Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
File: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft (raw, json)
Hash identifier: D68TQ8/gtGNHo0JEXoPdsC/eFpRGvxNO88g5suCydto=
Subject key identifier: A4:1E:2B:61:B9:64:BE:30:38:04:5F:36:01:A4:4D:28:F6:C0:B8:50
Authority key identifier: EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
Certificate issuer: /CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Certificate serial: 019DA3E6321782AD0BDEF84F69D749939A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
Manifest number: 1626
Signing time: Sun 19 Apr 2026 04:01:05 +0000
Manifest this update: Sun 19 Apr 2026 04:01:05 +0000
Manifest next update: Mon 20 Apr 2026 04:01:05 +0000
Files and hashes: 1: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl (hash: 4BsB8k+MbipWZXrafnpXZjX5MurfuFtSAZFfeCooIpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:32:17:82:ad:0b:de:f8:4f:69:d7:49:93:9a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Validity
Not Before: Apr 19 04:01:05 2026 GMT
Not After : Apr 20 04:01:05 2026 GMT
Subject: CN=a41e2b61b964be3038045f3601a44d28f6c0b850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:a4:fc:49:ae:d8:55:b5:7d:5c:a3:1d:0a:
61:43:d6:ef:98:72:3f:d3:23:b9:aa:6b:79:e5:d0:
2c:c6:7c:3e:b6:fb:75:88:40:ec:33:17:38:3e:1d:
16:27:a5:7a:ae:a2:6c:c8:c1:bc:44:df:23:af:fc:
ca:a5:5b:e3:8d:77:f1:dd:c5:71:5c:07:95:69:67:
67:46:93:c3:c6:24:a6:26:fe:cc:a4:51:03:34:ae:
e4:3b:d2:93:8a:09:50:b7:34:59:d1:d3:ba:cc:88:
2d:f0:e6:1d:6a:83:ea:24:84:29:2f:18:83:2a:ec:
b7:f3:f3:a8:b5:ef:91:28:8e:78:de:67:18:54:3e:
f5:73:31:fe:88:65:0e:fb:71:e3:22:ba:29:7e:82:
21:a9:1d:d1:84:5d:01:cd:79:7a:bd:80:7a:ec:87:
57:59:44:37:e4:7a:fd:36:12:78:34:50:c7:a7:99:
40:01:d5:94:49:e3:5f:aa:6d:f9:88:c9:0c:63:d1:
89:b2:cb:5a:e6:37:93:62:3d:2e:b3:c0:36:ea:b5:
6f:36:0f:7f:17:57:ff:e1:08:f6:79:f3:fd:2f:81:
a9:6c:f0:05:43:a2:3a:eb:b1:e9:6e:40:46:85:9a:
41:bb:70:d7:6a:5c:1c:ac:a5:22:2b:20:5b:47:82:
a1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1E:2B:61:B9:64:BE:30:38:04:5F:36:01:A4:4D:28:F6:C0:B8:50
X509v3 Authority Key Identifier:
keyid:EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:51:10:14:17:fb:89:76:4a:75:f7:1a:4f:56:48:bf:5b:5e:
80:30:4d:cb:e4:5a:fd:da:16:fd:79:86:d7:9a:d1:4d:84:ca:
84:ba:cb:de:fe:07:26:25:82:66:f2:d6:96:eb:16:da:59:36:
4e:f2:d4:22:ee:3b:f1:84:1d:ec:e7:6e:66:74:26:90:37:58:
40:9b:53:27:1f:e6:21:93:16:11:61:d5:c1:67:d8:ce:d8:73:
e4:43:5f:98:a4:11:e6:b7:3a:ba:71:16:32:7b:a8:18:cf:63:
60:d7:58:ab:53:5f:a4:29:f6:5b:a2:b2:32:75:48:8a:c7:4e:
06:99:ba:cf:09:66:f2:be:6e:1a:e4:c9:b3:f5:05:ff:ae:5e:
c2:b5:31:b0:dc:e6:c0:82:2c:0f:11:90:ce:66:a1:44:24:3f:
0c:14:9b:ba:73:1d:91:00:79:78:58:b7:24:c4:85:f3:85:b8:
a0:0a:3b:27:11:3d:bd:03:62:c4:d7:00:f3:29:a5:08:b8:fe:
e8:6f:a2:57:71:28:ff:e9:c5:79:c6:63:6f:fe:63:b6:4c:13:
94:0f:24:c9:03:3e:e9:0b:b6:28:ab:01:5d:1f:80:37:39:f6:
47:a9:73:76:30:3b:47:73:a7:7d:80:ea:c6:ea:6e:8e:3a:7a:
4d:a0:f1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:07 2026 by rpki-client