Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft
File: X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft (raw, json)
Hash identifier: RwhEcFPrwNk9uLj1x4vrAdhytlMLakIe9j3Cy0fLwhI=
Subject key identifier: E7:BD:61:08:C5:C2:C7:B7:91:DC:8C:42:06:67:47:DA:5D:CF:66:D1
Authority key identifier: 5F:B7:46:6D:8E:92:B2:1C:7B:1A:A1:35:F3:0E:FE:6E:73:E1:F8:6C
Certificate issuer: /CN=5fb7466d8e92b21c7b1aa135f30efe6e73e1f86c
Certificate serial: 019CAE6C550859E7EE474FFF9DB65CCFAF18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7dGbY6Sshx7GqE18w7-bnPh-Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft
Manifest number: 0E62
Signing time: Mon 02 Mar 2026 12:01:00 +0000
Manifest this update: Mon 02 Mar 2026 12:01:00 +0000
Manifest next update: Tue 03 Mar 2026 12:01:00 +0000
Files and hashes: 1: X7dGbY6Sshx7GqE18w7-bnPh-Gw.crl (hash: 80eSvyn8fcsFNIyBaFoU1ZojVMIdo7VCC3pKh8g4xLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7dGbY6Sshx7GqE18w7-bnPh-Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:55:08:59:e7:ee:47:4f:ff:9d:b6:5c:cf:af:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb7466d8e92b21c7b1aa135f30efe6e73e1f86c
Validity
Not Before: Mar 2 12:01:00 2026 GMT
Not After : Mar 3 12:01:00 2026 GMT
Subject: CN=e7bd6108c5c2c7b791dc8c42066747da5dcf66d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bc:e5:a0:b5:0a:eb:6d:e5:2a:a1:f9:c1:cf:
40:35:c0:44:27:d9:e4:70:79:50:0a:44:ef:37:d5:
08:b2:ef:f3:d5:cf:90:45:ea:06:e0:ea:9e:42:ed:
c2:73:19:e7:b2:f5:fc:56:6d:8b:44:55:ae:41:98:
cc:70:b1:0b:29:97:23:53:87:0b:6c:88:09:a6:c8:
43:01:13:a8:7a:99:fb:84:48:c5:24:f7:48:fb:d2:
f2:0c:03:c0:d3:9d:4b:a4:b3:2e:a4:fd:93:4a:a3:
f5:c4:9b:3a:a4:fa:32:bd:5e:a8:92:97:8b:10:12:
d0:ca:9c:5e:ef:bc:ad:97:c2:77:7f:1f:5c:a2:e1:
d9:ac:6d:e5:e2:d8:10:54:b5:84:57:37:b2:6a:d5:
24:64:ba:f6:c8:9a:4a:88:e5:c6:4a:1e:5f:49:22:
1b:33:c6:81:44:75:f7:1d:71:5e:43:01:0a:d9:4d:
f5:b9:23:88:73:be:bf:dd:4e:b5:84:ce:f1:dc:8e:
66:87:dd:3e:dd:5d:8b:f7:df:85:13:9b:0b:ee:c9:
cc:9b:8c:49:22:43:63:52:c3:93:9e:9e:fa:1c:97:
66:33:78:43:62:44:eb:17:7a:66:3c:06:82:e5:a4:
8c:7f:7c:b8:e0:d1:a6:4c:79:83:9b:41:57:91:1e:
ae:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BD:61:08:C5:C2:C7:B7:91:DC:8C:42:06:67:47:DA:5D:CF:66:D1
X509v3 Authority Key Identifier:
keyid:5F:B7:46:6D:8E:92:B2:1C:7B:1A:A1:35:F3:0E:FE:6E:73:E1:F8:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7dGbY6Sshx7GqE18w7-bnPh-Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e2:f4:32:eb:14:5e:93:de:3d:85:de:53:ae:f8:2a:ca:2a:
9c:99:32:3a:d5:6d:18:b3:ec:f6:46:72:22:7d:fe:52:40:a6:
24:e7:74:35:4a:94:71:2c:53:e0:e8:7f:52:7e:5f:e7:b0:6b:
e5:3a:5d:f1:45:9f:55:33:91:00:3c:10:74:29:6d:12:e1:70:
e3:3b:0f:5b:5a:5b:4f:0f:4c:f8:9b:22:43:e3:91:47:ea:4d:
bd:db:97:91:13:c9:ee:b7:25:b4:ec:81:1f:0c:40:e4:d8:6e:
b4:0b:63:9e:d1:16:bb:38:d1:65:57:5f:bd:0c:5d:78:0b:b0:
62:14:fe:1a:40:0e:df:62:2a:f0:f1:37:71:34:11:83:66:6d:
e6:36:f2:f4:89:09:44:63:97:d5:29:7b:ee:03:65:20:c5:1e:
2f:f1:58:bf:5d:4c:72:b6:59:61:16:56:57:33:18:3d:f2:6f:
35:6f:ee:22:0c:01:6d:3d:43:df:98:b0:6c:ef:8b:61:25:e2:
77:d3:e1:e7:f9:81:db:5d:dd:6b:7a:c3:6c:0c:54:5b:72:f9:
db:38:80:a8:0a:65:24:c0:91:c2:ee:e1:03:4e:a2:3a:b1:ec:
47:cc:de:94:10:69:33:2b:ab:29:43:f3:d0:d0:d5:7b:42:77:
af:d0:1e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:06 2026 by rpki-client