Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
File: 7W3VjHMPSQxsZTC3ULUY55Okh6U.mft (raw, json)
Hash identifier: mf50AgrL44gn/d7KVrYQR4CD3IvBlweQsKLlekVmZdQ=
Subject key identifier: 9B:89:5D:1F:BD:4B:63:C3:8D:1B:91:AB:B3:19:93:DC:B9:EB:B2:DB
Authority key identifier: ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5
Certificate issuer: /CN=ed6dd58c730f490c6c6530b750b518e793a487a5
Certificate serial: 019D98F470475650C1ECECBF5CDDB8271133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
Manifest number: 0FA6
Signing time: Fri 17 Apr 2026 01:00:49 +0000
Manifest this update: Fri 17 Apr 2026 01:00:49 +0000
Manifest next update: Sat 18 Apr 2026 01:00:49 +0000
Files and hashes: 1: 7W3VjHMPSQxsZTC3ULUY55Okh6U.crl (hash: 7eqCxGxhnxIJj7ssolaWiCxVI9OSQGUXeMykArDekBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:70:47:56:50:c1:ec:ec:bf:5c:dd:b8:27:11:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6dd58c730f490c6c6530b750b518e793a487a5
Validity
Not Before: Apr 17 01:00:49 2026 GMT
Not After : Apr 18 01:00:49 2026 GMT
Subject: CN=9b895d1fbd4b63c38d1b91abb31993dcb9ebb2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:9d:79:64:7e:37:ed:1c:80:fa:6d:66:66:
a5:07:1d:53:f2:9f:f7:40:4d:e9:dd:f9:bd:15:6c:
8f:11:0f:56:f9:7a:cd:e9:61:d3:68:6d:07:35:f5:
48:4e:69:1a:74:83:bc:d2:43:b9:f1:75:e7:ec:86:
f3:a0:c3:c0:32:f0:9a:6b:6e:f6:1b:eb:b8:ee:cc:
8e:41:6e:a9:4d:22:5c:4a:f3:6d:9c:0c:68:03:40:
7b:0d:96:80:79:2d:30:b5:11:bf:43:81:fb:ac:0c:
24:ef:3a:ff:87:30:9e:a7:9f:cb:9a:6c:2c:75:79:
b4:6b:6d:ae:29:38:7c:1f:39:e5:8b:e5:4a:01:8f:
26:42:00:2a:88:e0:c9:f4:ef:6c:14:04:c6:69:33:
7e:f7:5a:fa:3a:e3:13:c0:ef:fe:bd:76:c8:7c:4f:
7b:ff:3e:76:b9:ae:72:0c:6c:4c:11:eb:d2:ad:74:
34:6a:a5:75:41:43:be:2b:64:de:fd:b0:7b:e2:7a:
16:ba:9f:f5:f1:3d:0e:1e:76:95:e6:f7:93:f8:4f:
f7:e9:1c:72:ff:57:70:33:32:e3:6f:4e:c3:cb:aa:
1d:ee:b9:f7:36:3d:a8:1c:7b:d2:78:a2:37:25:8a:
f8:96:85:31:21:8f:0e:29:12:41:5f:ea:f4:e1:d7:
4b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:89:5D:1F:BD:4B:63:C3:8D:1B:91:AB:B3:19:93:DC:B9:EB:B2:DB
X509v3 Authority Key Identifier:
keyid:ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c9:63:e2:d6:de:7e:82:de:2d:eb:e4:8a:bf:3a:d4:c7:4d:
04:ad:8a:08:ff:9b:db:10:35:00:3b:a3:b6:c6:be:f6:76:bc:
a2:1b:fa:97:de:63:7a:43:f0:dc:a4:2e:78:48:15:4a:e2:49:
e0:fe:14:44:25:fa:59:d9:1d:6a:d9:81:3f:ba:b5:be:d7:34:
0b:71:9d:83:9a:98:06:68:d4:05:d3:77:e2:01:00:10:4f:6d:
51:24:d4:75:51:e3:1f:38:e3:3c:08:3e:2b:ba:09:c5:26:45:
ce:49:b1:d0:8c:7a:89:e4:68:8d:b9:28:a5:41:83:36:5f:7f:
95:b0:6e:d6:99:93:87:a3:33:de:b9:da:a9:4f:a6:5d:19:ac:
43:a5:76:68:76:a4:1c:6c:b8:bc:cc:5b:63:87:e1:d2:b1:1c:
83:72:dc:8b:8e:6e:08:cf:18:36:1b:26:2d:dd:19:56:ae:15:
4b:48:c0:6b:3a:10:17:cd:8f:28:89:9e:a9:13:32:1f:6e:1f:
0f:e5:be:b4:0a:92:1a:82:6f:51:72:7a:07:6f:46:bc:16:92:
67:5d:f1:a4:e4:87:14:04:96:c7:af:65:d1:ff:5a:46:91:18:
d6:78:7d:ac:17:82:98:10:66:dd:c8:43:30:49:cc:f3:11:94:
db:5e:28:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:49:55 2026 by rpki-client