Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
File: 712SU70NJYyVsrNG5IUzyULMI7Q.mft (raw, json)
Hash identifier: nw24WOiOZJryTY4MHW7V1yddBd+q3EjTnufMptJgpZc=
Subject key identifier: E7:35:3C:31:A1:C3:0A:C5:65:D6:7A:42:6A:77:11:61:8C:2C:1A:5E
Authority key identifier: EF:5D:92:53:BD:0D:25:8C:95:B2:B3:46:E4:85:33:C9:42:CC:23:B4
Certificate issuer: /CN=ef5d9253bd0d258c95b2b346e48533c942cc23b4
Certificate serial: 01A1355A01417CFB70BC2D4295E9BC0DCC61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/712SU70NJYyVsrNG5IUzyULMI7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
Manifest number: 01BA
Signing time: Tue 13 Oct 2026 13:00:53 +0000
Manifest this update: Tue 13 Oct 2026 13:00:53 +0000
Manifest next update: Wed 14 Oct 2026 13:00:53 +0000
Files and hashes: 1: 712SU70NJYyVsrNG5IUzyULMI7Q.crl (hash: RJTQB6Dl2N07yuWq3M5S0X+AqoP/qOD3LhPa+VRK1aQ=)
2: gcOeRtdhASpOXftyQUUQHnlSzHY.roa (hash: mRt09ink6QbROuNCA4WL011qJeqnMp6lFsCyZXUphZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/712SU70NJYyVsrNG5IUzyULMI7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:5a:01:41:7c:fb:70:bc:2d:42:95:e9:bc:0d:cc:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5d9253bd0d258c95b2b346e48533c942cc23b4
Validity
Not Before: Oct 13 13:00:53 2026 GMT
Not After : Oct 14 13:00:53 2026 GMT
Subject: CN=e7353c31a1c30ac565d67a426a7711618c2c1a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:25:ff:ab:16:e4:a8:01:98:5b:40:b1:9d:
5d:a0:96:bd:4e:ab:30:05:50:6a:42:9a:9f:75:77:
bd:45:89:b1:24:f5:95:9f:c9:07:a6:d7:d8:09:4e:
2a:c2:fb:76:3d:46:e3:ca:5e:cc:0d:b9:7b:88:d3:
e6:68:b0:a3:21:e1:b7:f2:e4:13:38:22:fd:a0:78:
26:19:4d:94:6d:b6:85:f6:de:42:8a:b7:c8:79:0c:
f3:3e:e3:6d:30:e7:86:cb:78:c3:9e:f6:5b:a8:7e:
b7:dd:80:78:4d:29:08:bf:7f:9b:0e:65:8c:00:3c:
af:4d:5b:2e:60:32:fa:4b:e3:87:30:8f:2c:b4:61:
97:fc:24:e6:22:66:4b:05:8e:6e:08:3b:8b:65:f2:
fa:61:40:ed:5b:eb:3e:d0:82:13:39:10:cc:d3:79:
b6:1b:ac:50:27:e7:cf:ac:21:92:78:87:32:17:80:
55:1a:5e:b5:dd:91:2f:c2:55:32:4b:b7:63:c3:1e:
4c:0d:72:df:b6:7c:20:2c:a3:0d:c5:77:db:b2:26:
d3:62:88:42:51:ab:e1:2b:53:fc:ae:13:b4:dc:fe:
7e:91:53:f9:bb:f7:d4:1e:67:29:d0:e2:30:2c:55:
2f:66:a5:e0:24:47:d7:21:a7:ac:9a:fd:11:69:31:
07:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:35:3C:31:A1:C3:0A:C5:65:D6:7A:42:6A:77:11:61:8C:2C:1A:5E
X509v3 Authority Key Identifier:
keyid:EF:5D:92:53:BD:0D:25:8C:95:B2:B3:46:E4:85:33:C9:42:CC:23:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/712SU70NJYyVsrNG5IUzyULMI7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:99:e6:cf:2a:5f:40:2d:68:6f:45:96:d9:9e:40:d2:ce:ac:
de:fa:07:25:4b:80:50:16:4d:1d:f4:ce:59:8e:72:94:fe:e3:
15:14:d7:26:53:41:42:e4:d2:11:e5:72:46:cb:e4:c2:91:44:
64:a4:a0:87:2e:bd:5f:04:ad:33:43:08:a5:68:4b:cf:35:3b:
9b:4f:ae:25:30:ea:74:b8:12:2e:cc:8d:65:8f:44:6a:92:27:
08:94:45:ec:12:20:01:28:3b:4b:08:30:53:84:1d:a2:03:f1:
4e:ea:27:29:2d:13:2d:c5:74:6f:8f:7a:5c:b2:b6:a7:9d:ec:
68:89:ce:b7:15:7d:06:88:28:5d:3d:63:4c:30:b9:27:3e:4c:
b7:96:4c:9b:97:b7:08:19:10:09:2a:ec:47:5e:50:31:af:43:
ce:ca:fd:31:a5:79:ab:21:a5:f7:99:fa:04:4f:23:8c:a6:13:
fc:ef:43:0a:41:81:12:3d:7c:fa:6d:9f:9d:14:15:04:d6:ca:
0f:40:34:bc:0e:89:4b:fe:06:d1:0d:2b:62:64:a2:69:55:25:
2e:b3:c5:61:23:ff:e2:e4:bc:86:fa:b2:da:1d:33:97:74:2f:
6a:28:c6:fb:76:82:f4:1e:e9:94:15:c5:6f:71:14:14:ff:a4:
2c:74:6f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:44:36 2026 by rpki-client