Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier: /1pRMIT2hWIj4vY+GimlZoY36noTGH0ITAMYYf5oi/4=
Subject key identifier: 13:87:54:1E:09:15:D5:8A:DB:E8:57:A0:7C:59:0D:25:8F:3D:D0:9D
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer: /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial: 01A138C995EC7507F25DAD2DA7FD9578105B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number: 18E3
Signing time: Wed 14 Oct 2026 05:01:37 +0000
Manifest this update: Wed 14 Oct 2026 05:01:37 +0000
Manifest next update: Thu 15 Oct 2026 05:01:37 +0000
Files and hashes: 1: 6XsZO_TltMpWaIXpEJ9j4Ijt3Wo.roa (hash: AmndDW7NkmhQPmIE+LZ+wdkjraSPxi3//yw9gxzh3WQ=)
2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: BHgkeRnYUmXjF7PdR1vS3HgohOsrazp+uHGrDyZp24k=)
3: qS1FhvHNjTct9kkj2vIxWEw1yv8.roa (hash: WpowF4fjiVOFY59c2MXRRHLypjY6PRS8W4ndaISZRLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:c9:95:ec:75:07:f2:5d:ad:2d:a7:fd:95:78:10:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Validity
Not Before: Oct 14 05:01:37 2026 GMT
Not After : Oct 15 05:01:37 2026 GMT
Subject: CN=1387541e0915d58adbe857a07c590d258f3dd09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9f:d4:01:19:9f:f3:89:30:5c:5d:fe:3e:48:
bb:4a:53:8d:8f:59:58:48:32:05:26:1b:59:fa:15:
49:88:94:59:cd:c9:69:01:29:86:19:68:65:f9:ca:
a0:bb:39:1d:50:a4:86:11:19:06:66:f2:84:e1:16:
db:a4:6e:48:5a:3f:da:e9:06:2e:34:c4:b6:a5:a0:
5b:b4:cb:b5:17:91:1a:51:55:43:62:1d:5c:80:55:
23:3e:32:8f:99:ef:75:34:db:a6:14:14:59:0a:df:
36:a9:51:89:17:6e:d2:d9:4f:1e:fd:28:44:74:96:
58:38:8f:09:d5:04:07:f0:63:9a:5d:98:27:90:fa:
fe:48:18:75:12:2e:31:d2:02:71:3a:d3:70:6d:ce:
3d:3c:4a:0d:e9:22:39:c3:ed:bc:d0:f0:f9:d5:32:
6f:5d:29:94:33:09:35:21:dc:c0:15:18:21:9b:52:
82:9f:59:3e:8d:60:7f:ce:ce:13:cb:2c:bb:30:84:
b1:f5:2d:d9:4f:20:51:71:30:c1:36:08:84:95:3a:
4d:0c:05:e5:29:bd:bc:71:b8:3c:b5:d9:14:92:60:
24:b7:c0:6f:85:20:b4:6b:c1:c7:11:e0:dc:03:1b:
e6:fb:39:3a:df:b1:e2:af:09:5a:1a:da:5c:86:ee:
d2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:87:54:1E:09:15:D5:8A:DB:E8:57:A0:7C:59:0D:25:8F:3D:D0:9D
X509v3 Authority Key Identifier:
keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a7:36:7e:a3:b9:e1:5a:03:0b:02:f5:6d:05:75:8f:5a:23:
87:b8:58:c3:2b:85:03:1e:ec:d9:ca:39:43:5c:4c:4f:8e:b3:
79:cf:69:0c:bf:c6:29:62:b9:c6:fd:d5:d7:58:77:41:25:d5:
a0:0c:9b:c2:43:b9:58:5e:c9:b4:76:0f:02:8b:fd:e9:d5:ff:
2f:0a:5a:06:81:dd:7f:e9:80:6a:50:56:9e:9e:47:4a:93:15:
e6:8e:af:f8:84:70:32:cc:9d:b8:83:0c:b0:4c:e3:21:a6:b7:
56:59:9b:3b:1d:f0:25:4c:aa:fa:7f:10:c4:98:0b:9f:35:24:
51:11:49:00:1f:6c:86:64:f1:1d:1c:21:79:d1:d5:ce:57:05:
3d:b5:d3:22:49:a5:56:93:a8:c3:f0:ea:af:0e:b0:36:b1:49:
f4:b3:a9:3f:8c:d6:68:d9:02:c1:f1:44:e1:e7:9d:20:d5:b8:
93:6a:10:57:c0:59:f0:5b:07:ca:8f:0e:b0:d5:22:19:96:85:
d5:c3:f5:07:19:f8:58:12:ba:df:81:23:e8:8d:ff:ef:83:ea:
28:5f:b4:35:cf:f9:1a:18:11:6e:ba:e5:39:ec:bf:c5:cf:55:
76:39:c1:66:6a:45:46:c5:cf:5e:7f:17:20:4a:2a:35:50:eb:
89:02:2d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:04:41 2026 by rpki-client