Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
File: 7FExTgTslnbytgJI4bm9Au8A4Wg.mft (raw, json)
Hash identifier: 40BhRasdBI3fA9hpohr6yvTzrnbvWL5kT2l7xySuG/U=
Subject key identifier: C0:4A:D8:DB:53:99:C5:0C:D5:31:2D:56:5C:BE:40:EB:66:50:80:19
Authority key identifier: EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
Certificate issuer: /CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Certificate serial: 01A1415E7D85D6E0E667552E9709E6A1E06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 21:01:13 +0000
Manifest this update: Thu 15 Oct 2026 21:01:13 +0000
Manifest next update: Fri 16 Oct 2026 21:01:13 +0000
Files and hashes: 1: 7FExTgTslnbytgJI4bm9Au8A4Wg.crl (hash: 9wCNuAys9tz82tS18eWGS+N8zbcKbsw8BiWpnvXf1cg=)
2: 955C7AtZAhtfMCkNkF_V4r29zNs.roa (hash: BzjiJ1i4x8f0IF+YLTcXKg5V1DmhNLRMYe5guMs7CHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:5e:7d:85:d6:e0:e6:67:55:2e:97:09:e6:a1:e0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Validity
Not Before: Oct 15 21:01:13 2026 GMT
Not After : Oct 16 21:01:13 2026 GMT
Subject: CN=c04ad8db5399c50cd5312d565cbe40eb66508019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:3e:13:61:df:06:77:b3:6c:40:d7:f2:e8:
9f:51:0b:55:cd:0a:1c:ab:30:c2:d5:c4:63:4c:a2:
a1:bb:46:28:66:70:96:13:ab:f1:32:ab:87:43:10:
1a:ab:37:c6:e3:2d:c3:48:99:9d:28:53:97:9b:1c:
f8:27:f9:d4:9b:a7:16:8c:16:7e:ae:33:50:d2:62:
bc:8a:4d:ef:53:56:0a:92:75:1e:39:fe:1a:10:c5:
70:3f:af:ee:39:a1:c9:12:25:2c:6b:a7:2a:02:95:
f6:f1:8c:50:de:a5:05:eb:1a:50:0d:b2:7e:19:8d:
3f:db:1c:58:87:57:9d:75:18:0a:ed:91:2e:f9:63:
f7:1c:fe:38:69:d7:a0:7f:7f:be:51:70:37:4d:73:
f3:22:89:eb:dd:e0:6f:45:ba:9a:9d:bc:a2:c6:e9:
36:33:89:99:85:db:3d:32:85:8a:04:8b:a2:4c:58:
ff:ff:2f:91:7d:14:86:9f:97:ec:4a:3e:04:14:0d:
f4:d2:60:61:17:1f:ec:48:c5:7b:be:2b:0e:da:50:
87:64:b4:36:38:09:df:41:bb:9a:03:5f:73:23:51:
94:ae:53:a1:fd:63:5c:18:ee:00:8d:a8:f1:b5:bc:
3e:2a:1d:e5:ec:2f:22:84:df:5e:78:17:80:32:4f:
ea:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4A:D8:DB:53:99:C5:0C:D5:31:2D:56:5C:BE:40:EB:66:50:80:19
X509v3 Authority Key Identifier:
keyid:EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:00:c9:69:af:eb:09:e1:45:a7:a0:9e:3a:8d:8b:ba:5e:a9:
21:bb:1e:76:a4:8d:14:8f:65:0e:12:ef:9c:84:c8:f9:0e:38:
81:9f:c9:66:cc:69:df:68:da:8a:03:ac:ee:56:2f:e5:eb:c2:
4e:dd:02:4c:ae:44:05:c6:2d:52:d0:f5:48:1d:60:90:7d:d0:
7f:97:cc:b0:a7:93:98:9c:59:d3:ba:cc:af:e8:d8:85:61:db:
b8:51:51:c3:1d:a7:63:68:33:2b:27:93:26:29:5b:f9:27:29:
a3:af:a9:51:30:d3:85:58:ad:9c:b3:9e:57:48:18:0f:4a:5c:
69:88:12:60:a8:40:70:3c:6f:47:d3:b3:81:68:b2:e2:de:70:
5f:3f:c4:42:83:59:f5:e5:5b:08:b0:fe:51:a1:fa:6c:3a:c7:
bb:05:81:8d:28:43:5d:06:ff:df:b8:9d:5f:1e:25:b5:a5:67:
12:37:e4:83:bb:26:c6:67:96:77:13:a2:72:81:c7:50:e5:48:
0d:0f:9a:56:e9:00:f7:66:77:dd:84:16:ef:6e:ae:c7:24:b4:
8e:63:9b:8c:7e:69:3e:76:2c:ce:d7:df:94:e7:11:d8:bd:4b:
b7:d7:86:7e:0d:9a:64:63:1b:23:63:91:f5:a8:94:50:8b:ed:
45:d9:d2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:02:53 2026 by rpki-client