Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
File: 7jSQhUVj0yIi6azlrYpknptKFyk.mft (raw, json)
Hash identifier: SGMIp8lnzh0Hr9fah8QwZm4v5iMl4L/EPgkPtJ0B6/g=
Subject key identifier: DE:E9:17:C1:B8:CD:55:25:C5:D8:27:FC:2F:83:36:CD:B5:FB:7B:F0
Authority key identifier: EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
Certificate issuer: /CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Certificate serial: 019CAB6B1D0360BFD7DA400CA56766432A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
Manifest number: 04A7
Signing time: Sun 01 Mar 2026 22:00:49 +0000
Manifest this update: Sun 01 Mar 2026 22:00:49 +0000
Manifest next update: Mon 02 Mar 2026 22:00:49 +0000
Files and hashes: 1: 7jSQhUVj0yIi6azlrYpknptKFyk.crl (hash: IRiPR8bZIW0SzM6wvd9ziDy1j8RSIPIUZ+LRLv3V62A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:1d:03:60:bf:d7:da:40:0c:a5:67:66:43:2a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Validity
Not Before: Mar 1 22:00:49 2026 GMT
Not After : Mar 2 22:00:49 2026 GMT
Subject: CN=dee917c1b8cd5525c5d827fc2f8336cdb5fb7bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:27:6d:91:76:94:cb:ec:24:68:70:b9:7e:
28:58:d4:cc:a3:f4:3d:be:a8:29:5f:59:62:b3:96:
2a:0c:7b:5a:1a:81:8b:7c:66:7f:d6:f9:2b:ee:40:
cb:89:dc:05:3f:b7:ca:cf:06:58:2e:cb:17:c0:64:
1c:14:ce:7d:92:81:b4:99:e3:95:e9:2d:b7:7c:73:
76:9a:1a:84:77:6a:19:87:7b:74:c6:53:54:cf:67:
52:78:df:56:78:48:7c:ae:aa:b5:8c:38:18:7e:ff:
07:e2:e0:e7:fc:2c:ad:3d:62:73:8a:b4:1e:84:a8:
09:c5:12:ad:13:50:02:e3:c0:b3:6b:ef:5c:af:e9:
09:8f:99:92:8b:3b:b7:16:7d:b4:5f:28:74:54:b5:
7e:85:37:17:b1:b7:cd:e8:a9:22:8f:26:d8:f3:b0:
d7:db:40:c5:1a:90:67:47:48:1b:9b:af:42:8f:9e:
a5:34:26:38:74:51:20:52:f6:40:7a:08:7c:2e:40:
c6:33:58:b4:aa:1f:bb:a4:0b:b4:86:ee:b0:64:36:
0b:de:e6:c2:7f:82:f9:f9:15:13:31:d1:52:eb:15:
2b:48:e2:b3:01:d1:3b:8e:9f:87:6a:ef:90:c0:18:
06:8f:e9:c9:46:94:1b:38:2c:57:ef:e6:b7:08:83:
c6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E9:17:C1:B8:CD:55:25:C5:D8:27:FC:2F:83:36:CD:B5:FB:7B:F0
X509v3 Authority Key Identifier:
keyid:EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3d:5d:ab:9a:c0:8a:25:c5:c2:63:2d:e8:f8:ed:7d:07:7b:
62:ec:06:d3:34:0a:e1:c4:f4:2a:22:0c:34:ee:c3:8e:f8:9b:
4f:be:00:d7:d0:49:8e:6d:2e:b3:b2:77:e0:15:03:46:f4:0e:
c9:a9:d1:17:44:20:2b:ab:44:df:fb:9a:cc:9c:58:67:2e:56:
2d:2c:cb:3e:56:fb:bd:67:cc:af:a1:fd:98:19:ae:ab:c9:f9:
8e:e9:dd:a6:e5:d2:59:04:c4:47:56:c6:c1:e4:28:0a:a3:74:
be:d8:98:56:5f:09:c5:40:25:e9:2f:39:ad:29:f1:eb:c2:71:
d0:91:e1:5f:7e:78:f0:ff:d5:8e:6b:56:24:5d:c5:85:48:27:
b7:4a:b9:02:26:19:52:4f:9e:18:bb:7d:53:33:01:85:f3:06:
4f:83:f8:3e:04:ac:58:8a:cb:e6:ae:70:54:be:63:27:54:8d:
65:71:b6:3e:1f:c6:e6:9b:c4:8e:7c:27:de:d7:34:36:d5:57:
a1:47:e6:82:cf:06:e7:ac:53:ef:3a:4c:26:7c:55:fd:f6:b1:
01:91:d5:9a:06:ce:85:93:f0:1f:83:da:eb:60:8a:84:9c:fb:
7f:ea:9f:73:c0:8a:f7:ec:5d:5e:14:df:87:db:4b:f4:47:88:
9c:c1:50:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:56 2026 by rpki-client