Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json)
Hash identifier: ZKu9Ml1PLOi6KkuYA8TkHGT6LjeBsUS1shykyZqhYJs=
Subject key identifier: 2D:23:7B:9A:4A:60:F8:81:0E:CD:B4:40:A1:C4:00:49:2E:D9:9B:79
Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
Certificate issuer: /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Certificate serial: 019CAD59F6A9138E11AE05B57B78019A80DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
Manifest number: 0ABA
Signing time: Mon 02 Mar 2026 07:01:19 +0000
Manifest this update: Mon 02 Mar 2026 07:01:19 +0000
Manifest next update: Tue 03 Mar 2026 07:01:19 +0000
Files and hashes: 1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: KZhQGkOjbwP8ieB7DeqlVJCEP/uvNvKtMQGpM7u51nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:f6:a9:13:8e:11:ae:05:b5:7b:78:01:9a:80:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Validity
Not Before: Mar 2 07:01:19 2026 GMT
Not After : Mar 3 07:01:19 2026 GMT
Subject: CN=2d237b9a4a60f8810ecdb440a1c400492ed99b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:1f:81:c8:34:c3:54:63:a9:80:87:60:88:
8f:7b:f7:63:bf:6d:19:18:e0:b2:f6:d4:0f:a4:ca:
2c:8e:9c:37:6d:97:43:1b:b2:3c:4e:8f:7c:f9:60:
71:1e:20:1b:ee:53:6d:10:f3:34:c4:4c:9a:30:8e:
f3:9a:6e:78:c5:c6:9a:2b:00:4c:ec:ea:80:e9:63:
5c:55:b4:a7:4c:33:6e:8c:70:1e:7c:fc:65:89:c1:
13:7c:ed:a6:6a:f1:37:01:66:aa:d5:6c:58:16:56:
71:78:75:c6:36:f3:57:09:88:b7:78:c4:09:89:44:
a9:44:26:52:cd:6b:b8:f7:5d:3f:5a:00:53:3d:9a:
a4:0e:1e:a0:c6:8e:94:15:49:72:16:b5:e1:b4:5c:
23:f0:76:7d:4a:9e:b8:d1:3f:34:ec:a5:d8:2a:97:
9f:2a:ca:2f:b1:aa:97:25:5d:8f:de:25:51:63:41:
92:91:8e:22:15:39:3c:b5:c3:af:33:93:26:4e:ab:
73:f3:b9:ed:58:eb:4e:48:a3:1a:34:57:32:e0:27:
09:42:5a:10:e3:7c:8b:50:9f:e4:50:d7:78:f7:29:
7b:d8:0e:60:24:20:16:d4:66:5d:29:95:01:c1:2d:
52:ec:8f:fb:45:9d:7a:75:53:96:05:37:0c:d0:12:
13:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:23:7B:9A:4A:60:F8:81:0E:CD:B4:40:A1:C4:00:49:2E:D9:9B:79
X509v3 Authority Key Identifier:
keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:16:6c:d3:79:97:d1:56:f6:94:38:87:f2:e0:fc:47:3b:33:
92:6c:ad:f3:ad:9f:e1:67:16:be:e6:1c:07:d7:66:a4:44:0a:
68:41:5a:8c:6e:84:65:cb:42:60:3f:64:80:33:f5:b4:e1:83:
d6:79:dc:2a:28:d5:35:f7:07:39:76:5e:70:26:b2:46:39:02:
6a:38:ee:b4:e0:44:ef:e2:e7:64:a8:aa:ca:de:4c:63:81:c7:
d4:8f:57:12:f9:bd:ca:c9:af:ed:49:d7:a3:a8:d5:5d:cc:a9:
72:a7:a0:7b:de:51:c6:97:43:6b:b6:86:29:39:52:fc:34:a6:
57:c1:24:06:fb:48:b3:39:f0:e7:71:68:06:e1:9d:16:eb:51:
24:0b:a6:14:1e:52:63:b9:09:ee:77:2f:ab:0e:73:95:d8:69:
c3:ff:5b:75:5a:b8:ce:7e:ae:1c:b7:8a:78:b2:c0:91:06:49:
4b:68:53:f6:7d:3d:48:04:f9:48:27:a9:c4:80:42:e2:83:8b:
b3:bd:31:c6:cc:f3:2d:72:06:86:3a:10:a1:a0:3c:7b:55:36:
47:29:c2:9e:47:cc:bf:e8:be:1a:b1:27:98:de:2e:c7:7f:a8:
70:c7:eb:cf:57:3a:b6:3e:69:88:92:bd:90:06:e2:20:12:f0:
a9:7e:04:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:17:48 2026 by rpki-client