Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
File: 7_vi0INCz7z3p9dOiOvQMeEgItk.mft (raw, json)
Hash identifier: DaoJljFH6E2uCkAjWDNxYIG7gW94yhTffTS/FdYypj8=
Subject key identifier: 3D:84:A3:A7:3A:47:C1:46:79:1B:D2:D5:AF:AB:BE:9D:42:8C:D2:41
Authority key identifier: EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
Certificate issuer: /CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Certificate serial: 019EC111E3FC918C00304B9F0FF764F28C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
Manifest number: 074F
Signing time: Sat 13 Jun 2026 13:00:35 +0000
Manifest this update: Sat 13 Jun 2026 13:00:35 +0000
Manifest next update: Sun 14 Jun 2026 13:00:35 +0000
Files and hashes: 1: 7_vi0INCz7z3p9dOiOvQMeEgItk.crl (hash: 6T2fI2ZzuA5BEjdbwXLZ4e8+3LXjaACpgQS+sqYA2BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:e3:fc:91:8c:00:30:4b:9f:0f:f7:64:f2:8c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Validity
Not Before: Jun 13 13:00:35 2026 GMT
Not After : Jun 14 13:00:35 2026 GMT
Subject: CN=3d84a3a73a47c146791bd2d5afabbe9d428cd241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:a3:9d:ea:e0:22:87:11:4a:1c:41:9a:73:
4e:3e:af:48:b2:c8:17:8f:85:f3:2b:a5:6d:c1:de:
ce:fa:f7:0f:fe:2b:81:e0:bc:e1:0f:f4:d1:ba:de:
19:ee:19:53:bc:a6:20:07:c2:85:61:f2:73:3d:51:
d5:12:63:88:9b:15:13:64:e9:51:ce:9e:e4:2a:47:
da:ee:8d:3f:cd:2c:ab:4e:dd:18:c5:03:b7:76:84:
d9:13:50:66:17:da:43:c5:ae:ae:26:70:44:85:97:
e6:5a:b0:51:94:8a:e0:d2:d7:83:ae:af:8e:c0:33:
27:07:bc:f8:2d:d9:47:59:2e:70:30:bf:a5:9f:0e:
45:18:2a:6d:d5:2d:6d:13:7b:44:83:f7:3c:77:cc:
71:01:06:9d:54:bd:27:ff:7f:5d:b3:a8:4a:53:ac:
49:12:05:3b:cd:fa:3b:89:42:e7:be:4f:c2:20:7d:
af:64:90:e8:3c:17:1f:c4:dc:ea:e3:ba:d3:42:80:
77:4b:5d:fc:a8:47:ef:26:d8:f4:d0:be:28:6a:1d:
09:73:d2:5f:a8:ff:1a:24:6c:72:8f:ba:c6:7a:9c:
05:c5:fd:7f:11:6a:b0:7b:de:f5:57:25:77:26:0a:
9d:10:c7:d2:e7:99:5f:3f:c8:d1:e1:d2:96:89:b6:
f8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:84:A3:A7:3A:47:C1:46:79:1B:D2:D5:AF:AB:BE:9D:42:8C:D2:41
X509v3 Authority Key Identifier:
keyid:EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7d:30:2d:59:53:2c:6c:df:4a:aa:51:7c:93:bb:63:51:5f:
af:41:6b:01:37:ec:45:b1:e4:f8:e2:4b:e3:e4:dc:a9:34:f9:
2e:38:3f:ed:a1:3b:66:76:2c:8b:06:32:6e:96:35:b4:68:59:
d6:f5:56:07:c0:53:ba:e6:b0:58:91:db:f2:9d:9e:4d:f0:84:
47:7d:f9:90:25:ec:26:28:ca:03:ca:37:96:d1:0b:bf:cd:9b:
17:0b:ef:50:30:20:92:47:68:19:a1:f1:81:6e:8e:c5:25:91:
3e:fc:f8:59:82:8b:65:b4:2a:0c:19:46:10:ea:49:e1:bf:99:
4c:31:e2:98:f6:4a:db:60:ac:db:43:3d:28:da:91:d7:86:42:
63:bd:32:bc:59:9b:2e:29:bf:f7:09:fa:d3:51:ef:d4:84:50:
15:4f:74:e8:17:38:30:8e:ec:5b:23:ed:c0:8b:5c:22:48:2e:
19:18:30:cf:8d:f3:6c:0c:c4:39:8b:12:32:0b:7b:1d:30:9e:
1a:6f:7e:5a:7a:2b:10:0f:35:3b:81:9e:e5:12:d5:f2:a6:44:
2a:9f:ba:50:6d:cf:e5:61:1c:5a:5f:bf:aa:80:b1:0f:82:13:
db:5b:ba:83:26:26:ce:29:0c:57:c0:a9:0a:66:df:0b:93:b8:
33:7a:2d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:37:11 2026 by rpki-client