Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
File: 7We7dYi4LXDYy3PU5FF39n7O8hM.mft (raw, json)
Hash identifier: 2SMghrdWbk/XiC08kWKtFXd2fBeJh/W3d/luBQngb7s=
Subject key identifier: 4B:73:AC:E1:B9:24:75:62:F4:EE:35:13:F6:82:17:C5:26:D1:D2:8D
Authority key identifier: ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
Certificate issuer: /CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Certificate serial: 01A0C39FFFB097D49453C066B3ACEA55809E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
Manifest number: 07A8
Signing time: Mon 21 Sep 2026 11:00:37 +0000
Manifest this update: Mon 21 Sep 2026 11:00:37 +0000
Manifest next update: Tue 22 Sep 2026 11:00:37 +0000
Files and hashes: 1: 7We7dYi4LXDYy3PU5FF39n7O8hM.crl (hash: Qw7H+APCBRzz0XcbTi9XShr3K87hY5nrVXzd8apjCN4=)
2: s7LS5E2_BqhGC5kkRJyj8qADFIY.roa (hash: F29Cc0fGTR/n9/kt6ymI38j28/wC/Ug/3ed8suC1jpQ=)
Validation: Failed, certificate revoked on Mon 21 Sep 2026 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:ff:b0:97:d4:94:53:c0:66:b3:ac:ea:55:80:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Validity
Not Before: Sep 21 11:00:37 2026 GMT
Not After : Sep 22 11:00:37 2026 GMT
Subject: CN=4b73ace1b9247562f4ee3513f68217c526d1d28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:be:f7:c6:00:81:cf:80:c2:e1:7e:3a:1b:
ad:26:93:78:84:49:93:fc:6e:e1:d0:93:b5:70:e2:
e6:4e:85:6a:83:55:89:91:70:32:64:fb:74:a3:82:
34:b3:96:a9:5a:b3:3d:91:7e:0b:91:42:bc:7d:51:
48:15:90:c3:3b:d0:8d:9f:0a:fa:f2:6f:a0:ca:21:
61:b0:92:02:37:48:9e:4c:5c:3d:ac:2a:4b:d5:fa:
29:74:0c:60:70:26:bc:d9:3a:5c:5c:92:78:83:36:
fd:c3:43:87:03:74:4d:b8:bb:52:49:fb:4e:8e:85:
56:50:41:63:db:87:49:be:5f:bc:48:6d:b5:8c:f4:
d1:9a:e1:fd:c8:ef:e7:82:0d:92:13:6e:d7:0c:b6:
a9:82:de:f9:b9:0a:4d:79:ec:a0:4c:81:69:78:ca:
84:f4:cf:98:79:bf:74:9a:8e:7d:56:9e:63:d0:bc:
26:ea:0b:34:b8:1e:88:37:57:e7:e1:a5:c2:d3:8e:
69:cf:18:f4:2b:78:ab:43:b7:83:39:2b:20:ce:0d:
de:a3:d3:92:d6:ef:06:bd:f6:0e:21:b2:e9:f1:a4:
5f:9d:26:db:ea:51:0e:c2:54:ca:23:e6:02:50:ee:
49:c9:c3:7c:8f:63:8d:d8:42:df:19:20:5d:69:52:
47:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:73:AC:E1:B9:24:75:62:F4:EE:35:13:F6:82:17:C5:26:D1:D2:8D
X509v3 Authority Key Identifier:
keyid:ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:61:ea:85:c4:84:63:f3:cb:3a:e3:27:e6:75:a5:5f:68:9b:
4b:1d:37:28:d5:16:15:df:33:34:4d:a0:31:a6:8d:1e:3c:dc:
32:70:f1:c8:11:54:37:30:e9:07:ec:88:95:c3:a4:d3:1b:7f:
58:a9:3d:d1:7b:17:f4:e5:35:f2:61:7c:c2:dd:f4:fa:15:df:
f6:f5:73:e2:67:33:7b:51:3f:a3:a5:2e:c7:73:5b:18:61:52:
3a:69:6e:ec:93:74:bb:ed:6a:de:0d:93:4e:fe:03:8d:59:52:
91:c8:a0:49:3e:75:5c:24:b4:e8:7a:04:81:ee:c5:51:23:5d:
fe:fd:b1:7e:f1:30:68:9e:d5:71:81:85:14:38:eb:b5:d2:c2:
b1:17:0c:af:ba:4f:91:a9:4c:bf:88:01:08:18:b5:6a:ff:aa:
42:33:ac:9d:5e:92:82:fc:2f:fd:01:95:87:93:0f:eb:89:57:
d2:ca:7c:46:33:04:62:dd:cb:70:69:89:80:27:cf:ec:c7:82:
90:06:70:b1:78:cc:09:d9:b9:d5:5c:04:78:db:c4:e0:54:60:
d0:e1:a6:4b:72:96:82:c0:81:bc:90:0b:77:be:b7:93:0e:ae:
1a:a0:e2:e7:87:63:e6:ef:57:0d:b8:85:10:e5:bb:77:4a:49:
99:47:a0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:34:15 2026 by rpki-client