f:d7:c2:dd:2b:78:41:
1a:23:46:15:88:8f:fd:92:c9:b1:fa:1f:d8:f1:a8:e6:4f:70:
6e:ad:4f:83:89:8b:b4:ce:39:a8:1b:4d:08:29:12:12:29:d1:
d3:c6:6d:0e:58:f2:e8:fd:96:fe:96:e9:dd:4e:45:43:62:c9:
d2:03:b1:66:37:31:14:d8:7c:04:81:89:87:56:f7:eb:9c:77:
c9:30:a1:dc:7f:c0:1d:5c:d6:b3:87:53:09:de:5b:cb:33:dd:
cb:aa:4d:ac:9b:13:d1:97:7c:37:dd:1a:be:ae:df:01:ec:ab:
f8:c1:5d:73:97:49:a2:97:1c:c2:14:e6:55:63:a0:a6:ca:bd:
2c:1f:a1:91:85:af:14:d2:b0:ed:79:22:bb:63:58:d3:72:e2:
a1:4c:d3:97:33:35:5a:77:c9:be:a9:0c:fa:2a:79:2a:fc:a8:
1b:3a:7e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:47:28 2026 by rpki-client