Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
File: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft (raw, json)
Hash identifier: 0H88pTbWqg28yqK8JWLMW91V3RnWT9dQke/8p9Y88mY=
Subject key identifier: D1:B3:DA:AF:56:41:B3:49:A6:0A:B0:C8:94:08:75:08:8C:C4:0F:44
Authority key identifier: EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
Certificate issuer: /CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Certificate serial: 01A13F398D09423B48AD0A38E81CCF7ECB7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
Manifest number: 1111
Signing time: Thu 15 Oct 2026 11:01:38 +0000
Manifest this update: Thu 15 Oct 2026 11:01:38 +0000
Manifest next update: Fri 16 Oct 2026 11:01:38 +0000
Files and hashes: 1: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl (hash: j0904EP64j7qkmnJ5icOG2wm5QBh8YIZHAEwpvS+fK0=)
2: 9oOBFeGSrwdju604vrWfdCoTauM.roa (hash: pd4ZMcD0zoZVQx34tpixPFz8KnUMJc8/XoRGbitBdPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:8d:09:42:3b:48:ad:0a:38:e8:1c:cf:7e:cb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Validity
Not Before: Oct 15 11:01:38 2026 GMT
Not After : Oct 16 11:01:38 2026 GMT
Subject: CN=d1b3daaf5641b349a60ab0c8940875088cc40f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c9:21:bf:c0:72:a5:d4:ec:19:aa:ec:98:91:
2d:78:1b:bd:ca:57:89:a4:ac:74:f2:ca:b9:21:45:
ba:ab:61:7d:e1:f8:97:2a:36:09:7d:72:a6:d9:9f:
37:af:59:63:35:9d:70:c2:67:71:68:64:57:f8:48:
b2:b4:cc:de:cd:d4:96:70:95:78:7a:ba:59:a6:74:
0f:1a:24:22:32:b1:d3:54:53:81:e9:f5:fe:c6:2e:
95:9b:03:c9:13:b0:8f:fb:91:da:a6:da:d1:f3:a5:
01:76:61:78:96:33:98:eb:1e:14:6e:49:f0:d6:81:
c9:aa:f3:57:73:a0:81:57:07:99:69:38:92:0d:60:
33:c1:93:3b:e8:4e:c6:68:89:19:4a:c6:0f:3c:2d:
e9:52:07:f7:70:94:01:4e:52:71:44:66:f2:9a:8a:
f0:60:9f:7d:84:f6:5d:71:ba:d4:d5:15:fa:aa:ec:
26:86:b5:26:ba:16:d0:46:4b:6e:d8:36:92:90:0f:
f7:0d:ae:e1:01:28:3d:dd:19:b9:98:8a:86:3e:5a:
0e:75:7c:a9:03:f8:4f:60:fd:bb:6c:f9:3d:36:60:
48:e0:7e:46:eb:37:97:29:9a:2d:85:91:3e:d7:92:
49:1a:34:4d:14:8f:9e:e4:4e:ca:35:33:15:56:72:
9e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B3:DA:AF:56:41:B3:49:A6:0A:B0:C8:94:08:75:08:8C:C4:0F:44
X509v3 Authority Key Identifier:
keyid:EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4c:ef:09:9e:1b:ef:ae:1a:b9:08:46:60:d8:8b:d3:a8:db:
83:48:55:5d:db:a5:17:c0:47:ca:67:a6:1a:f9:d9:a3:9b:6d:
26:e1:95:be:26:e7:20:ea:c1:5b:72:94:37:df:5c:8d:ea:32:
76:7b:07:7a:70:2d:44:a8:d1:e8:74:c2:c1:2c:aa:71:8d:c8:
07:7d:78:d3:b9:d2:27:e2:74:0c:04:11:26:df:53:c9:ca:cb:
f1:68:81:7b:7d:48:7d:51:7c:ab:17:17:81:70:2c:3f:88:fa:
30:d5:6e:e9:88:67:c0:eb:72:b2:34:f6:49:3f:17:94:7c:1f:
1d:75:1b:51:2a:3a:9b:7b:3c:6d:f4:aa:34:df:7d:46:d2:e2:
0a:d0:5c:2a:30:c4:f5:e5:74:88:40:52:73:98:b3:98:ac:9a:
61:f4:21:e5:4f:e8:2f:9d:17:54:43:f0:b4:46:dc:cf:be:08:
e1:6a:c4:33:d0:d2:fd:d6:c2:30:a8:02:4a:0b:7d:7a:9d:bd:
5c:3c:1b:27:8e:30:71:6c:42:14:7c:f8:d3:ee:5f:af:78:f1:
4b:31:97:ed:5a:13:30:2a:fc:8e:b7:13:25:19:fa:43:6b:e9:
95:bb:c5:58:29:15:e9:5e:45:89:91:f0:da:39:2e:76:bb:10:
8c:fd:18:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:07:52 2026 by rpki-client