Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
File: 7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft (raw, json)
Hash identifier: eHIujP9mfySrm9qzIQs9EbnKFmHp8pr5xqEyhDbpKFs=
Subject key identifier: ED:7F:5E:9E:1B:23:51:1A:82:5C:F3:A9:BB:B9:F3:E7:46:EF:5F:36
Authority key identifier: EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D
Certificate issuer: /CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
Certificate serial: 019DA48A52F4C6AB2EC33A5DCF53B99563DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
Manifest number: 0924
Signing time: Sun 19 Apr 2026 07:00:21 +0000
Manifest this update: Sun 19 Apr 2026 07:00:21 +0000
Manifest next update: Mon 20 Apr 2026 07:00:21 +0000
Files and hashes: 1: 7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl (hash: HNZQENRikZdoSO/GeGK2948qxk6DP17ByGXQou/oiI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:52:f4:c6:ab:2e:c3:3a:5d:cf:53:b9:95:63:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
Validity
Not Before: Apr 19 07:00:21 2026 GMT
Not After : Apr 20 07:00:21 2026 GMT
Subject: CN=ed7f5e9e1b23511a825cf3a9bbb9f3e746ef5f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fb:8d:27:a7:4f:75:a3:21:4e:3e:63:40:2c:
a1:41:e8:1c:4b:b3:bb:10:26:d3:7e:28:70:4b:96:
24:9f:fd:94:e2:b1:bf:9c:16:38:55:76:a4:11:29:
22:fd:bf:f3:a8:da:d9:1a:da:94:d6:8d:d1:b9:e0:
e4:d4:f2:2a:11:65:2e:c7:5f:39:9a:0f:83:0a:95:
4f:73:cb:49:f2:a6:5d:f5:17:80:b6:0e:10:fe:92:
c6:92:ca:86:bc:2d:72:cb:05:d7:82:a4:30:f8:95:
f8:ff:6a:67:97:aa:38:ca:2c:26:4a:ff:a6:95:e6:
8c:6b:bd:30:34:d5:6e:4f:b6:ea:2a:e9:b2:54:fd:
ea:e5:c3:e2:e5:c0:04:19:82:98:f0:99:ea:5f:38:
5b:ca:d8:60:f3:88:6a:2e:d5:c5:3e:92:29:73:d4:
78:85:b0:2b:60:4c:2e:8f:76:21:88:66:ce:be:a5:
b2:e3:76:f7:2a:a8:a8:98:c8:c0:ac:43:09:14:c7:
9e:16:4d:15:d6:1f:a6:2e:f2:b8:7a:5f:17:23:88:
bd:3d:08:e9:87:d1:c8:85:60:21:42:46:b9:6b:2c:
f4:89:af:3a:42:13:31:b3:cf:1e:ed:f6:07:8e:fe:
ce:68:b3:5a:59:49:91:82:9f:f4:70:6d:11:ef:bb:
73:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7F:5E:9E:1B:23:51:1A:82:5C:F3:A9:BB:B9:F3:E7:46:EF:5F:36
X509v3 Authority Key Identifier:
keyid:EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:74:82:4a:df:a1:f0:e2:b1:f6:6e:34:bd:12:f9:14:a2:14:
1b:b4:62:df:40:e8:65:bd:11:8a:a2:cc:78:92:57:e7:c3:32:
a3:32:6e:23:c7:4c:d1:3e:38:77:e9:bd:fd:f4:2b:ef:55:d8:
92:4c:e5:cc:8a:bf:6b:13:06:31:51:cf:aa:e6:d3:b5:d5:06:
8c:e7:50:98:0d:fc:b1:26:fa:3b:ff:0a:aa:64:e4:9c:56:d6:
1b:77:a1:3d:d0:a0:21:6a:18:54:01:45:15:85:d0:d0:8d:02:
f2:3b:06:2c:31:c1:f2:05:57:57:3a:92:ec:7b:b2:9d:2f:43:
cc:7e:3f:fe:c6:f5:d6:8c:c9:d2:32:fb:40:24:32:5c:dd:25:
1e:a2:df:10:8f:41:21:e5:eb:1b:a7:8e:de:70:5f:88:0d:33:
fc:b1:bf:38:7e:91:0f:af:49:b0:59:5c:9e:e4:ab:ae:13:1f:
f2:5c:38:eb:cc:2f:f9:51:2a:b2:b0:3b:30:5c:eb:64:9e:64:
9f:1a:66:70:e5:a5:b8:6b:24:31:c3:a1:c9:50:43:53:87:03:
56:69:3c:b8:39:73:bd:61:01:6f:57:bd:cd:6e:98:72:03:32:
9c:69:dc:08:1b:a3:8d:e5:78:05:71:35:cc:f1:da:01:87:99:
5e:cc:e7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:18:19 2026 by rpki-client