
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
File: 7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft (raw, json)
Hash identifier: /cCfUVFqKE7vaYrnY4S3M/1HQjivztytn/v2m9TsGyg=
Subject key identifier: 5B:4B:B5:E9:A4:F9:AE:35:E0:94:54:71:60:31:B4:57:2B:D6:63:C9
Authority key identifier: EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19
Certificate issuer: /CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
Certificate serial: 019CADC78486792DFFF83C3A4C5F2673D457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
Manifest number: 109E
Signing time: Mon 02 Mar 2026 09:00:59 +0000
Manifest this update: Mon 02 Mar 2026 09:00:59 +0000
Manifest next update: Tue 03 Mar 2026 09:00:59 +0000
Files and hashes: 1: 7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl (hash: egVpGgSaZLUFG1YlQm/+TkDtei7k112RCr9uSoIopIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:84:86:79:2d:ff:f8:3c:3a:4c:5f:26:73:d4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
Validity
Not Before: Mar 2 09:00:59 2026 GMT
Not After : Mar 3 09:00:59 2026 GMT
Subject: CN=5b4bb5e9a4f9ae35e09454716031b4572bd663c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:45:4f:88:ae:71:f4:8d:c0:b5:ad:68:5c:62:
fa:0d:5a:1b:2f:00:7a:55:03:37:f2:24:24:18:ed:
80:8f:31:b2:c7:bb:3b:c4:a5:dc:84:cc:6f:34:41:
85:17:23:01:da:91:56:c5:e8:0c:7c:6c:53:54:d4:
b6:6d:e4:0c:67:54:c8:47:ce:d9:ac:ce:6f:9c:a2:
ad:0a:bc:a8:cc:62:e7:27:ef:72:af:52:e8:10:b6:
ff:12:8c:36:de:bf:64:52:5a:95:d2:13:d1:c7:be:
62:36:0f:25:83:65:c4:c5:35:47:2e:ec:12:d8:a8:
51:32:2a:63:17:0c:1e:48:3a:21:2d:3f:aa:87:7b:
a9:60:27:a0:59:0d:79:95:ad:e1:e3:d2:1a:1f:5a:
9a:2b:e3:e0:38:12:53:da:02:9f:2d:c5:8f:44:cc:
1b:91:7e:4f:7e:99:9d:3b:64:58:78:48:74:d3:84:
f7:f5:e8:68:4e:35:54:18:fe:61:d0:f5:83:f3:e5:
0e:1c:54:21:d8:38:83:b9:34:f8:b6:c3:fb:a8:6a:
e6:0e:92:2b:61:58:5a:e2:f8:d3:e8:f6:24:bf:42:
c3:67:9c:af:d9:1c:c7:05:08:5a:64:91:cb:d6:05:
5d:ff:d9:6e:92:e3:ae:fc:b0:7f:25:5c:69:1a:c8:
38:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4B:B5:E9:A4:F9:AE:35:E0:94:54:71:60:31:B4:57:2B:D6:63:C9
X509v3 Authority Key Identifier:
keyid:EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7f:8a:b7:d1:28:bd:5f:3a:ce:cc:56:9e:54:9e:b7:0a:e2:
cf:46:61:12:e3:4b:7f:56:63:ab:fa:21:12:d5:c2:27:44:ac:
be:f9:c8:dd:a3:b4:46:2e:40:f3:3c:ea:22:dd:e9:6a:ea:d2:
f9:ae:49:eb:0e:3f:82:9a:ef:74:dc:66:a5:60:b4:67:ef:1f:
91:b2:95:bf:9f:ff:9f:67:f7:dc:b2:7f:b6:45:6f:f7:a2:fd:
0c:e9:8a:61:20:ea:52:22:dd:1e:31:0f:51:bc:0f:f7:de:4b:
b4:fe:a3:25:5d:cf:fe:a3:de:47:19:97:84:16:35:20:7b:02:
1e:56:43:4e:c8:da:93:f3:8e:22:e8:a1:5e:3f:47:e9:42:e1:
99:46:16:3a:07:1c:97:65:f1:78:b3:c3:8c:67:32:58:b6:24:
84:e1:7f:c8:07:91:04:f7:d5:77:18:c1:6f:59:f2:37:55:af:
0f:d1:00:fb:2d:11:7d:c1:b3:40:fc:38:fb:3f:90:4a:62:a1:
c8:8d:c7:8c:26:9a:bb:4e:99:e9:10:28:48:d4:5c:f6:11:e5:
ba:37:c1:97:44:bb:7e:3b:a0:ff:62:21:49:36:8e:dd:be:fb:
11:48:8d:1a:24:d1:b3:fa:f4:86:3e:4d:ba:c7:20:2e:23:37:
e1:8e:5c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:46 2026 by rpki-client