
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
File: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft (raw, json)
Hash identifier: DzK/CaQyGygWSQfbgDXQTwu/IAbxvHMYsMtW4HH1Mv4=
Subject key identifier: F4:6A:C9:5E:5E:98:86:D2:1F:6A:B6:F8:0E:76:52:C4:B3:14:1F:E5
Authority key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
Certificate issuer: /CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Certificate serial: 01A13E5CF59AC787EBB0A25C534E0231541D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
Manifest number: 0828
Signing time: Thu 15 Oct 2026 07:00:41 +0000
Manifest this update: Thu 15 Oct 2026 07:00:41 +0000
Manifest next update: Fri 16 Oct 2026 07:00:41 +0000
Files and hashes: 1: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl (hash: At5CtxPRG4/2bpXkeoIYLPW34p8jPeuRw7ZgtC/fMtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:f5:9a:c7:87:eb:b0:a2:5c:53:4e:02:31:54:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Validity
Not Before: Oct 15 07:00:41 2026 GMT
Not After : Oct 16 07:00:41 2026 GMT
Subject: CN=f46ac95e5e9886d21f6ab6f80e7652c4b3141fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:89:ba:c4:e3:08:02:4d:70:db:5f:38:80:
24:06:84:87:e3:7a:71:73:8f:e3:d6:75:a6:36:a7:
0f:bb:26:f4:25:d3:d9:8e:30:cc:eb:e2:6d:09:e2:
f7:a7:79:90:16:2e:77:51:66:e3:bb:8d:8f:ae:d6:
e8:d6:98:9a:f6:45:74:ee:0f:02:4e:60:bd:9b:fc:
8d:11:9e:12:5b:94:1d:8f:c8:db:c4:e6:46:92:cd:
e1:c1:4e:c2:d2:27:4f:5c:80:ac:51:d4:bc:87:fa:
f3:13:56:0b:da:68:f0:41:23:6d:bc:70:e4:ab:87:
6c:24:86:fd:a8:3f:c9:40:cc:d9:06:e2:45:f7:b7:
c6:31:63:ea:c1:dc:20:d5:3a:64:71:23:b1:25:bb:
88:50:e8:7a:16:7b:9b:58:d8:ef:b2:8d:d2:40:91:
b2:52:bc:9c:b9:5e:41:88:09:51:7c:f6:ef:07:a7:
3d:04:e5:18:41:88:95:db:71:1c:f4:fe:04:fb:7a:
8d:95:65:d6:c1:21:b7:cc:68:6c:b5:f1:d6:f3:39:
38:cd:35:57:00:b5:98:5c:eb:4a:a3:19:72:0d:f0:
66:d0:ea:c6:89:d0:8e:06:15:6a:6d:fc:5e:c3:74:
87:d6:9f:64:c8:56:e6:52:ef:96:f0:41:8b:5f:58:
fc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6A:C9:5E:5E:98:86:D2:1F:6A:B6:F8:0E:76:52:C4:B3:14:1F:E5
X509v3 Authority Key Identifier:
keyid:EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:65:bf:c9:60:1e:8c:b0:05:25:65:d7:44:0e:f1:85:70:f8:
c7:a7:ee:db:fe:90:f3:e8:0b:8c:53:25:bc:d6:86:cc:48:5a:
c1:0b:3a:74:90:a3:08:31:8c:14:e3:a3:3e:51:4a:a2:9e:b3:
da:93:f2:ff:38:6e:c0:bc:81:b7:fd:08:9c:e1:f0:ca:96:e6:
66:85:9e:1f:df:8e:df:c6:a6:b8:7b:9a:b7:b6:6f:1e:1f:11:
64:11:f5:9a:a9:09:c6:98:87:db:ac:ed:ef:af:6b:5f:03:7f:
ad:55:39:0a:1e:22:a7:cc:35:17:48:5d:60:a6:8c:b6:fe:37:
f0:47:d5:46:ac:f3:6d:45:91:2e:66:fe:aa:87:2e:d0:57:1c:
32:3e:ca:1e:95:2a:7e:43:52:1f:26:df:e6:20:32:e0:52:da:
c6:66:f5:21:24:ee:12:76:89:10:3c:e2:e8:81:dd:c5:71:03:
38:64:99:07:44:72:99:60:44:39:98:ff:cd:a0:89:d7:35:8e:
e6:ca:0c:e3:76:4a:e9:70:71:a9:f5:2e:38:fb:b5:4a:5c:64:
7e:47:65:4f:24:bc:96:0e:66:b5:2d:4a:0a:e8:a4:e5:46:81:
96:bd:4f:75:3c:d9:f5:23:ad:04:a7:67:f2:01:07:8c:53:b8:
2d:5d:c2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:26:20 2026 by rpki-client