Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
File: 7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft (raw, json)
Hash identifier: /TshfeY6HiuLDIPgRDPgGzXbOa3cl9pD5EcTHiHY21s=
Subject key identifier: B1:78:B3:7A:6B:D8:35:D7:1B:75:DA:1D:26:F2:45:72:51:B4:AD:45
Authority key identifier: EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA
Certificate issuer: /CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
Certificate serial: 01A00170165819539C29E34635C865335C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
Manifest number: 19FC
Signing time: Fri 14 Aug 2026 18:01:58 +0000
Manifest this update: Fri 14 Aug 2026 18:01:58 +0000
Manifest next update: Sat 15 Aug 2026 18:01:58 +0000
Files and hashes: 1: 7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl (hash: YR/PNx32SGci99ng4JvKgFj58ONNsPELJza4Y7tLfNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:70:16:58:19:53:9c:29:e3:46:35:c8:65:33:5c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
Validity
Not Before: Aug 14 18:01:58 2026 GMT
Not After : Aug 15 18:01:58 2026 GMT
Subject: CN=b178b37a6bd835d71b75da1d26f2457251b4ad45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6b:0e:d2:b0:8d:30:dd:cf:dc:aa:cd:6d:45:
4a:f1:28:d8:97:e0:a1:7b:46:76:0d:8f:bf:25:1d:
1a:ca:f9:8f:7f:c7:b5:7c:d0:50:69:3e:e7:99:4b:
d7:af:ba:47:ff:24:0d:99:e6:28:50:db:26:02:9f:
85:f9:df:e7:49:22:5d:ce:27:13:ae:69:e5:10:e2:
b9:86:63:4b:86:1a:0d:a6:f3:53:61:ac:fe:36:63:
a3:96:8f:ad:04:04:07:24:91:3a:81:28:26:14:ac:
a9:30:0a:ef:b6:56:6e:2a:16:be:69:39:78:58:95:
ae:c3:4a:92:5d:ba:1e:1e:c3:3a:a3:8a:45:be:f5:
3e:66:ed:f6:de:74:e0:8d:e4:31:97:9f:b0:3c:14:
24:87:95:9a:ee:4f:3e:b0:f9:c0:e1:ec:15:da:45:
f0:d5:03:90:f9:32:fe:14:a1:b8:c9:ad:2a:5d:74:
cf:52:1e:00:4d:ba:73:26:a9:db:f6:11:6b:45:08:
01:90:94:b2:a5:5f:ab:95:6e:c1:26:25:23:fb:48:
83:6b:7b:df:8a:c9:80:69:20:5d:9c:84:ad:f9:ff:
2d:91:28:c9:9b:fc:85:a6:b4:2b:3a:2a:f0:c5:3d:
3e:1e:d6:f7:25:bf:bb:66:e5:0b:a8:81:61:62:09:
55:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:78:B3:7A:6B:D8:35:D7:1B:75:DA:1D:26:F2:45:72:51:B4:AD:45
X509v3 Authority Key Identifier:
keyid:EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:a4:24:d3:32:25:af:d3:0a:f7:0e:a2:e3:a7:8e:97:99:56:
00:13:d7:ae:ba:57:93:0d:a1:35:dc:ed:b8:51:b9:18:fb:18:
bc:f6:18:ef:d3:53:30:01:ea:3d:5d:91:85:9e:54:a3:af:be:
0f:33:3a:11:b6:dd:44:7a:f7:b1:b1:e2:db:94:a7:a6:a7:9d:
1b:28:24:a9:86:25:2e:7b:a6:48:01:f8:96:e8:a2:4b:ca:97:
cb:70:b0:f2:77:4e:33:6d:4c:c5:28:28:b2:a7:2e:7f:50:7a:
01:c5:aa:ac:50:c2:e8:c0:0f:57:0d:4e:59:de:e6:dd:24:6b:
c9:eb:a9:47:26:f0:b5:4c:56:84:85:6b:db:ee:a3:c3:96:79:
da:c4:9b:61:2c:70:29:ab:69:b4:80:29:2a:54:8f:34:e8:c5:
1b:b4:0b:c7:e4:dc:b5:71:d7:ee:fe:c1:cd:49:e5:a1:10:28:
98:eb:5e:35:93:7d:f5:f4:a2:f3:6e:ef:d4:4a:6a:a1:94:b1:
86:52:f4:c2:f4:d2:26:3f:21:35:2c:f2:65:ac:bb:12:2c:0f:
e3:57:9c:c0:1a:3c:48:fd:98:2d:21:74:09:79:16:4b:1f:43:
5f:58:b6:37:c2:f6:ae:be:d2:d2:55:20:c5:c5:2b:e4:6f:d9:
6b:23:11:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:55 2026 by rpki-client