Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
File: 7ix0WZPMS28UcK6rRhTwhdSuQKk.mft (raw, json)
Hash identifier: 2ee0CuQXvHc6mCY3k3Bkr+LKPHGm215JPrsJ3utYX8Y=
Subject key identifier: 3C:E9:91:A6:F9:14:2D:4D:97:6D:64:F1:DB:6C:24:0B:5F:DA:28:EA
Authority key identifier: EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
Certificate issuer: /CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Certificate serial: 019FA9076DD967800328CD3CC9B3F33D6570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
Manifest number: 1665
Signing time: Tue 28 Jul 2026 14:01:03 +0000
Manifest this update: Tue 28 Jul 2026 14:01:03 +0000
Manifest next update: Wed 29 Jul 2026 14:01:03 +0000
Files and hashes: 1: 7ix0WZPMS28UcK6rRhTwhdSuQKk.crl (hash: m045fgnv1I2Pu8FbPz3GGMihB1vEUsnzLOhfSqH0slo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:6d:d9:67:80:03:28:cd:3c:c9:b3:f3:3d:65:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Validity
Not Before: Jul 28 14:01:03 2026 GMT
Not After : Jul 29 14:01:03 2026 GMT
Subject: CN=3ce991a6f9142d4d976d64f1db6c240b5fda28ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:45:6a:48:d2:9c:30:ea:e5:78:96:be:88:13:
6d:1c:40:ad:82:a6:6f:2d:04:2e:5f:9e:fe:b3:ee:
41:6f:b2:48:22:d1:47:cd:53:7d:98:d0:46:41:14:
7b:43:1e:88:1f:3b:5c:4b:1f:27:21:66:a1:7e:6f:
12:cb:dc:35:32:0e:cb:0e:b9:f9:eb:13:2f:23:54:
99:83:1b:6d:6e:55:66:e6:44:4a:70:c2:39:da:f7:
83:ce:f0:8c:54:48:76:b0:af:af:f9:18:74:e4:9d:
0a:e4:bd:25:bd:64:2f:bc:5d:86:dd:72:39:6e:2d:
af:10:3e:b9:cb:e4:47:0c:58:7b:a3:39:93:b6:9c:
fc:30:d9:1a:e8:f8:81:db:e3:08:fd:fe:db:1a:10:
d4:06:5a:63:f9:c0:2c:36:12:8a:3f:80:98:96:dd:
11:69:66:1d:b4:bb:1a:15:b4:37:dc:69:27:9a:e8:
a5:cd:4b:36:ab:2a:2b:8a:06:f7:89:c0:0b:e1:43:
e3:4e:32:47:cc:5f:d5:ea:af:c3:4a:0d:99:e3:05:
7c:c7:5f:e4:55:4b:f8:51:bc:94:2c:a7:69:82:b1:
14:83:1a:9b:e8:9c:e0:33:d0:cc:5d:b8:68:39:9c:
f0:3b:08:8b:16:5a:47:2d:82:13:72:24:e4:4e:d0:
fd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E9:91:A6:F9:14:2D:4D:97:6D:64:F1:DB:6C:24:0B:5F:DA:28:EA
X509v3 Authority Key Identifier:
keyid:EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:03:20:20:69:0f:3c:e6:c8:92:7c:bb:24:b7:ea:2b:ed:4f:
4f:fa:5d:ce:ac:05:3e:f4:63:74:51:3f:3d:17:3f:35:b5:96:
7e:bd:89:e5:24:a8:af:eb:6f:b2:70:b5:be:27:8a:b3:91:21:
b8:ad:f6:de:e0:4a:6d:23:68:4f:2a:6d:0c:79:6c:86:8d:09:
27:86:5e:2a:ee:3c:59:3f:f3:66:d7:a6:4f:f8:e0:2c:ef:bb:
4e:77:f7:6c:a4:6c:52:1b:9e:03:8b:7b:b7:d4:93:25:1d:9d:
51:fa:28:f7:fe:79:cc:f5:23:82:df:04:dd:0f:bf:9b:fc:b7:
91:9e:69:f7:e3:c2:43:35:d9:7a:54:74:00:28:27:5a:0e:ce:
fd:57:6f:f3:4f:17:66:ce:dd:cb:12:2b:be:c1:b0:c3:c5:48:
6c:77:8e:fc:06:46:1f:dd:5d:9e:6d:76:16:1d:61:4a:8d:1d:
82:37:ed:c2:2e:38:fb:a4:82:fd:0f:29:e1:6f:35:fc:f0:8a:
89:08:3c:6e:28:ec:ee:14:d8:e7:e5:28:b4:d8:11:e8:9b:7a:
46:f5:79:14:ed:cc:b9:00:6a:d8:99:9c:0c:29:e2:26:b4:e5:
12:69:f6:78:3b:4a:dd:53:6b:7a:b5:01:84:e5:e6:16:18:98:
3d:e5:ec:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:35:56 2026 by rpki-client