Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
File: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft (raw, json)
Hash identifier: 7+NmKnbbbWEKd8W78sWoY4BZUN8GG+/EDEBQbimlO9g=
Subject key identifier: 0B:85:93:49:DC:FA:40:B4:AE:F8:08:99:9A:1A:22:4A:BD:72:50:AF
Authority key identifier: EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
Certificate issuer: /CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Certificate serial: 01A00101A9B41B7DF24DCF12973CA3366735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
Manifest number: 16B2
Signing time: Fri 14 Aug 2026 16:01:21 +0000
Manifest this update: Fri 14 Aug 2026 16:01:21 +0000
Manifest next update: Sat 15 Aug 2026 16:01:21 +0000
Files and hashes: 1: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl (hash: jpAaXiB9155tL3+CL8h9bdL6fzUR6b0lP6rq2uKQMsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:a9:b4:1b:7d:f2:4d:cf:12:97:3c:a3:36:67:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Validity
Not Before: Aug 14 16:01:21 2026 GMT
Not After : Aug 15 16:01:21 2026 GMT
Subject: CN=0b859349dcfa40b4aef808999a1a224abd7250af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:ea:33:e2:02:05:6b:df:d1:eb:27:b0:a3:
f8:05:cf:54:51:69:20:8d:8a:aa:bd:da:67:17:9a:
0a:2e:9c:f6:a4:91:67:8d:f0:e7:8b:ae:cb:10:d1:
4c:6b:cf:f6:f0:9b:de:c8:42:a9:67:2f:18:d3:10:
d7:f5:03:dd:58:02:ff:e5:6e:77:69:ad:44:6d:e6:
18:e4:0d:91:88:02:b9:ea:39:f6:12:ef:b6:86:e3:
70:85:4e:2f:3b:57:9c:6c:93:ed:34:72:9d:cf:98:
91:a7:d7:04:d0:d9:50:7d:67:23:b0:2d:9f:54:61:
ac:1b:12:0e:b4:2f:f8:b6:b3:cf:5a:a9:aa:ce:80:
66:d3:cb:f1:d4:e6:0b:1a:bc:d4:a3:2e:00:29:27:
a7:3e:df:9d:bb:c6:88:e7:17:9e:9e:d1:44:54:e9:
57:36:ff:f0:50:ed:9b:7b:a3:b8:0e:75:bd:43:f8:
1f:bf:12:d1:75:31:e1:87:9c:66:3e:e5:03:17:72:
61:7b:9c:43:e5:fe:8b:14:df:d6:73:10:dd:35:1b:
90:da:23:43:a1:68:b8:f5:e8:77:87:f0:7f:3a:a1:
c4:56:4d:18:94:e4:63:e9:ca:43:27:e9:94:20:63:
25:f8:85:58:7e:ac:e7:15:11:cd:03:07:b3:01:41:
2f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:85:93:49:DC:FA:40:B4:AE:F8:08:99:9A:1A:22:4A:BD:72:50:AF
X509v3 Authority Key Identifier:
keyid:EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a3:e0:ca:64:8e:3f:69:3f:ec:97:5e:18:3c:ff:0b:53:75:
d2:07:51:8b:24:39:ef:c5:d0:1c:82:01:18:d9:92:5a:9d:90:
e8:e1:c4:8c:0d:6c:98:a0:90:b7:90:6f:1a:f8:7e:03:6c:d7:
7b:80:f2:50:f1:59:8b:38:ca:f8:ce:1a:d4:d0:f0:af:09:f8:
8f:de:7e:f6:cf:31:be:9a:49:cf:cc:90:d0:20:ff:ef:19:2f:
0e:8c:d7:8e:27:67:b2:df:aa:92:09:18:99:7b:a4:73:3a:b2:
2b:74:51:b2:36:af:24:cb:c7:8e:a8:f1:d6:3d:ba:f2:2c:96:
91:e6:6f:df:cc:93:d4:5d:9a:2a:68:14:4b:41:0b:e2:98:b4:
0e:91:48:24:78:4a:46:9d:f7:82:fe:c5:2c:8e:e9:a8:4f:ce:
4f:f3:57:e0:4d:93:c7:92:68:48:35:51:2f:af:c3:c0:a8:cd:
3a:71:ed:b7:f9:22:58:cd:ed:19:9e:7a:11:83:ab:ca:33:0e:
9a:69:9e:ef:1e:52:4e:c7:fb:2f:5e:55:f6:e8:91:0f:9b:03:
2b:c5:2b:61:bf:f0:40:f3:43:01:01:2d:1c:88:d5:f6:45:c6:
37:bd:68:bd:11:33:8a:3b:ae:98:d1:0b:ca:95:5e:9c:5f:c9:
eb:bd:2b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:27:52 2026 by rpki-client