Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
File: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft (raw, json)
Hash identifier: 1GC5pWS6ejSxrFkEwT1ldO1rSvtjSmkU3GLqJBmoQiE=
Subject key identifier: 56:8E:53:13:E4:52:FA:A4:A2:24:10:A1:28:8E:4E:D1:45:10:19:7A
Authority key identifier: EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
Certificate issuer: /CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Certificate serial: 01A0C17AF0436A8DE8AD3C05E43816BD7458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
Manifest number: 17C3
Signing time: Mon 21 Sep 2026 01:00:54 +0000
Manifest this update: Mon 21 Sep 2026 01:00:54 +0000
Manifest next update: Tue 22 Sep 2026 01:00:54 +0000
Files and hashes: 1: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl (hash: dgiMSOQp9su2Tmf8LW8uRW5qaGbUo41pAaIoEwDSQ8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7a:f0:43:6a:8d:e8:ad:3c:05:e4:38:16:bd:74:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Validity
Not Before: Sep 21 01:00:54 2026 GMT
Not After : Sep 22 01:00:54 2026 GMT
Subject: CN=568e5313e452faa4a22410a1288e4ed14510197a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:61:84:6f:d7:0b:f9:f2:17:7d:6c:ad:1d:
df:96:cb:e4:31:be:d6:83:3f:c5:45:a3:e5:d8:fa:
7a:58:45:1c:73:2f:0d:e1:5d:b2:b1:72:ee:e6:73:
25:31:10:1f:ee:19:30:02:47:8a:5d:8f:2e:4e:f1:
b8:05:e6:d7:52:65:5e:61:fa:75:00:05:6e:bc:7f:
49:6f:b1:44:88:75:f0:3d:6f:04:84:e1:ab:b3:ea:
64:27:b8:08:e7:df:fc:6d:4e:5d:f2:20:77:1a:b3:
c8:34:80:27:96:51:89:c0:da:a2:c0:0b:d1:c7:18:
f2:aa:3f:31:37:28:8e:70:5a:01:64:6b:45:a7:22:
28:05:d8:c5:ad:52:66:4a:34:d6:17:73:cf:0e:bf:
99:e0:9b:34:c8:17:e2:6b:96:a5:85:4e:eb:96:b7:
8a:01:1b:fd:b7:e5:37:eb:dd:24:32:37:ef:d9:83:
5e:5c:e0:33:7f:64:cb:28:02:48:ae:3f:28:99:8a:
7f:be:9b:1e:a8:69:07:50:d3:6f:ff:29:40:85:9e:
43:68:04:f0:a5:0f:8a:0a:96:07:45:ba:ce:ca:a8:
b3:f7:a9:fc:e0:00:17:35:0e:6f:31:4e:79:79:e2:
4a:e9:43:53:8a:59:ed:55:10:f9:5c:c0:f3:94:b0:
01:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8E:53:13:E4:52:FA:A4:A2:24:10:A1:28:8E:4E:D1:45:10:19:7A
X509v3 Authority Key Identifier:
keyid:EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2e:7e:a9:6e:db:5c:a4:a0:cd:4f:c5:a1:90:ae:bc:0c:86:
b6:b5:41:41:d6:2a:a8:4c:a5:65:80:76:5c:63:e8:67:aa:3f:
91:5e:6b:46:db:8b:a6:29:08:fa:77:83:c3:22:84:24:8d:87:
39:e4:27:3f:3c:fe:ed:5d:7a:1e:4a:68:b3:03:d5:69:aa:bc:
4a:d4:ca:81:84:53:34:8d:31:12:3f:61:d7:32:48:48:f0:a2:
5d:58:3e:19:0d:6a:49:35:8b:34:6a:5b:99:3f:6e:5c:40:33:
e4:18:7c:c6:d9:39:b7:d0:7a:f7:40:4c:8c:ac:6b:ef:da:e0:
79:cb:ed:e7:96:79:1d:64:c5:ca:07:dc:a6:1d:4c:ff:19:c4:
1f:20:f1:f1:ff:bb:39:e9:98:4d:8e:9a:be:90:31:71:16:a3:
ec:28:e8:85:19:31:05:87:c5:91:9c:c2:cb:23:58:7e:4c:ea:
89:29:53:d0:00:5c:4c:80:c3:5a:34:e8:19:e9:b1:97:9d:6e:
b8:f0:cf:47:e4:b2:c6:0a:ed:e2:f4:6c:a5:e4:47:b8:05:cf:
13:b1:11:79:cf:d2:b6:00:91:07:d3:71:e1:bc:70:c0:db:91:
1f:49:b5:ac:67:d6:8f:73:1e:61:b0:12:a1:0b:b7:e5:85:7f:
92:2c:d0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:20:17 2026 by rpki-client