Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
File: 7crL2itLMjHQi1HxbxsqfAgjetE.mft (raw, json)
Hash identifier: Rnz5RA2sK34RxjKuMthnolN4AAeqHFI3mnhPZDggaeY=
Subject key identifier: EF:6A:4A:F2:C0:0B:6F:A1:E0:81:39:FE:14:AE:88:F7:BA:BA:85:FE
Authority key identifier: ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1
Certificate issuer: /CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
Certificate serial: 019CA9EB6742E92C97531674F07D29108279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
Manifest number: 04B1
Signing time: Sun 01 Mar 2026 15:01:42 +0000
Manifest this update: Sun 01 Mar 2026 15:01:42 +0000
Manifest next update: Mon 02 Mar 2026 15:01:42 +0000
Files and hashes: 1: 7crL2itLMjHQi1HxbxsqfAgjetE.crl (hash: qnbB5yAMMJQ2tMkHM9XFjGtg9WFM6ot/1op9KwZZUg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:67:42:e9:2c:97:53:16:74:f0:7d:29:10:82:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
Validity
Not Before: Mar 1 15:01:42 2026 GMT
Not After : Mar 2 15:01:42 2026 GMT
Subject: CN=ef6a4af2c00b6fa1e08139fe14ae88f7baba85fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:98:3d:4b:c9:0b:9f:7c:78:5d:5c:68:16:ec:
0d:96:dd:d1:6e:52:51:2a:9d:11:fa:b9:23:51:e7:
5e:7d:98:65:63:27:69:97:bb:0f:33:04:97:7b:fc:
61:8c:87:37:42:dd:da:65:18:c0:d0:09:27:22:6b:
6a:c9:14:38:f3:11:24:0a:94:ea:b9:3f:a4:34:11:
00:19:dc:f3:12:03:ff:37:ad:6e:03:39:82:85:64:
66:e6:29:0c:75:df:39:e2:8a:e2:fc:fe:2c:63:74:
5c:3c:0c:0c:67:7d:5e:ce:b0:29:85:a4:4f:c4:43:
d6:2c:fd:14:29:71:05:8d:3d:f1:2e:14:fd:dd:a0:
a3:17:43:f1:69:71:16:7f:17:2c:2f:5a:7e:37:72:
ad:31:b3:7a:02:0a:77:95:b1:e1:aa:31:81:58:73:
36:09:d3:d0:55:56:12:6c:e6:e2:1c:42:9b:22:ca:
b9:16:c8:64:66:18:1a:d9:12:8e:03:9e:0f:29:3a:
6e:2a:df:fd:c3:e8:59:c2:06:18:32:40:19:2b:e9:
e3:3a:70:2e:d2:ea:cf:4f:79:a0:16:cf:b9:09:11:
0b:3a:e1:3f:5b:64:c0:06:4f:0a:05:52:5a:0d:0c:
3e:ee:6f:d1:07:70:e8:d6:7a:f7:57:1d:9c:92:b8:
f0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6A:4A:F2:C0:0B:6F:A1:E0:81:39:FE:14:AE:88:F7:BA:BA:85:FE
X509v3 Authority Key Identifier:
keyid:ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b1:fa:94:9e:e3:a3:2b:06:dc:13:53:68:d7:84:b5:d5:03:
34:f4:bd:0a:a2:3d:af:d9:2e:f2:27:e6:2a:c1:61:da:fb:49:
d1:00:3d:f2:27:05:14:16:05:a7:eb:d5:da:cf:65:8d:35:fa:
a4:34:3c:31:d3:fb:ea:d5:2f:a9:9f:77:e4:07:29:d6:29:3b:
c2:0d:a6:58:d1:ad:79:4a:61:b6:28:6a:5c:60:3d:22:0b:00:
c1:d8:56:3d:39:bb:1b:ee:5a:05:28:6d:a8:49:28:7e:ff:06:
b1:40:46:7c:f0:7a:5a:11:0f:91:91:56:69:f9:c5:4e:b3:12:
b9:d6:c0:d9:90:34:c8:62:66:58:e7:1a:86:31:bd:2e:81:35:
02:d7:6b:4a:88:7d:17:16:ec:17:24:63:a3:a8:99:81:87:d8:
a4:83:b7:f4:ed:bb:e0:48:ad:aa:53:56:17:a0:4e:54:22:ce:
c8:90:1a:1e:0f:67:de:f4:d9:d9:09:41:64:c8:ef:88:44:7b:
b0:de:af:85:88:c7:da:a0:d4:e7:93:24:55:56:8c:6e:a2:25:
bd:88:64:bd:7d:c4:1f:4b:83:3c:cd:9a:c4:74:ac:dc:39:d6:
e3:b0:9c:54:47:07:14:f4:6b:96:21:90:50:e4:36:fa:58:08:
52:7f:25:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:52 2026 by rpki-client