Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
File: 7wC6UdY7F3WDfocvvehOLdCHT2M.mft (raw, json)
Hash identifier: tiikXHUBTuPasVnERFJepatPfCbMoCgf3sj0oE62Xes=
Subject key identifier: FF:28:68:B6:E1:82:BE:E1:69:7B:8B:07:70:F5:1B:6E:66:69:54:C3
Authority key identifier: EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
Certificate issuer: /CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Certificate serial: 01A13F0253EA9D8899211AB91B1809F98E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
Manifest number: 174C
Signing time: Thu 15 Oct 2026 10:01:19 +0000
Manifest this update: Thu 15 Oct 2026 10:01:19 +0000
Manifest next update: Fri 16 Oct 2026 10:01:19 +0000
Files and hashes: 1: 7wC6UdY7F3WDfocvvehOLdCHT2M.crl (hash: HVwMQoW/k+/1tueawwdIRKrpmPGIG3gkFSebB28CKRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:53:ea:9d:88:99:21:1a:b9:1b:18:09:f9:8e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Validity
Not Before: Oct 15 10:01:19 2026 GMT
Not After : Oct 16 10:01:19 2026 GMT
Subject: CN=ff2868b6e182bee1697b8b0770f51b6e666954c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:46:37:e7:22:3f:ef:9f:29:6d:de:ff:5c:44:
ca:3f:f6:8d:e9:76:3c:da:34:a8:39:0d:b3:61:e7:
ee:1b:b1:be:be:57:cd:e1:6b:99:e4:6c:a5:b3:f7:
a4:fe:8e:7f:5b:ce:20:93:07:d3:5c:09:b5:90:0b:
1c:3b:57:41:18:e4:4f:b2:84:bd:16:46:2f:ec:93:
65:20:3a:0e:37:47:c5:e2:ef:bc:9e:95:95:8c:fc:
90:e4:28:79:ee:a3:04:26:87:6b:5f:e4:bd:32:10:
2c:08:32:a2:5d:d8:3e:33:38:a8:47:4e:c6:6a:9d:
1f:e9:97:42:82:20:c4:52:18:e8:11:db:68:69:ee:
ec:4a:04:22:75:ca:ee:56:04:d9:54:3c:54:0c:25:
f9:dc:9c:2d:38:1c:81:6d:e5:86:5f:b6:cf:11:24:
42:cf:b9:25:89:1c:07:0f:a2:55:d4:1f:82:42:91:
36:35:66:97:73:37:4b:71:58:24:62:5d:07:20:c5:
5d:86:5e:66:1a:ce:d5:31:ed:8f:80:1b:50:6d:b4:
a5:95:28:e2:45:13:4f:40:81:2c:cf:e2:72:c2:85:
68:e1:78:17:59:b8:46:07:5b:2b:cd:0d:45:5f:69:
dc:18:42:9f:a3:be:27:5c:51:d3:1f:64:22:d2:5a:
b0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:28:68:B6:E1:82:BE:E1:69:7B:8B:07:70:F5:1B:6E:66:69:54:C3
X509v3 Authority Key Identifier:
keyid:EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:59:ec:6f:c9:a2:b6:66:ab:22:27:c6:34:ee:87:1a:bd:cf:
5a:b6:81:11:de:4c:20:53:06:03:4f:79:2d:92:fa:57:23:3f:
8d:dc:67:81:11:9b:b1:bc:a2:4e:46:50:ce:00:ce:bf:95:c0:
03:9e:63:09:2f:bb:28:37:88:ad:0a:bc:0f:ac:dd:94:bd:8f:
f3:6c:8a:e0:be:76:b1:78:6e:78:eb:59:63:f3:b7:00:4d:56:
f4:69:58:d0:82:82:a9:24:6f:df:c5:6c:2c:ba:c0:43:3a:ef:
07:9e:4c:05:d3:1d:9f:7b:11:a3:2e:1c:a2:6d:5b:43:09:5f:
e7:f2:db:49:b1:0f:2d:ba:ba:6c:44:bb:2a:71:39:21:4a:4c:
40:bf:93:6d:15:a5:1d:47:55:ec:1e:ff:46:23:fe:81:00:bf:
e8:99:c0:61:9c:1f:38:ad:b5:09:d0:68:9b:9f:3a:ef:bd:c5:
3c:44:8f:ef:d5:7f:7c:a4:9c:74:ed:f1:80:8e:43:a5:54:c4:
c6:90:33:97:7e:5f:0a:ed:08:b8:cf:4b:4e:e2:c2:a4:a4:9f:
f2:64:df:8f:2a:51:a3:29:01:d2:61:d4:18:59:15:cd:cb:f2:
ab:20:9a:39:55:f3:05:49:09:6a:48:56:01:38:f9:ab:cb:d1:
33:d5:8f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:15 2026 by rpki-client