Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
File: 7crL2itLMjHQi1HxbxsqfAgjetE.mft (raw, json)
Hash identifier: dARAbTMflPNyHRpD/THJGuoevqIPuWWjK52hijvsALE=
Subject key identifier: 8A:64:DE:F8:8D:BC:C1:7F:16:50:F5:6F:50:1C:F6:20:91:08:FF:B4
Authority key identifier: ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1
Certificate issuer: /CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
Certificate serial: 019D97748FFAEEC57619C60F101EE3886032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
Manifest number: 052C
Signing time: Thu 16 Apr 2026 18:01:31 +0000
Manifest this update: Thu 16 Apr 2026 18:01:31 +0000
Manifest next update: Fri 17 Apr 2026 18:01:31 +0000
Files and hashes: 1: 7crL2itLMjHQi1HxbxsqfAgjetE.crl (hash: 0Uupg8OZMHRzI5+ZSczQeDmj+TjhssbB1hqJnadjlmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:8f:fa:ee:c5:76:19:c6:0f:10:1e:e3:88:60:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
Validity
Not Before: Apr 16 18:01:31 2026 GMT
Not After : Apr 17 18:01:31 2026 GMT
Subject: CN=8a64def88dbcc17f1650f56f501cf6209108ffb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:3e:c1:39:1f:9f:19:d5:49:20:34:eb:2a:
bd:28:2e:46:ee:a8:72:1c:f6:ae:d4:5d:ca:33:7c:
19:e6:10:f3:e0:eb:d5:bf:24:90:50:06:e7:2c:d8:
1e:d6:5b:83:69:69:d4:d0:ca:d4:40:7a:71:c0:c2:
35:e4:9d:70:9f:45:4e:dd:77:09:f2:c5:fe:74:59:
58:a5:e4:89:78:82:6c:c6:f5:7a:fc:dd:2b:a8:8c:
4c:c5:e6:e7:f5:c5:3f:14:ee:54:74:f6:18:e4:a0:
24:73:28:e4:d7:48:33:d0:dc:dc:e7:fa:b0:47:d0:
b3:69:92:e0:12:11:0c:1d:20:f7:ff:b1:8a:9a:ce:
91:86:81:ad:8a:58:8c:c4:23:8d:4b:02:f9:7b:6a:
4b:76:a0:fc:dd:d8:09:e7:37:e8:1b:2e:27:58:22:
08:99:30:cb:90:48:8f:19:46:c9:26:6b:c9:63:0b:
25:29:5f:02:47:47:33:42:f6:c5:0e:0f:76:4b:68:
0c:63:ba:d4:97:3c:36:15:7d:17:5d:1d:96:e2:fe:
cf:4c:16:67:fd:4e:f0:97:22:b1:92:9f:a4:1c:02:
e1:9e:b4:68:1f:a7:6c:2d:ec:d8:45:69:16:ae:b8:
0e:cf:23:dd:12:8f:b3:d2:55:59:0d:17:36:a6:6a:
51:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:64:DE:F8:8D:BC:C1:7F:16:50:F5:6F:50:1C:F6:20:91:08:FF:B4
X509v3 Authority Key Identifier:
keyid:ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:5a:f1:1a:81:f9:d1:86:98:ed:89:a7:00:65:ed:1b:f7:62:
7d:33:6b:3e:55:49:69:c6:b9:bb:f8:6a:da:92:00:3d:7c:30:
57:11:48:a1:0c:28:0f:b9:d9:8a:ae:b9:7b:85:3f:2b:c6:bf:
07:a3:e5:81:fd:89:c0:07:8a:0b:56:5a:7f:c3:a8:86:80:a1:
f2:f8:9f:37:81:ea:08:f6:a3:c2:55:c5:cd:61:64:1f:6f:1c:
eb:64:f5:10:68:2b:18:99:0e:06:df:ca:b5:de:50:c8:66:23:
b0:83:52:be:88:e9:3a:74:22:b5:ae:0d:14:a3:1c:0b:69:8f:
a1:0e:3f:2f:36:b2:af:6a:5c:9f:d1:96:1a:a9:11:3c:df:ba:
d2:41:2a:5e:72:92:24:0f:39:81:a1:41:a1:87:ca:d7:44:26:
5b:50:bb:a8:b2:fc:c7:7f:73:9e:4c:da:42:31:b4:5a:55:cc:
95:e5:43:d7:32:31:77:93:e6:3e:8a:e8:1c:c7:62:c0:df:6f:
9f:f3:59:72:04:e7:75:71:26:d1:ff:e4:95:93:d9:5b:d0:69:
0c:1a:44:6a:1d:dc:36:5e:cf:20:ab:aa:6f:35:99:a8:bc:dc:
f5:ef:8e:87:6d:0a:49:ed:8e:f6:a9:bd:4c:1c:9a:58:8f:67:
6f:0f:0e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:09 2026 by rpki-client