Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
File: 582m42RtyToNLUKV0esJR2xmvKY.mft (raw, json)
Hash identifier: jIHzMUhPaNVcUCtuzzpxtN7GTyQLnbCa9EexIuLE4p8=
Subject key identifier: B5:62:D4:0D:FC:78:0E:4C:4D:CA:8C:AC:E3:27:4C:F7:08:02:73:13
Authority key identifier: E7:CD:A6:E3:64:6D:C9:3A:0D:2D:42:95:D1:EB:09:47:6C:66:BC:A6
Certificate issuer: /CN=e7cda6e3646dc93a0d2d4295d1eb09476c66bca6
Certificate serial: 01A110E02CBD16DEB6F3D70F5C486B665484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/582m42RtyToNLUKV0esJR2xmvKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
Manifest number: 07B4
Signing time: Tue 06 Oct 2026 11:01:29 +0000
Manifest this update: Tue 06 Oct 2026 11:01:29 +0000
Manifest next update: Wed 07 Oct 2026 11:01:29 +0000
Files and hashes: 1: 582m42RtyToNLUKV0esJR2xmvKY.crl (hash: Id4yIVYRI2dmlhtiDlvVb7U5UBXQchciXf6VyWhJin4=)
2: zM4gg4epclePPLRTJtVaIJWeepc.asa (hash: MRTLDlocXHNiWSSlm+nZxDJcnI87lYWJ5A0tSmJ5h6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/582m42RtyToNLUKV0esJR2xmvKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:e0:2c:bd:16:de:b6:f3:d7:0f:5c:48:6b:66:54:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cda6e3646dc93a0d2d4295d1eb09476c66bca6
Validity
Not Before: Oct 6 11:01:29 2026 GMT
Not After : Oct 7 11:01:29 2026 GMT
Subject: CN=b562d40dfc780e4c4dca8cace3274cf708027313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6d:e0:9b:52:48:81:3c:24:62:1d:40:f8:a4:
25:f2:84:68:a6:c8:95:3a:bf:79:5d:97:d1:96:72:
28:4f:30:d6:3d:35:ef:bf:2f:af:b0:1f:14:c6:b4:
d3:a6:cd:eb:95:5c:96:aa:c5:73:00:a0:fa:b5:3c:
46:20:f3:09:e2:90:66:2c:7a:e3:2b:bf:14:12:81:
40:d8:08:92:9c:b4:6a:2d:52:64:4c:71:18:7c:f4:
a0:02:43:34:e3:98:9c:74:c1:2f:e5:4a:d4:84:46:
9d:b6:10:28:05:71:90:84:6f:27:69:39:f6:5a:4e:
63:f1:ac:b8:e8:2b:26:92:98:3f:54:89:76:ae:9f:
da:97:13:89:b5:21:39:b9:c4:2e:cd:89:bc:83:9f:
a9:3f:10:2c:5f:60:a4:6e:57:bb:c1:1f:1f:c9:51:
c6:19:2b:88:a4:62:a4:d8:d3:1b:c2:07:89:83:97:
50:93:3a:cf:3e:f2:b0:8e:b5:bf:2f:69:56:8b:d6:
77:45:97:79:a4:fd:08:7c:da:0e:1d:bc:ef:67:65:
65:b7:1c:96:d5:34:e4:4e:9a:b7:4a:ce:f6:70:9d:
fc:96:b2:1e:34:5a:5c:bf:8c:19:d4:4f:b6:79:30:
90:5a:90:53:89:33:75:64:65:02:e7:82:db:26:35:
1f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:62:D4:0D:FC:78:0E:4C:4D:CA:8C:AC:E3:27:4C:F7:08:02:73:13
X509v3 Authority Key Identifier:
keyid:E7:CD:A6:E3:64:6D:C9:3A:0D:2D:42:95:D1:EB:09:47:6C:66:BC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/582m42RtyToNLUKV0esJR2xmvKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:63:70:6d:b1:aa:79:d2:7d:68:60:3b:8a:e8:bb:41:59:af:
fb:ac:1e:f3:92:62:a0:35:4a:bb:cb:77:e5:a2:9c:07:51:51:
70:bb:79:30:a2:db:8b:8b:91:b5:1c:14:b2:4c:9f:8e:0e:05:
f8:85:93:6b:3f:73:9f:28:17:dc:45:d8:a6:d0:e5:be:11:dd:
c3:a9:b1:17:6f:60:5f:3c:d1:e1:0f:f6:c3:17:dd:de:d2:a8:
24:42:55:d0:c0:18:d4:23:15:fc:14:06:12:bd:5d:9c:35:e3:
fe:eb:d9:d1:54:f5:8e:2c:a8:f3:27:21:af:6d:4e:e3:ab:7c:
94:e5:d6:05:42:f7:82:a1:10:a5:6d:21:c1:07:06:ef:92:c8:
7b:ef:f8:79:97:58:4a:93:f0:fc:78:9d:b0:4d:c3:6f:32:22:
f7:10:aa:0d:37:28:2b:86:fc:2c:35:e5:cf:e2:2b:58:b6:12:
a6:62:70:4b:b4:16:7d:0c:b7:a6:cb:44:13:51:59:74:c0:c7:
07:c5:7b:ab:96:0c:a0:33:cc:8b:e5:29:42:3d:bd:76:97:33:
d0:99:81:c8:43:61:8e:46:32:fa:5b:9a:76:46:6f:51:0d:85:
96:90:48:fc:4d:2e:1f:c7:3b:fc:c8:0c:4e:81:cb:8b:36:43:
3a:ba:24:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:10:52 2026 by rpki-client