Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
File: fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft (raw, json)
Hash identifier: NHpgXk6pMFy00Mxa7rfoF0lrHQowfIJX/LKg0B+ZIJk=
Subject key identifier: 78:76:AA:69:81:12:9F:5C:9E:59:F7:07:1A:64:DB:2C:E9:3F:DC:59
Authority key identifier: 7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7
Certificate issuer: /CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
Certificate serial: 01A181BE8CE91F1AE9D6052E53FC46494507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
Manifest number: 11C4
Signing time: Wed 28 Oct 2026 09:01:51 +0000
Manifest this update: Wed 28 Oct 2026 09:01:51 +0000
Manifest next update: Thu 29 Oct 2026 09:01:51 +0000
Files and hashes: 1: fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl (hash: EY+iVHVcZwhqvkFe8R9DEw7gxmE6H/WniLCk1XRfcHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:8c:e9:1f:1a:e9:d6:05:2e:53:fc:46:49:45:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
Validity
Not Before: Oct 28 09:01:51 2026 GMT
Not After : Oct 29 09:01:51 2026 GMT
Subject: CN=7876aa6981129f5c9e59f7071a64db2ce93fdc59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0f:65:dc:c7:72:3a:8c:49:6e:ae:f9:69:fa:
c5:d5:0d:88:b8:88:5d:98:3f:2d:8f:d4:e0:dc:62:
07:80:46:3b:17:26:78:7f:6d:ed:3d:de:8e:49:ae:
75:85:d1:c8:79:cb:72:50:bc:b4:bb:0a:d4:36:08:
05:eb:74:50:fa:13:d0:f2:86:ca:63:6d:66:26:a9:
31:6b:85:ce:42:ac:91:a7:33:a6:ef:9c:87:20:eb:
fa:c4:74:fa:6a:23:e3:fb:74:f1:5e:42:68:f9:dc:
5c:d7:57:4a:38:e6:bc:34:4a:bb:f8:3d:0e:2c:9a:
5d:82:97:d5:b1:6d:a4:50:e1:51:f7:ba:e8:a7:48:
84:36:72:d5:98:5c:fe:15:75:82:a5:b8:16:bd:dd:
dd:2f:80:32:9b:2d:a1:4d:62:23:c0:f2:0c:fd:45:
a9:77:17:cf:78:31:24:0b:7a:8a:24:cf:4f:10:c7:
cf:a7:04:eb:e5:6e:90:df:eb:94:48:db:63:46:9a:
77:4f:65:27:75:f9:4f:60:8b:d1:75:f9:39:e6:05:
a3:42:11:15:ea:c0:3c:db:7a:c4:f6:46:e8:be:53:
a2:53:ca:dd:c6:e6:eb:23:6d:5c:bb:82:ff:d5:fb:
fb:fd:1d:40:66:69:81:be:d5:39:0f:bc:5c:33:ff:
fe:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:76:AA:69:81:12:9F:5C:9E:59:F7:07:1A:64:DB:2C:E9:3F:DC:59
X509v3 Authority Key Identifier:
keyid:7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:37:ed:fa:f9:39:d4:55:22:25:f6:5a:4a:69:a3:e7:23:ce:
4a:d9:8e:e2:18:2a:ef:20:fc:85:12:9c:3e:24:dc:ae:eb:44:
93:81:7c:37:b8:1e:81:46:59:c3:ef:00:55:a7:10:da:d0:7d:
6d:85:16:3a:9e:52:d0:3d:ad:bf:cb:56:6a:f9:4f:cb:5d:76:
7e:48:42:cf:29:14:77:78:dc:cb:ee:55:c9:ba:4c:d8:fe:00:
20:df:db:83:84:29:f4:c9:ae:a4:25:c7:c7:2b:29:c3:19:c0:
c2:00:19:fa:08:f7:45:15:70:67:f9:8b:3d:e4:14:57:0e:09:
c4:74:4d:04:7f:ea:f8:da:8d:ab:20:44:5f:b2:77:89:27:55:
ae:91:4f:7c:24:a6:80:05:49:0c:0d:fe:bf:d1:c1:2c:01:36:
62:53:73:ba:56:e0:3e:92:29:10:6d:c6:54:97:1e:ea:55:34:
c1:b9:a9:14:0f:a7:cc:d2:6d:dd:12:b0:b4:dd:2b:05:b0:3d:
bd:36:56:c9:1a:30:55:a3:76:9e:52:0f:18:1f:22:f4:bb:8d:
e7:2b:54:49:53:97:04:7a:46:74:ad:2e:4e:4d:da:1e:6a:1d:
b6:d7:52:f7:45:65:3d:a3:dc:46:a9:83:bf:dd:a2:aa:81:1a:
81:8b:03:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:34:22 2026 by rpki-client