Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
File: 7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json)
Hash identifier: 4bXJjYV3NXZ3ZiSbnKlSm9pYH5aNwN7qGFKqtdAiGns=
Subject key identifier: 7C:84:05:B3:85:20:9D:EF:FC:1B:CC:C9:C0:57:1F:F2:3F:78:B8:86
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Certificate issuer: /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial: 01A13D81741B5602658213F82B8891C7FA70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 03:00:56 +0000
Manifest this update: Thu 15 Oct 2026 03:00:56 +0000
Manifest next update: Fri 16 Oct 2026 03:00:56 +0000
Files and hashes: 1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: zyRX39INCihitgQ8oIDKfkAcs7n3RZkhLdZ0ElzP/Vk=)
2: DLJ6Lc26hou-gghVAiRPeC5X_w0.roa (hash: 0ehkmbQVXLiYPEC/LI/+SW3yDQBg8UXsIn3OJpfQk0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:74:1b:56:02:65:82:13:f8:2b:88:91:c7:fa:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
Validity
Not Before: Oct 15 03:00:56 2026 GMT
Not After : Oct 16 03:00:56 2026 GMT
Subject: CN=7c8405b385209deffc1bccc9c0571ff23f78b886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:34:51:d1:50:f0:9b:a9:45:7a:32:d1:e5:fb:
e9:97:be:56:9d:a7:ab:cd:50:90:4b:3d:f0:43:c9:
0c:c1:54:4a:fb:db:ba:b4:3e:10:a1:7c:d8:49:ae:
b7:63:9a:8b:2e:f5:8f:39:e4:bc:6f:ff:1c:30:9e:
a3:a9:b8:e6:54:c1:73:7d:30:51:f0:04:a3:d6:07:
c1:70:ea:64:9c:aa:a2:dd:d7:1c:c1:6b:62:d4:27:
05:b7:ca:a8:80:71:0e:84:96:b6:98:e5:9c:53:48:
bd:cc:be:ca:5d:b3:b5:b3:53:15:93:f2:f2:70:da:
78:12:f3:96:b8:4b:2f:cf:15:38:65:83:0d:a4:e6:
4d:d1:a5:00:76:ed:dd:1f:5c:3c:b0:1e:c4:cc:69:
79:4d:e0:0f:f3:40:36:6c:63:5b:fa:54:40:8a:ad:
73:05:eb:3b:92:26:5a:0c:2d:41:2f:fc:fc:16:5f:
73:ae:f0:ad:99:e3:9b:7b:22:00:ce:a8:a8:ac:37:
26:a0:2a:84:53:39:fe:6d:f1:95:98:89:4e:a6:fb:
82:1d:32:a2:6f:4b:5b:17:d6:40:32:6f:d6:78:e1:
54:1e:1c:a3:b0:df:31:6b:db:b9:93:1c:16:db:f2:
29:57:f1:ad:77:9a:c4:37:b0:05:a3:a9:10:bb:3b:
e7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:84:05:B3:85:20:9D:EF:FC:1B:CC:C9:C0:57:1F:F2:3F:78:B8:86
X509v3 Authority Key Identifier:
keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:65:29:7a:df:01:b0:a2:4b:f1:da:b9:2d:cd:e3:bd:c8:b5:
1f:d6:c3:b9:a0:2e:e3:b1:94:d5:e7:6a:f6:20:46:6e:c2:f2:
6c:29:33:f0:a4:bd:12:72:b9:86:ba:27:9d:1f:ed:8e:69:4d:
e6:75:93:c0:35:7a:4c:05:18:fa:ad:24:f0:2b:1a:59:7f:7f:
4c:02:b8:f7:9a:b1:1d:49:b7:f9:1b:3e:c5:0e:32:8b:a6:04:
e2:76:a3:e8:ee:6b:89:bd:ef:f2:f1:1c:26:9e:59:2a:e0:06:
d0:f3:ae:ce:5f:a7:d5:3f:0b:ab:cc:fb:13:bc:2c:00:58:4b:
bd:fb:eb:3a:4e:15:5e:1f:33:04:94:62:c2:1d:47:04:40:a1:
7c:d9:12:90:2b:a7:c0:ad:40:74:9c:37:94:5c:51:5c:65:bd:
7a:f7:fe:a7:0b:79:5d:61:80:69:05:8c:91:fe:f7:64:1d:96:
5e:dc:b8:60:47:20:30:dc:a7:d2:b5:6b:7d:99:06:44:df:2c:
b8:8b:9f:87:7a:da:d3:0c:05:38:46:80:a1:b7:bb:40:cf:da:
82:6f:ec:52:02:ef:6a:94:b7:bf:c3:68:f2:2c:54:b5:7b:a8:
2e:04:44:fc:cc:d7:c4:dd:37:b1:2e:bd:54:61:01:eb:d4:0a:
c6:f3:a7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:39:47 2026 by rpki-client