Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json)
Hash identifier: TzHVG4cQcmFNANjGiEz+LN1TRMhPM2YMxt+r8A2iDkQ=
Subject key identifier: 54:9A:85:75:25:F2:A4:5C:6A:4E:3F:C5:9B:4B:41:D4:A1:EF:FB:06
Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
Certificate issuer: /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Certificate serial: 019EC06D8521D4CD9B868F321BEE1DB095DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
Manifest number: 0BCD
Signing time: Sat 13 Jun 2026 10:01:03 +0000
Manifest this update: Sat 13 Jun 2026 10:01:03 +0000
Manifest next update: Sun 14 Jun 2026 10:01:03 +0000
Files and hashes: 1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: dD8jjPoW3oxksqiOKp05pXTCb9BxytvW95gH08ldLDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:85:21:d4:cd:9b:86:8f:32:1b:ee:1d:b0:95:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Validity
Not Before: Jun 13 10:01:03 2026 GMT
Not After : Jun 14 10:01:03 2026 GMT
Subject: CN=549a857525f2a45c6a4e3fc59b4b41d4a1effb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:c6:40:72:3e:8c:f1:4c:6c:1e:66:53:3d:
c7:d7:1d:60:82:3b:63:65:04:10:b6:43:74:81:26:
2e:d3:08:d5:8a:94:12:76:b2:e9:c8:57:e8:dd:d3:
82:2a:cc:a4:98:63:a1:64:b5:91:3d:1d:b3:22:55:
73:6f:ba:5a:20:53:64:30:bf:b0:b8:8b:bf:62:7d:
3b:5b:ca:19:9c:e2:b7:0c:50:e6:e4:93:fe:8d:ab:
d9:07:aa:55:be:e8:62:11:22:06:e2:e1:0e:0c:92:
62:07:73:f8:56:68:57:8b:c8:46:55:2c:ec:16:ec:
09:77:62:c7:59:99:25:e7:bf:7b:30:4b:4c:54:eb:
ab:fa:e5:c9:22:54:90:f5:db:4a:19:71:5f:73:4e:
bd:5b:2b:9e:cb:34:16:b7:51:41:ae:6b:43:e3:7a:
4c:34:23:b3:f7:6b:2d:5e:87:a7:c0:a4:68:a2:9b:
92:77:39:de:1e:82:98:d9:3d:9d:0b:88:f9:3a:c2:
b6:17:f1:d8:ee:55:f1:1f:a7:34:a4:23:5b:38:f9:
bd:21:a8:6a:63:15:52:61:7e:b2:d0:c4:dc:ea:66:
84:68:7e:9d:33:0f:95:7d:b1:61:3e:14:45:d5:9e:
24:97:13:a5:ce:d9:17:fb:dc:5f:30:22:61:36:5d:
87:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9A:85:75:25:F2:A4:5C:6A:4E:3F:C5:9B:4B:41:D4:A1:EF:FB:06
X509v3 Authority Key Identifier:
keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:83:b5:d1:0a:e8:e6:93:01:e6:b4:03:f1:9b:96:e1:4b:a0:
e4:ed:36:42:cc:0a:8e:2e:5b:47:b3:09:89:80:67:38:19:0f:
a3:4a:87:86:e1:7c:42:3d:a2:3b:b2:59:a4:b7:d7:4e:e6:21:
24:d1:05:c4:c5:78:01:f9:2f:28:a9:51:01:ec:02:94:f1:c6:
93:06:7b:7c:69:76:94:ca:3a:79:81:6a:c1:17:8f:da:f2:27:
de:51:95:b5:d5:07:72:06:9f:f8:c4:97:b0:ed:57:1c:e5:ca:
70:ec:35:f4:ac:31:5c:0f:2d:f1:3f:9a:d3:76:a0:1b:4e:03:
26:68:c5:4d:fe:23:88:a8:18:60:d0:28:01:75:d2:9b:11:cc:
f4:dd:a7:38:20:d9:79:ae:a2:34:13:72:fd:c9:82:3d:87:40:
c2:49:0b:52:7c:1c:d5:7d:c1:a1:4e:86:a5:40:83:03:b0:96:
8f:e5:40:eb:4a:f2:ef:5b:28:2d:f3:3c:02:c1:14:76:a8:4d:
c3:61:c1:14:55:ff:89:d1:1b:ce:4b:ec:11:14:a3:fb:5e:df:
8d:7f:4a:9b:ca:1e:da:ba:16:71:23:f0:7c:7d:70:a8:41:91:
bf:bf:17:67:af:4b:f5:6d:f6:b3:b4:c6:2b:13:94:db:1c:c0:
7c:8b:eb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:27:47 2026 by rpki-client