Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
File: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft (raw, json)
Hash identifier: nLSZBH/WwojcqimNtYXx7WpVGWwVp0DFfKd56+0oGXs=
Subject key identifier: 89:91:23:B1:F0:F0:EB:6A:36:4E:1C:AA:1F:6D:03:C5:53:2B:7D:C6
Authority key identifier: EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
Certificate issuer: /CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Certificate serial: 019FA906C569D90C8594F87D583EC1D7BB83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
Manifest number: 10B2
Signing time: Tue 28 Jul 2026 14:00:20 +0000
Manifest this update: Tue 28 Jul 2026 14:00:20 +0000
Manifest next update: Wed 29 Jul 2026 14:00:20 +0000
Files and hashes: 1: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl (hash: y2kR7oKzX62/VfkT37jpKWy/7Fa2/cxFLesA9KKlde0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:c5:69:d9:0c:85:94:f8:7d:58:3e:c1:d7:bb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Validity
Not Before: Jul 28 14:00:20 2026 GMT
Not After : Jul 29 14:00:20 2026 GMT
Subject: CN=899123b1f0f0eb6a364e1caa1f6d03c5532b7dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:a5:27:7d:3b:3d:a4:25:55:78:4b:8d:6c:
8d:49:1b:e0:ee:6f:a3:8a:9f:93:1d:1e:0e:bc:75:
a7:9a:cb:ad:a5:54:9b:f3:ef:4e:65:36:a5:5b:1b:
13:2d:2e:3b:c5:a0:84:f9:8e:91:c1:f1:38:77:49:
4e:79:8d:a0:82:19:b5:be:4c:08:2d:c4:4d:da:1e:
1c:24:1d:d2:69:cc:ff:da:b9:d6:c1:26:00:2d:f1:
ac:53:9d:06:15:12:a0:78:dd:30:3a:da:8f:9d:5e:
2c:5c:1f:ae:d8:e4:56:b5:9b:ab:c8:b5:93:6f:10:
bd:9f:a7:28:85:01:8d:d3:e6:39:85:ba:36:af:18:
9f:7c:d2:0f:0e:2f:e0:f2:17:ff:f1:5c:e5:a0:dc:
43:ae:3d:37:ea:d2:ce:4b:fc:2b:bc:9a:bd:fc:11:
31:dd:19:75:8c:60:31:9e:48:08:8c:ff:90:39:38:
6a:61:45:f7:d8:d9:1a:df:4a:c8:27:b8:55:e3:9b:
9a:63:e8:88:7b:c0:0d:a4:79:2e:03:76:93:e4:96:
08:ca:bb:db:e7:63:15:a7:ee:94:95:4c:d4:68:1a:
da:b2:ed:92:a4:78:0e:29:b6:ad:99:07:07:66:40:
85:c4:28:71:df:22:1d:0f:2f:38:d4:f7:ae:34:3a:
50:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:91:23:B1:F0:F0:EB:6A:36:4E:1C:AA:1F:6D:03:C5:53:2B:7D:C6
X509v3 Authority Key Identifier:
keyid:EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8d:d0:fa:ac:65:2d:7e:05:37:e5:5e:99:49:a9:37:26:4f:
72:25:7d:d4:67:9b:1a:85:7a:d1:36:cd:a9:1a:90:13:80:b7:
df:91:d1:da:6d:d1:16:16:12:ae:f0:0b:6c:7f:65:71:b8:96:
e2:61:9b:08:d9:c1:77:98:80:26:93:19:7b:c0:65:e2:02:75:
90:d6:bb:62:bf:a3:19:9e:8d:2b:d3:65:67:64:71:29:ca:29:
9c:d1:06:c2:00:c8:0c:4d:42:32:be:1d:bc:78:2c:a5:41:bc:
dc:ad:f6:a5:dd:19:e5:a8:29:05:71:6e:8c:7e:81:20:a3:e2:
69:01:04:be:c0:af:f0:3d:cb:e7:b9:41:de:f6:62:9c:e8:21:
2b:60:c6:3d:d9:d4:c8:1f:16:d5:54:65:c4:81:8d:8b:52:75:
af:f4:cf:5b:43:a7:3e:bb:a4:d6:96:13:1a:68:c1:0c:39:de:
1a:d0:6a:75:6d:99:f2:7a:af:51:00:50:6d:d3:be:be:da:88:
06:30:d0:43:20:60:a1:c0:d1:d5:02:3a:e0:aa:22:42:58:ea:
f7:46:5e:23:87:80:cd:a6:2d:6b:28:28:8b:ea:94:0d:e6:ff:
fb:62:b3:7c:ff:12:66:7c:b1:fa:9c:ae:0e:9d:1e:f5:d7:6b:
1b:d3:fb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:33 2026 by rpki-client