Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
File: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft (raw, json)
Hash identifier: SQxFYsa2yC67zjXz5fitPgNCiCZ7T/TvRtw5gHA7Kao=
Subject key identifier: C4:36:9B:96:D3:31:6E:1D:67:F6:D2:E1:8D:FE:CB:77:7E:3B:B7:28
Authority key identifier: EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
Certificate issuer: /CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Certificate serial: 01A13DB8AB8770D1767CB42B89FE321DE41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
Manifest number: 1756
Signing time: Thu 15 Oct 2026 04:01:14 +0000
Manifest this update: Thu 15 Oct 2026 04:01:14 +0000
Manifest next update: Fri 16 Oct 2026 04:01:14 +0000
Files and hashes: 1: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl (hash: U5T5pZq7AddEkpVACNOaAKOeJj/b6pavkklEiOZ6xyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:ab:87:70:d1:76:7c:b4:2b:89:fe:32:1d:e4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Validity
Not Before: Oct 15 04:01:14 2026 GMT
Not After : Oct 16 04:01:14 2026 GMT
Subject: CN=c4369b96d3316e1d67f6d2e18dfecb777e3bb728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:e7:5a:82:bd:26:dd:09:a8:b0:d4:08:42:
21:dd:39:2e:b9:19:12:85:1a:5a:af:37:11:94:5c:
f3:01:5b:3a:2b:ab:00:8e:47:7c:c2:d6:0c:c0:e4:
da:84:c1:b6:c6:22:6b:c1:b1:6f:ff:40:6d:ef:5b:
db:6f:04:b2:09:b5:75:1f:80:66:61:24:7a:aa:39:
89:9c:0a:82:84:43:8d:4d:b0:f1:e1:82:f9:0c:c2:
21:9b:1d:3e:3c:3d:bc:e3:fd:c1:e6:bf:ea:16:10:
8e:ae:5b:7c:05:03:10:46:40:a4:e9:f9:aa:c4:de:
71:11:7f:09:78:c8:aa:a6:e7:8e:4f:7b:eb:42:f1:
ba:af:24:e3:48:25:ca:1b:de:b9:77:f9:aa:b7:dd:
9f:32:fc:cc:47:ee:6b:31:89:17:bd:7d:75:f6:d0:
de:ab:e1:5e:c6:ff:bc:42:06:a0:c8:5b:ba:87:8d:
ec:a8:db:6d:1f:bc:d9:37:07:38:8b:ae:c1:2d:7a:
47:73:5b:8b:de:31:de:b8:ac:f6:47:70:1f:c1:03:
c5:b1:cc:2a:f8:81:14:6e:f8:31:42:60:c8:57:b7:
b4:6c:53:24:60:44:a6:24:a5:74:c7:e0:8f:3e:94:
cb:d2:05:2a:03:ec:41:ea:7e:35:9e:47:a4:ee:88:
0f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:36:9B:96:D3:31:6E:1D:67:F6:D2:E1:8D:FE:CB:77:7E:3B:B7:28
X509v3 Authority Key Identifier:
keyid:EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:80:70:15:fb:b3:ee:23:4b:57:7b:de:7a:d7:a8:ac:eb:67:
dd:39:13:05:54:0a:f1:11:d3:ae:5c:f3:c5:a7:1d:2b:0c:95:
a6:dd:ec:30:55:68:6a:46:6f:3d:aa:de:d9:a5:74:c2:3a:3e:
fb:bf:fd:51:13:cc:09:e7:55:4c:c3:cc:0e:89:54:5b:da:15:
75:de:e3:7d:60:bb:87:da:8e:26:cb:d4:aa:b8:21:bd:53:d8:
e6:d9:fb:3c:ef:54:1b:26:54:93:9b:b4:03:54:c3:3b:11:48:
c5:4c:8c:bc:a7:d9:ce:0e:86:c7:ba:ca:71:d9:20:a3:c7:36:
4f:23:46:9c:c7:74:15:88:a0:de:7a:e9:db:44:20:eb:53:ba:
a1:e8:2b:db:5e:89:54:d9:60:ea:2d:79:aa:94:e7:4f:81:f4:
93:88:c6:1d:73:8f:e4:a3:0a:fd:fb:b0:ed:2b:35:46:53:23:
ff:74:5c:58:74:1a:a1:14:66:d1:b8:58:a9:d7:55:f1:68:38:
a9:09:fb:eb:f1:ba:07:c7:99:30:1f:35:01:a8:f9:6d:84:c7:
c8:26:cc:91:69:9b:1c:29:fe:0f:21:24:b1:71:3e:37:9e:d6:
66:82:79:d3:34:3a:37:78:e9:52:90:09:f7:ba:61:ee:98:01:
77:5f:d9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:05 2026 by rpki-client