
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
File: 7_vi0INCz7z3p9dOiOvQMeEgItk.mft (raw, json)
Hash identifier: cNtjU1oEkqCHQITrz0l44pHQxDdOBKHYltDf+MxPx3Q=
Subject key identifier: 04:8B:4C:0E:9D:A4:BF:29:F0:F6:89:F9:FE:5D:23:B5:F8:3D:91:E4
Authority key identifier: EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
Certificate issuer: /CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Certificate serial: 01A134B5BB665730032AD094A10FA1A9A282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
Manifest number: 0894
Signing time: Tue 13 Oct 2026 10:01:27 +0000
Manifest this update: Tue 13 Oct 2026 10:01:27 +0000
Manifest next update: Wed 14 Oct 2026 10:01:27 +0000
Files and hashes: 1: 7_vi0INCz7z3p9dOiOvQMeEgItk.crl (hash: 3BSQcOFLmrlXYC2RwLpR2MOt+HCsyyttzLpEHfegKds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:b5:bb:66:57:30:03:2a:d0:94:a1:0f:a1:a9:a2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Validity
Not Before: Oct 13 10:01:27 2026 GMT
Not After : Oct 14 10:01:27 2026 GMT
Subject: CN=048b4c0e9da4bf29f0f689f9fe5d23b5f83d91e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:41:9c:ff:aa:da:9c:e0:02:ed:97:4d:d3:
a6:c7:e7:5b:ea:ad:26:78:00:7a:63:cb:ab:d5:3f:
bf:ae:fd:ed:2c:f0:25:75:02:95:47:a9:16:fe:ca:
e5:fe:45:ab:36:c1:e7:71:86:e2:c4:b2:7c:13:13:
09:be:84:da:bc:15:e1:08:b5:69:31:9f:73:fc:51:
ba:de:84:28:5a:2a:bd:13:59:32:10:e8:4f:55:41:
76:33:78:84:74:9c:52:dc:39:8f:2c:d1:21:ee:08:
a7:97:84:6b:d9:bc:09:0c:16:36:32:dd:92:8d:71:
75:db:5f:49:94:f3:bc:8d:10:21:d2:76:4f:52:ee:
0c:89:4a:8b:da:05:2a:f2:37:b7:69:e3:b1:a8:df:
38:50:97:c8:d5:e4:4a:26:2e:a5:f8:9b:27:02:01:
ba:8b:ad:af:c1:0f:a0:6a:13:38:d6:7a:0f:0f:15:
e2:cd:79:2b:c5:42:7c:85:b2:16:01:1b:0e:c5:fb:
b2:7a:14:66:52:10:e0:b3:fb:a8:50:94:d6:24:b3:
5c:06:98:2d:fd:7b:04:9b:4b:b2:48:36:24:61:2f:
ea:09:e3:d7:b1:79:e9:84:d7:1f:a8:d5:84:8f:c3:
1b:f3:15:82:20:ee:ba:33:a7:91:03:ce:90:a1:45:
20:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8B:4C:0E:9D:A4:BF:29:F0:F6:89:F9:FE:5D:23:B5:F8:3D:91:E4
X509v3 Authority Key Identifier:
keyid:EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d3:70:6e:24:0a:46:80:7c:5f:f0:cb:7c:17:b5:09:06:81:
69:38:ba:6d:c5:c3:4a:a4:4a:6f:7b:e1:ae:44:63:db:fc:06:
f1:e9:14:48:e0:ae:d0:5c:a6:a1:61:16:12:e0:c4:64:59:84:
9e:5c:c9:39:64:25:aa:1e:1a:22:4a:68:87:b0:7d:d5:ca:79:
1a:65:65:e9:b2:30:ea:cf:05:dc:96:20:50:7b:e7:b0:6f:1f:
f7:52:f0:4c:3e:1a:c4:32:b8:c8:7c:ee:f8:1b:8d:a9:30:4d:
5d:d2:bb:bb:15:1c:dd:61:32:7a:d5:61:1a:07:33:3a:23:7c:
50:37:99:2a:a5:e3:ce:ed:19:ed:3c:05:28:a7:fd:f0:5a:ac:
27:16:6c:4e:cd:1d:9a:c9:1d:1f:d9:00:24:28:98:3f:cb:b5:
14:26:6e:e9:54:1f:eb:e5:d1:3b:09:d4:fd:29:67:a8:2d:ed:
d8:a2:2a:81:8a:a2:3f:e0:6a:b7:dd:98:22:48:b3:dc:a7:9a:
de:4b:38:97:e3:73:86:9a:93:4f:e3:f9:29:59:52:bb:5f:1e:
85:33:37:b8:69:20:5f:d1:87:37:9b:10:6d:37:03:f8:25:dc:
fa:2d:2b:16:e0:7e:3a:ef:a0:2e:9d:f8:5b:c6:1d:79:56:56:
7d:65:3a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:10:47 2026 by rpki-client