
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
File: 7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft (raw, json)
Hash identifier: CGE3Ww4fMYrmmkT8A3JOvItbWLKS+sIsO6dTTTkJQio=
Subject key identifier: 57:B4:41:FD:4A:6C:EB:8A:76:AB:14:37:E7:F9:3C:E7:0D:9B:86:03
Authority key identifier: EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87
Certificate issuer: /CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887
Certificate serial: 01A14872BA6766A03A7C19A36EA8A8A5FDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
Manifest number: 1AAB
Signing time: Sat 17 Oct 2026 06:00:40 +0000
Manifest this update: Sat 17 Oct 2026 06:00:40 +0000
Manifest next update: Sun 18 Oct 2026 06:00:40 +0000
Files and hashes: 1: 7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl (hash: 5fZZI2+DSomhPgQlVY6e037abfXwmwnk1kut2AXgIUE=)
2: LBTtiJAp5O6Ow7kEVp8kVmTM7Gw.roa (hash: N4Dq+gbQXVdAatGtvXXu2yj7TOMEElBVnNjMgumVWCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:72:ba:67:66:a0:3a:7c:19:a3:6e:a8:a8:a5:fd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887
Validity
Not Before: Oct 17 06:00:40 2026 GMT
Not After : Oct 18 06:00:40 2026 GMT
Subject: CN=57b441fd4a6ceb8a76ab1437e7f93ce70d9b8603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:1c:91:9e:6d:96:39:36:ca:fc:ee:ab:ed:
f5:f0:f1:81:9e:ae:0a:73:5b:24:2e:93:b6:8e:e6:
11:fc:7d:9a:ed:81:8a:1a:b9:3d:5e:d5:71:6c:24:
1a:4f:37:fe:c6:a2:d8:13:c8:6f:6d:ef:22:0d:12:
f0:a0:56:e9:c9:42:0c:3f:5c:e3:94:c9:3a:a3:5f:
a2:7f:9e:07:82:55:a5:96:dc:8e:95:aa:3f:62:e7:
e9:7f:7e:00:fd:ae:da:48:05:68:b7:45:73:04:e4:
d4:33:62:5a:34:42:74:8d:42:23:bf:0b:81:8d:b6:
e5:07:b9:ca:c5:0f:7b:02:03:75:06:92:06:9a:71:
b3:f0:54:c6:66:a1:f1:f5:16:2d:de:55:09:91:e5:
0c:1f:ba:cd:e3:59:f2:19:e2:f7:a2:6b:aa:a9:89:
9d:b2:66:1b:8a:68:e2:a3:1d:cb:5d:5f:c2:05:dc:
9c:44:d1:fa:76:20:88:d0:ad:17:d9:d8:eb:f9:97:
7f:ce:22:5b:9a:88:f7:c9:1f:b6:97:f9:05:b4:03:
36:74:e2:57:4a:22:20:e7:4e:45:32:c1:6a:d4:c9:
40:6b:5e:0e:44:0d:05:63:cd:89:8f:a7:d1:9f:99:
d8:e5:ab:fb:df:18:51:a1:fb:36:8e:41:f5:37:df:
13:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B4:41:FD:4A:6C:EB:8A:76:AB:14:37:E7:F9:3C:E7:0D:9B:86:03
X509v3 Authority Key Identifier:
keyid:EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:95:e8:cc:80:0c:a2:07:eb:a7:53:aa:c5:d2:77:a5:34:55:
25:ae:28:4e:30:16:79:8d:1a:30:f6:20:55:b0:62:bb:8a:33:
6c:98:d6:58:9e:a2:29:1f:84:93:02:a8:52:a6:d1:f6:db:5f:
93:d1:52:2d:c2:a1:e0:17:b2:65:21:21:8b:77:a6:06:cc:1c:
f9:c6:d1:20:4d:a4:2c:db:65:9a:91:68:51:35:47:24:6f:c4:
21:b1:ef:f9:dc:f2:02:ff:42:6d:c4:f0:b7:d4:d5:8a:37:32:
3e:0c:71:e6:8f:6b:c9:ab:10:ea:0c:72:cc:e4:5e:65:6e:cf:
a5:b3:db:ca:81:8e:ea:43:1f:66:ee:00:e2:84:39:78:93:c5:
2d:02:92:32:3a:93:1e:7b:2e:39:6e:be:05:f7:83:f5:63:ea:
d3:6e:d3:4f:ea:0a:91:e3:18:e7:d2:c4:94:66:76:fd:13:ca:
f0:af:0c:e8:f5:6d:c7:1b:3e:c1:5f:c3:4e:91:95:32:4f:bc:
9d:82:68:04:f5:e0:22:12:cf:6a:55:a0:72:06:aa:7c:14:02:
d7:fe:65:41:3d:24:c4:85:ae:d3:da:85:f4:d5:dc:8c:ff:ac:
e2:50:ae:5a:16:ca:c7:6c:a6:82:29:c8:f9:e6:16:b3:f7:91:
2c:4d:70:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 11:21:27 2026 by rpki-client