
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
File: CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft (raw, json)
Hash identifier: TNREaXvbErVYa/FWIM7fx6uBsmQxjtZPOceivVYK1Fc=
Subject key identifier: 2E:EF:BC:04:BB:02:9E:DB:10:61:87:B3:AD:2B:78:B1:4C:0B:12:33
Authority key identifier: 09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75
Certificate issuer: /CN=0979f537b09ebeaddf9878749d1f88753c540c75
Certificate serial: 01A13CA5ED7EC4ED59FAFFECA058620884AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
Manifest number: 1AA0
Signing time: Wed 14 Oct 2026 23:01:09 +0000
Manifest this update: Wed 14 Oct 2026 23:01:09 +0000
Manifest next update: Thu 15 Oct 2026 23:01:09 +0000
Files and hashes: 1: CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl (hash: LbgNuiK+fCgesUxxdVvxMy8PEgQib0WZTHuyiP4SCWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:ed:7e:c4:ed:59:fa:ff:ec:a0:58:62:08:84:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0979f537b09ebeaddf9878749d1f88753c540c75
Validity
Not Before: Oct 14 23:01:09 2026 GMT
Not After : Oct 15 23:01:09 2026 GMT
Subject: CN=2eefbc04bb029edb106187b3ad2b78b14c0b1233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:36:2f:0d:09:e6:14:89:b3:76:a3:e3:3d:
b6:14:ee:39:e5:9e:df:ef:52:f7:fb:91:bf:a0:a9:
be:ea:a8:09:6b:af:c9:be:16:02:79:1f:9a:e1:7a:
90:a4:af:14:73:a8:e2:ac:35:89:09:29:f8:c4:8f:
70:d7:fc:ba:1d:90:51:99:b8:41:dc:7f:26:5e:58:
e7:4e:a0:93:86:ff:d7:fa:f5:90:d4:b9:f3:a4:1c:
8a:ac:8a:7b:ec:ba:bb:43:4e:e4:5b:3a:7a:5f:42:
ba:a0:aa:e8:d0:55:68:52:27:4b:04:28:08:c6:de:
61:da:e7:23:cf:5c:0e:e7:51:ed:b5:30:f3:21:e9:
07:29:a7:e7:a7:19:b1:14:0f:dc:91:ad:13:72:80:
05:35:c9:7c:aa:be:73:43:68:4c:47:e0:c4:fd:86:
d1:10:0f:40:ed:41:92:af:28:b2:cf:e1:56:02:c1:
af:9f:74:d3:a1:06:93:e5:7e:b7:cb:83:cd:23:9c:
83:bd:90:d9:53:8d:6b:b1:3d:d6:47:4e:e3:0b:88:
da:7d:71:c0:29:36:4e:d2:3c:21:e1:2d:f4:cc:27:
b9:2a:c1:38:9a:93:88:ab:ca:6b:41:db:b8:77:92:
3c:22:66:1c:37:3b:49:92:06:dc:4d:ef:4c:91:a1:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EF:BC:04:BB:02:9E:DB:10:61:87:B3:AD:2B:78:B1:4C:0B:12:33
X509v3 Authority Key Identifier:
keyid:09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:81:a5:dd:2f:05:d7:36:aa:28:cf:fa:22:b7:d4:74:a8:06:
86:28:f1:11:4b:e8:8b:f9:c8:a4:95:3a:b4:85:86:0c:01:d8:
ac:36:21:92:ab:73:0b:02:4d:e3:f3:9e:4e:55:c8:bd:20:09:
83:0c:30:9a:c9:79:7a:d2:5e:c1:af:6a:b9:d1:67:72:d9:50:
b6:a6:47:cb:2b:cc:3c:d1:20:7d:e2:32:72:5e:ac:12:c0:50:
b2:aa:48:13:70:4d:4b:4f:b9:76:de:d3:ff:86:7b:5a:90:6f:
8c:ab:77:a5:eb:0d:7b:f0:c2:ff:6d:3e:ca:07:c3:ec:84:2d:
e2:0b:98:3b:3d:3e:be:4c:1f:5a:15:ab:35:e9:0f:e7:f1:65:
71:66:08:d0:c0:1c:62:bd:db:60:79:ef:03:c9:11:18:5b:86:
b2:ec:5c:3f:2f:a4:b1:27:8b:88:f3:36:f7:63:e9:80:ea:2f:
87:bd:25:be:b4:f3:ed:48:bf:b2:58:62:5f:dc:bf:1d:d9:e3:
cf:d3:44:12:6c:65:9c:ef:a9:08:a9:6c:9f:29:08:82:25:52:
02:e3:de:26:54:97:58:d5:56:8e:5a:ac:e5:9a:f3:d3:bf:b5:
87:25:7c:9a:cd:64:ff:78:73:04:27:bc:73:ab:c9:8a:a4:22:
d7:66:ed:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:13:55 2026 by rpki-client