
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/4089cd-5ba0-483c-883d-c8c0ff55f52d/1/7zAIudH6IIoVT1hcruy7UsGyXOQ.mft
File: 7zAIudH6IIoVT1hcruy7UsGyXOQ.mft (raw, json)
Hash identifier: fQ2GC5+i0id+xtYnb1tq5g8acAu7NCkHL9PbajSUClc=
Subject key identifier: E3:E1:12:4C:E8:ED:66:80:08:FB:E9:9D:B1:F1:00:91:BA:B7:7C:BA
Authority key identifier: EF:30:08:B9:D1:FA:20:8A:15:4F:58:5C:AE:EC:BB:52:C1:B2:5C:E4
Certificate issuer: /CN=ef3008b9d1fa208a154f585caeecbb52c1b25ce4
Certificate serial: 01A0404E3BD9C0C765503A6F1D82E6AA7820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zAIudH6IIoVT1hcruy7UsGyXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/4089cd-5ba0-483c-883d-c8c0ff55f52d/1/7zAIudH6IIoVT1hcruy7UsGyXOQ.mft
Manifest number: 01D2
Signing time: Wed 26 Aug 2026 23:01:03 +0000
Manifest this update: Wed 26 Aug 2026 23:01:03 +0000
Manifest next update: Thu 27 Aug 2026 23:01:03 +0000
Files and hashes: 1: 7zAIudH6IIoVT1hcruy7UsGyXOQ.crl (hash: vZcUivxFuic/qRsHs5c3rSySpwKCXgl25W53LKv1rXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/4089cd-5ba0-483c-883d-c8c0ff55f52d/1/7zAIudH6IIoVT1hcruy7UsGyXOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/4089cd-5ba0-483c-883d-c8c0ff55f52d/1/7zAIudH6IIoVT1hcruy7UsGyXOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7zAIudH6IIoVT1hcruy7UsGyXOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:3b:d9:c0:c7:65:50:3a:6f:1d:82:e6:aa:78:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3008b9d1fa208a154f585caeecbb52c1b25ce4
Validity
Not Before: Aug 26 23:01:03 2026 GMT
Not After : Aug 27 23:01:03 2026 GMT
Subject: CN=e3e1124ce8ed668008fbe99db1f10091bab77cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:08:42:5a:ba:55:16:06:67:d5:60:26:0d:
ea:8c:22:19:0c:78:c6:94:df:90:3b:0c:8f:2b:96:
32:6f:5b:83:ad:ea:b0:c4:10:bb:72:12:07:3f:e1:
6e:ec:2f:e1:55:f9:bb:4f:2d:0f:da:3b:f2:c7:49:
75:b4:9b:48:7c:8c:0d:b7:fc:3b:73:69:5c:d0:45:
a1:68:de:a8:24:56:fd:f6:86:5b:b7:35:0b:01:ed:
61:8f:a2:b3:99:8e:32:fa:bf:e9:4d:32:d0:f6:4c:
bd:d0:64:fc:28:04:72:0a:3a:80:59:5b:89:84:c3:
01:1c:c1:78:cb:06:9a:ab:7d:81:e5:d2:e5:a8:ac:
a7:6a:eb:1f:cb:26:ee:7b:8a:14:54:89:2c:a2:25:
fb:4c:67:de:dc:17:de:1b:a0:d1:bb:04:be:37:b3:
7e:08:3b:13:98:07:07:c9:3b:ee:6a:f5:7f:82:96:
c4:40:9c:c1:10:aa:c3:75:86:47:5f:e7:92:01:95:
2f:e2:d5:32:d1:dc:19:66:6e:1f:b7:57:29:92:6d:
ae:47:a7:cc:53:b3:4d:81:e2:f2:51:53:ed:65:45:
2f:e4:5f:39:79:56:c4:2e:e3:e0:b6:82:8f:f7:5a:
83:19:ea:82:d8:b0:d8:17:ca:4d:19:da:42:81:33:
29:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E1:12:4C:E8:ED:66:80:08:FB:E9:9D:B1:F1:00:91:BA:B7:7C:BA
X509v3 Authority Key Identifier:
keyid:EF:30:08:B9:D1:FA:20:8A:15:4F:58:5C:AE:EC:BB:52:C1:B2:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zAIudH6IIoVT1hcruy7UsGyXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/4089cd-5ba0-483c-883d-c8c0ff55f52d/1/7zAIudH6IIoVT1hcruy7UsGyXOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/4089cd-5ba0-483c-883d-c8c0ff55f52d/1/7zAIudH6IIoVT1hcruy7UsGyXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a6:32:9d:1d:f6:c5:08:40:48:ed:c2:76:3c:ab:a6:cb:20:
83:fc:c2:51:ff:8e:96:f5:a7:82:d8:d8:bf:44:e3:71:f2:50:
db:d7:19:df:ae:a4:a6:a8:19:8e:0f:c2:bc:62:cf:5f:bc:3a:
ed:36:09:7d:79:5f:01:ef:3e:ed:33:42:c3:47:9b:7d:52:12:
1d:28:c5:a6:b8:69:0d:b3:bd:52:31:4a:d2:5d:bc:85:01:53:
b1:80:15:73:33:82:9c:98:4d:ab:a0:a2:6c:fb:1d:e8:6f:f0:
50:8d:9b:93:61:5a:a4:72:96:16:b3:02:f7:4e:a5:fd:93:3f:
bb:fd:13:2e:b9:d0:de:cf:22:6f:54:3c:05:44:35:88:49:e5:
50:7a:7b:27:36:4b:88:77:d2:25:a1:80:d9:3d:35:30:68:40:
ad:fb:fa:24:e8:7a:8b:cb:b1:a0:71:ba:4b:ee:9e:e4:f6:bf:
60:c7:40:a9:9f:4e:7a:6f:76:6f:ba:71:38:ad:6a:72:04:8b:
32:3b:6e:a6:ae:d9:e7:f5:0d:fc:36:7d:78:5d:c8:ac:e9:9c:
15:6d:19:04:0d:74:e5:fb:66:2b:31:96:44:56:f5:6d:15:e4:
eb:2d:00:58:89:98:31:fb:f3:4d:d4:bc:27:ad:90:25:64:3f:
12:96:76:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:36 2026 by rpki-client