Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
File: 7fBEw2PXiOdDNOE24DzH_R5JohY.mft (raw, json)
Hash identifier: jfEIJCDQ5qd4gaCdU6Z7z/CfDnMQgSpuGVotMGWCtW8=
Subject key identifier: AD:DC:10:44:41:56:57:1E:2B:4F:01:46:35:08:58:16:52:44:56:14
Authority key identifier: ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
Certificate issuer: /CN=edf044c363d788e74334e136e03cc7fd1e49a216
Certificate serial: 01A13FA71C66E132E9EB93BE0AD4FE1748E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
Manifest number: 0D1B
Signing time: Thu 15 Oct 2026 13:01:18 +0000
Manifest this update: Thu 15 Oct 2026 13:01:18 +0000
Manifest next update: Fri 16 Oct 2026 13:01:18 +0000
Files and hashes: 1: 7fBEw2PXiOdDNOE24DzH_R5JohY.crl (hash: ZPL5pNU21ZDTcQuFjOsEdLY0On1GGDddFE4wCPlGxqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:1c:66:e1:32:e9:eb:93:be:0a:d4:fe:17:48:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf044c363d788e74334e136e03cc7fd1e49a216
Validity
Not Before: Oct 15 13:01:18 2026 GMT
Not After : Oct 16 13:01:18 2026 GMT
Subject: CN=addc10444156571e2b4f01463508581652445614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:40:36:d9:ad:50:ee:a7:82:5c:e8:41:e6:20:
6d:0a:e9:8e:25:9c:22:f2:98:14:d3:01:d6:c9:18:
a2:de:fa:c1:86:5c:b5:94:38:f7:33:29:f7:37:6a:
cf:6d:4d:37:a7:3e:1e:49:01:46:56:29:28:d7:b9:
89:10:40:9f:2c:61:cb:46:e1:17:ee:60:f0:18:4c:
2b:35:e6:4a:2b:2e:15:dd:69:de:62:f2:0b:33:f2:
df:3e:df:12:72:fb:b2:70:94:f1:aa:e3:16:c6:91:
b3:89:e0:34:e3:dc:f5:93:48:6d:6a:93:6c:ca:a2:
d2:ed:19:5c:8d:0e:62:0e:ea:db:0f:01:39:1d:c5:
f2:e4:32:87:e9:22:0c:4e:d2:26:4a:43:bf:ff:45:
de:d7:87:d0:50:1b:d9:52:2f:17:eb:2a:4b:79:a6:
33:b0:b5:45:45:aa:0d:1c:d7:e1:9c:55:ec:61:c5:
fe:c5:4a:8b:fb:2a:05:a5:f3:3c:12:97:3d:18:9e:
29:4b:76:ec:64:3a:2d:b2:8b:08:44:92:4e:1f:2f:
e0:83:92:03:15:02:81:14:71:8a:a3:64:d3:08:7a:
de:42:8f:a8:58:d5:26:72:65:49:99:af:20:6d:96:
ac:30:cb:10:d2:7a:dc:a3:e2:f5:ef:51:a7:6e:79:
a2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DC:10:44:41:56:57:1E:2B:4F:01:46:35:08:58:16:52:44:56:14
X509v3 Authority Key Identifier:
keyid:ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:88:7d:97:93:cd:7e:81:e0:3b:5e:2b:e0:86:1d:4d:70:e6:
61:5e:c4:02:66:12:9f:46:93:9a:3f:91:45:20:ed:ae:00:54:
58:cf:df:5b:3f:e8:d6:90:2c:e7:2f:6c:45:8b:3b:07:15:3c:
1e:f6:2b:c9:7f:34:af:49:12:c9:37:12:05:fd:9b:ca:dd:a8:
ea:45:76:fa:b8:d1:de:bd:ca:f4:f4:79:09:4b:04:58:99:47:
42:21:c2:df:e9:4a:ca:6a:07:6c:9a:cf:54:6f:d7:8d:a4:da:
09:48:aa:c2:17:ad:4f:43:28:b3:12:0b:5c:3e:a8:92:71:e1:
9a:99:fd:f7:1a:73:0a:76:66:12:36:bf:9f:2e:44:ca:25:2a:
a6:58:03:c3:76:7c:e5:90:6a:20:b9:df:35:9f:b4:b5:90:8a:
6b:64:5e:1f:67:40:96:80:c0:e7:e4:bb:15:f3:09:dd:de:08:
de:39:28:8e:d4:a1:73:e8:6a:29:ef:3c:5a:39:4c:25:b8:60:
2f:01:63:fc:b7:98:d3:42:dd:6d:ff:04:85:e3:15:d6:05:8b:
72:ac:f2:d6:55:f2:5a:43:9c:42:57:cb:71:7c:df:be:fe:49:
0d:0c:67:d3:93:08:91:c9:96:b4:76:3b:3d:d9:d2:c1:37:81:
0b:8b:a8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:26:03 2026 by rpki-client