Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
File: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json)
Hash identifier: UZBgKxNTyyRqJ7NKQ3L7jWVa3beIIT5/Vk9csgpkzL0=
Subject key identifier: 56:B1:35:41:DE:E6:A9:EB:02:A1:67:3F:10:FF:A2:25:02:22:BB:14
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Certificate issuer: /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial: 01A13E94F3EC39A7F750923D049B105B4E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 08:01:51 +0000
Manifest this update: Thu 15 Oct 2026 08:01:51 +0000
Manifest next update: Fri 16 Oct 2026 08:01:51 +0000
Files and hashes: 1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: 7R/akekHQjbKsYe9rA7hfTvVuneHKZSgh0ous5lVWt8=)
2: jI0W3FXepCGwUQYooUrSqFApgnI.roa (hash: ywNZ9Hr6Ek5jRSdgINiD2gJAFEBiWAjLS61c7FwJ6mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:f3:ec:39:a7:f7:50:92:3d:04:9b:10:5b:4e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Validity
Not Before: Oct 15 08:01:51 2026 GMT
Not After : Oct 16 08:01:51 2026 GMT
Subject: CN=56b13541dee6a9eb02a1673f10ffa2250222bb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:56:a7:07:9e:29:bc:2c:a1:38:28:75:d0:2b:
00:6e:ec:99:aa:67:6f:79:99:d1:a7:93:84:96:2a:
26:9b:cd:8d:13:ac:ed:33:70:b5:aa:72:aa:cc:4e:
d7:44:d7:86:56:5f:6e:bc:53:b3:54:53:a4:9a:57:
ec:32:7f:5f:98:2a:d9:0c:7c:5b:af:b8:00:a8:63:
4c:98:46:c9:11:51:12:c6:df:54:8e:8b:01:12:9d:
db:a8:fe:c0:4b:43:30:1c:16:3a:56:22:ca:d9:99:
6f:eb:98:cc:5f:0f:82:25:67:de:fb:fb:39:4c:e3:
40:87:22:51:a9:fd:8d:d4:f9:cc:62:a2:7d:e4:4e:
82:b1:b5:a0:01:a4:6b:d1:d3:a3:92:43:3c:96:a3:
c8:fe:66:a9:64:e2:c0:4a:6f:d5:3d:f6:15:eb:b2:
83:6a:d8:76:f8:39:08:5d:f0:0c:9b:a9:8e:43:08:
5a:69:82:35:04:21:61:cb:b1:86:54:b7:13:9b:2a:
52:30:af:7a:5d:88:7d:4f:96:ea:53:8c:01:c6:13:
20:3a:ac:28:99:1e:54:94:e4:c5:fd:d4:02:08:80:
16:f4:a3:5e:a0:d7:41:c6:eb:e7:fd:32:b6:f3:ec:
ce:5e:8e:e5:46:e0:d6:e3:0d:00:90:f7:d8:b9:5d:
ff:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B1:35:41:DE:E6:A9:EB:02:A1:67:3F:10:FF:A2:25:02:22:BB:14
X509v3 Authority Key Identifier:
keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e3:44:d8:81:40:f2:88:5e:43:9e:3a:74:2c:43:44:e6:cd:
35:c9:02:c7:ad:29:e0:b2:a8:de:58:bd:17:13:7a:ff:12:a2:
98:4c:50:d6:4f:48:7f:41:ee:ce:70:54:d1:37:46:5f:0e:4f:
90:ad:a4:04:eb:19:1f:c8:38:51:05:5b:d8:81:39:a2:33:47:
ca:00:ce:a6:e3:a1:61:51:b9:de:27:58:58:e9:35:1c:4a:a6:
33:e4:b3:dd:4e:4b:fb:a8:7c:92:9d:a2:3f:32:9d:76:ec:40:
0f:a9:cf:6a:46:55:34:48:59:50:8b:56:d4:57:52:fa:9f:b6:
88:c1:fc:43:40:e3:ce:e6:e1:8b:c5:c3:73:aa:37:65:da:79:
82:4d:b6:85:5d:15:b9:e3:b5:f5:f6:30:79:24:19:7e:b2:48:
2a:bc:68:40:ff:50:77:ff:4f:93:76:31:f0:58:60:10:2d:25:
7f:1a:3a:a5:d9:8f:32:7d:54:c6:6a:af:5b:fe:c5:03:5c:74:
31:37:98:fa:3d:04:0f:d3:2f:da:d3:62:09:7d:13:f9:fa:87:
3a:49:b6:88:27:40:e6:ba:6c:60:3a:e0:ec:79:7a:52:8b:ea:
ba:3f:81:1c:0b:39:b6:02:8d:20:29:19:d9:5c:d4:b6:63:c5:
2d:9b:bd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:06:20 2026 by rpki-client