Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
File: 7oAELqPLNIc97Q6wZJWU4v8jkIE.mft (raw, json)
Hash identifier: gyijEcoaBZcyG6vNABXObosiO09FY0rDv3WSL67ghFE=
Subject key identifier: 20:51:7B:DC:D5:38:1F:26:B3:2C:DE:CE:CB:BB:AF:6A:39:33:DC:6A
Authority key identifier: EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
Certificate issuer: /CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Certificate serial: 019FA82B4FD957BB22A984B6AB312FAE3B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
Manifest number: 0DDE
Signing time: Tue 28 Jul 2026 10:00:38 +0000
Manifest this update: Tue 28 Jul 2026 10:00:38 +0000
Manifest next update: Wed 29 Jul 2026 10:00:38 +0000
Files and hashes: 1: 7oAELqPLNIc97Q6wZJWU4v8jkIE.crl (hash: Wy3pI580pP48WPGB4SCsRyBv6OKzYc4j9SAoDsFGYS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:4f:d9:57:bb:22:a9:84:b6:ab:31:2f:ae:3b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Validity
Not Before: Jul 28 10:00:38 2026 GMT
Not After : Jul 29 10:00:38 2026 GMT
Subject: CN=20517bdcd5381f26b32cdececbbbaf6a3933dc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:b1:21:d5:9b:f5:2a:fe:83:2f:76:90:91:
36:eb:38:30:cb:dd:dd:96:a8:29:98:05:84:0d:72:
a3:f4:75:bf:ee:fc:ec:6d:6c:78:c7:54:35:f1:eb:
2e:5b:f3:2e:42:a1:40:6e:1f:7d:0c:79:dd:96:0b:
48:f6:c6:0a:47:81:94:e0:1a:db:22:ac:ad:11:46:
31:0b:53:d4:be:37:a7:00:47:54:fe:9b:05:b0:57:
dc:16:73:36:db:58:7c:c8:6f:b4:ee:03:f9:5e:b5:
9d:4b:81:31:9a:b4:7f:9b:3c:40:b7:bc:18:d0:00:
ce:b9:58:d7:36:8a:a5:27:0a:f9:00:cd:3b:b8:7f:
16:70:bd:bb:67:d3:e9:34:96:76:72:57:ef:4a:c4:
1d:62:61:b4:6b:1e:7d:a9:78:a5:c2:31:3d:00:7c:
ca:cc:4f:1b:c0:33:52:f4:93:c8:8a:a2:c7:60:bb:
94:df:9e:7a:bc:59:26:32:41:88:e6:3b:3b:d8:7b:
cf:cf:4d:f1:11:5a:9c:ec:63:88:71:11:5e:a9:d5:
b2:de:d6:aa:15:1d:20:0e:28:a5:7f:1a:82:36:d6:
6e:43:67:d1:83:aa:d8:74:a1:01:ab:5e:a0:d3:c1:
e0:73:c3:7d:26:40:1b:f2:e5:7d:f0:71:a5:35:2b:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:51:7B:DC:D5:38:1F:26:B3:2C:DE:CE:CB:BB:AF:6A:39:33:DC:6A
X509v3 Authority Key Identifier:
keyid:EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:37:fb:23:41:20:7b:f8:90:a3:43:b1:c3:08:a0:e2:14:43:
19:95:83:31:aa:cf:23:75:5d:74:21:d3:16:1b:ec:91:f8:33:
bd:2a:60:6f:53:4e:5f:18:14:69:b0:f4:82:1d:a8:30:76:d9:
c3:44:f5:40:65:3c:fa:a8:8f:d3:f4:2a:e4:93:1b:16:ad:88:
6f:4b:27:d6:d6:4e:82:34:33:28:2d:7c:31:aa:42:14:c9:bc:
d3:43:14:ad:ab:5f:6a:7f:50:5e:3e:3e:e8:18:c2:8f:7e:4b:
5c:10:a7:9f:e6:dc:07:cb:3d:e1:c4:b2:04:f4:60:06:de:65:
78:b3:cd:39:62:0d:ba:88:63:15:f2:31:5d:68:f7:64:a5:84:
c9:b3:28:dd:a7:81:bb:42:65:cd:10:53:89:06:0c:16:c7:9c:
1e:68:60:cf:53:94:72:9b:5d:15:82:28:82:88:73:24:53:a3:
e4:0a:08:7d:a4:2f:46:8d:65:30:64:a8:3e:08:c3:2f:c3:79:
97:79:0e:71:4c:48:43:84:96:af:11:62:1f:30:83:f7:b7:07:
f5:1e:de:73:2a:59:f2:86:8d:36:6a:ce:00:21:7f:b4:93:e8:
28:18:a3:31:1b:ab:c1:62:8e:eb:ed:59:28:35:02:de:e6:28:
3f:41:fe:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:37:47 2026 by rpki-client