Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/7RhI8zDQ8z8bucJfq3YzDKx-yGo.mft
File: 7RhI8zDQ8z8bucJfq3YzDKx-yGo.mft (raw, json)
Hash identifier: u3Bq5nzKZxxBbIwihjiRHV12UafgFLnH04ytE1GmAxk=
Subject key identifier: C5:DA:0F:EF:02:9B:4B:20:EE:A2:8C:CB:48:2B:0E:56:13:E2:FC:A4
Authority key identifier: ED:18:48:F3:30:D0:F3:3F:1B:B9:C2:5F:AB:76:33:0C:AC:7E:C8:6A
Certificate issuer: /CN=ed1848f330d0f33f1bb9c25fab76330cac7ec86a
Certificate serial: 01A08A8CABE62B67576B8E7280A17C83F0C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7RhI8zDQ8z8bucJfq3YzDKx-yGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/7RhI8zDQ8z8bucJfq3YzDKx-yGo.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:09 +0000
Manifest this update: Thu 10 Sep 2026 09:01:09 +0000
Manifest next update: Fri 11 Sep 2026 09:01:09 +0000
Files and hashes: 1: 7RhI8zDQ8z8bucJfq3YzDKx-yGo.crl (hash: no5lQlqFsR6Jzs8K1t6K961QVjHaNU/hhnUiB4ZAOM0=)
2: rrVg1yY76H0OrkLgPPxFAVeSQco.roa (hash: 3S/SBO00c/swPpqrVgrHXRtOLs7Ygz5vb2pQy4rK3mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/7RhI8zDQ8z8bucJfq3YzDKx-yGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/7RhI8zDQ8z8bucJfq3YzDKx-yGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7RhI8zDQ8z8bucJfq3YzDKx-yGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:ab:e6:2b:67:57:6b:8e:72:80:a1:7c:83:f0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed1848f330d0f33f1bb9c25fab76330cac7ec86a
Validity
Not Before: Sep 10 09:01:09 2026 GMT
Not After : Sep 11 09:01:09 2026 GMT
Subject: CN=c5da0fef029b4b20eea28ccb482b0e5613e2fca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:54:d8:6a:f8:13:5c:26:e1:8c:59:e7:e8:
72:6a:53:8e:d9:22:b6:5a:82:31:ab:06:78:bc:dc:
fa:3d:b9:f8:9e:4f:fb:7d:65:ff:cd:05:2c:6a:8c:
2b:c6:df:05:ea:f0:b3:39:59:8a:aa:6e:f5:01:31:
81:77:ec:7d:ba:59:34:6b:60:79:05:a4:8d:2c:ac:
18:08:58:a2:f2:b9:88:a0:72:ba:89:59:01:73:6d:
fe:7e:f8:57:7c:11:f4:04:56:19:ec:8a:22:27:13:
08:e0:12:14:1e:a9:83:0e:83:d6:77:43:60:09:8f:
f5:85:1c:1b:ab:62:4f:eb:a4:95:83:4b:84:a4:c7:
34:20:0c:a2:6a:d3:00:4c:8d:60:d6:f0:77:4b:b5:
2c:6d:51:e5:e2:21:e0:19:67:16:49:76:a8:03:48:
0b:c8:e7:4b:71:e1:2b:06:b8:68:a8:19:5f:d0:96:
b9:55:fa:d5:d5:51:53:3f:cc:44:2c:0d:9b:0a:b6:
c9:dd:e6:14:5d:c5:7c:0b:18:41:99:78:86:18:f3:
b9:78:f7:78:c1:ea:5a:44:ed:1d:d7:a8:56:6d:78:
dc:4c:e9:68:9a:1e:70:b3:79:6b:37:19:57:e9:d4:
29:fa:da:3c:fa:08:16:d6:a2:aa:50:af:a4:26:0c:
5d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DA:0F:EF:02:9B:4B:20:EE:A2:8C:CB:48:2B:0E:56:13:E2:FC:A4
X509v3 Authority Key Identifier:
keyid:ED:18:48:F3:30:D0:F3:3F:1B:B9:C2:5F:AB:76:33:0C:AC:7E:C8:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7RhI8zDQ8z8bucJfq3YzDKx-yGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/7RhI8zDQ8z8bucJfq3YzDKx-yGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/7RhI8zDQ8z8bucJfq3YzDKx-yGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:92:a1:29:cd:85:b0:be:40:05:d1:7c:03:fd:1d:c3:b1:b8:
8e:e2:d4:64:fa:3a:4d:10:01:b0:84:1a:02:2a:48:0d:45:be:
56:2d:28:f3:33:e8:d3:28:4d:99:ae:a8:e2:ed:aa:69:0f:bd:
da:20:db:6e:59:83:36:58:d3:21:39:d9:88:92:a4:43:85:6d:
65:3c:cf:a2:34:1b:3f:46:b3:87:92:f9:d5:bc:95:48:3c:f5:
01:c5:f5:c6:e3:9e:43:78:96:18:51:87:b0:a2:9b:f5:c8:17:
c2:1e:33:46:d3:d1:89:ec:eb:88:d9:a4:f4:2c:fa:ad:ca:ae:
6e:9c:a7:c3:93:42:2c:99:4f:6d:dc:fc:cd:9c:19:2e:d9:f2:
78:0d:3a:01:17:cf:49:a2:db:bb:f1:13:e1:1f:1f:cf:d7:04:
dd:4d:fb:f6:da:34:5f:24:48:d7:1a:e9:79:64:20:c2:a7:48:
b1:cf:f6:0c:4b:5f:fa:51:ad:ed:59:74:3b:d4:28:90:2b:00:
eb:b6:cd:84:00:6f:13:82:2b:64:e6:5b:67:56:cf:e9:9e:70:
05:84:d1:81:ab:02:b6:26:ff:d2:99:8c:de:0f:da:30:c1:68:
ec:7f:bc:8d:26:07:e9:d9:8c:42:e5:a1:03:31:57:96:f0:00:
38:59:63:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:18:59 2026 by rpki-client