Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
File: 7oAELqPLNIc97Q6wZJWU4v8jkIE.mft (raw, json)
Hash identifier: BcZInpy65I6HRnqJWyRoJzKRSoClgT8blrksCczvhec=
Subject key identifier: CE:6C:39:F0:0B:3B:39:2E:92:6E:8C:D1:C8:46:CA:31:18:D8:AA:83
Authority key identifier: EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
Certificate issuer: /CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Certificate serial: 019D98F4DA700911A82A577E5BBA2845F863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
Manifest number: 0CCD
Signing time: Fri 17 Apr 2026 01:01:16 +0000
Manifest this update: Fri 17 Apr 2026 01:01:16 +0000
Manifest next update: Sat 18 Apr 2026 01:01:16 +0000
Files and hashes: 1: 7oAELqPLNIc97Q6wZJWU4v8jkIE.crl (hash: ETEKIySfA01vlE6IYtvg3WDjK6XKxF315zmVjz0as3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:da:70:09:11:a8:2a:57:7e:5b:ba:28:45:f8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Validity
Not Before: Apr 17 01:01:16 2026 GMT
Not After : Apr 18 01:01:16 2026 GMT
Subject: CN=ce6c39f00b3b392e926e8cd1c846ca3118d8aa83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:ba:43:49:71:a8:c2:19:30:cb:fa:93:12:
04:97:99:77:5a:bc:5a:d7:c6:6f:71:d3:fd:12:b1:
5d:5f:3e:c1:4f:f6:49:e0:ee:40:17:d6:e9:b6:ad:
75:5e:80:81:23:99:00:89:de:74:e2:cb:d1:f4:27:
d6:8c:b4:9e:31:53:ad:fd:65:63:bc:1d:97:90:0d:
41:0d:93:50:fe:3f:0c:b7:6a:ba:38:a0:50:23:17:
4c:91:b3:8b:4b:79:7e:44:1d:eb:25:4f:7b:8b:c6:
8c:c8:f1:ec:2a:49:6f:9a:40:ef:c2:cb:b1:c7:54:
7c:54:60:fb:0a:0a:ff:46:d5:0a:8a:11:5f:f9:41:
bb:a7:90:78:0f:9a:17:51:e6:af:8b:7b:cd:d5:6c:
d2:80:49:03:8d:e6:40:a0:3e:82:30:2d:93:51:9f:
0a:27:1e:31:d1:59:42:7c:c7:15:5f:e0:a7:31:d0:
40:3a:95:9a:f5:a8:a9:b4:38:4d:e1:58:b8:aa:d9:
81:f4:31:39:d1:a6:54:bb:f6:15:56:93:9b:be:80:
12:4d:72:70:6e:dc:3a:d9:f5:15:3a:b9:53:99:ce:
bb:af:ca:83:fa:6c:15:39:bb:8e:9d:87:33:c9:8b:
2d:36:cf:3a:ef:19:88:4d:fa:ec:56:e0:3d:49:6f:
b7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6C:39:F0:0B:3B:39:2E:92:6E:8C:D1:C8:46:CA:31:18:D8:AA:83
X509v3 Authority Key Identifier:
keyid:EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:db:89:04:02:b3:3a:25:41:e7:e9:83:89:b0:28:c9:a7:a5:
87:ff:06:6f:46:5f:44:5d:09:dd:70:85:a0:df:cd:3a:48:8b:
ff:37:45:f1:8b:4a:42:48:b5:dd:29:40:1c:b1:b3:55:3c:f6:
c8:d6:92:81:52:e7:74:b4:fe:45:6d:35:3d:35:d3:fb:d6:49:
d7:fc:bc:f4:29:24:3f:22:b6:da:fe:e0:ea:15:88:75:07:91:
3b:68:4c:ec:3a:c4:e3:36:f7:06:dc:d1:fd:d9:b0:dc:d7:64:
9b:e6:74:84:7c:05:5a:ea:f0:65:54:d7:13:2f:98:68:fc:e5:
f2:49:06:c9:b2:73:f1:79:43:72:f5:68:68:45:b9:66:03:bb:
6e:e2:ad:66:fa:ab:af:23:3b:fd:22:a2:85:8c:19:ab:8d:fc:
33:d8:2c:fb:4e:4d:d1:9d:1e:63:92:6b:21:a6:9e:49:d5:7b:
b6:ec:32:c0:dc:1f:a2:f8:a8:6e:92:b1:8a:a2:0f:4e:56:89:
a2:10:4f:a3:28:83:cf:c1:1f:48:a3:2d:4f:62:ca:e0:67:61:
d1:5c:3a:3c:d7:44:51:c8:26:45:7d:a9:df:89:7b:3e:22:47:
3f:64:0f:a7:62:74:63:e9:47:7b:0d:d5:fe:d2:a4:0e:d0:96:
c9:6a:d2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:54 2026 by rpki-client