Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
File: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft (raw, json)
Hash identifier: XUSOWR+GAnUmfHRe61xB+/TqQao470oVqrOoIbhNfxs=
Subject key identifier: 70:8E:11:69:37:88:93:25:AA:B2:D4:F6:CC:10:ED:0B:D1:A2:78:98
Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
Certificate issuer: /CN=ed89298644ed486ded509d946a6d6d839589ce11
Certificate serial: 019EC2250B10FADB3190A33C5297BC195C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
Manifest number: 08DF
Signing time: Sat 13 Jun 2026 18:01:07 +0000
Manifest this update: Sat 13 Jun 2026 18:01:07 +0000
Manifest next update: Sun 14 Jun 2026 18:01:07 +0000
Files and hashes: 1: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl (hash: Msf0Cvn+g6hofTuSSe5zN7IHSESnwkAxfytjYTobWgI=)
2: ci8f7Y86uB9atamo1D3e8sszzV0.roa (hash: JE0+am3liaO3am6zHqUi0SmfiCv9crbc5X4aX8Cwg8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:25:0b:10:fa:db:31:90:a3:3c:52:97:bc:19:5c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11
Validity
Not Before: Jun 13 18:01:07 2026 GMT
Not After : Jun 14 18:01:07 2026 GMT
Subject: CN=708e116937889325aab2d4f6cc10ed0bd1a27898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:77:bb:25:b1:aa:68:fa:ea:bb:5b:12:b1:
52:63:3e:36:18:98:b2:0b:af:9b:cd:fc:b8:2a:3c:
4e:44:63:2a:ca:08:31:e0:98:42:ab:5a:04:c3:2f:
1c:05:bd:ea:68:b2:25:d6:17:8e:ea:e5:13:ba:9c:
d5:6f:e7:fb:9e:7b:9a:a7:8a:c9:63:00:5d:28:2c:
a0:9e:2e:b7:40:08:52:d0:9f:e3:33:25:d4:9f:c5:
96:cb:50:fb:c7:87:75:e6:ee:b4:30:e7:db:6b:11:
d3:f1:57:fb:0b:3d:b9:e5:74:f3:5e:e7:b6:b0:95:
61:7f:2f:27:9c:08:c4:79:24:77:75:f6:b1:b9:da:
96:9c:3c:4d:b5:9e:d7:34:c4:16:2c:15:5b:ac:a9:
2b:3a:d3:d2:3b:33:3d:bd:5b:f6:2d:7e:31:7c:86:
8b:d2:65:76:05:dd:b4:a7:7c:c9:4a:f0:44:16:0c:
de:bf:95:ad:99:2f:92:da:75:95:a8:37:ec:c7:c0:
f3:ee:96:70:ff:94:0a:dc:6c:ef:86:9f:1a:f3:41:
b5:c2:4a:51:13:66:9a:76:d7:70:b2:f2:a3:70:bd:
eb:6e:d1:cf:7e:dd:50:2d:0f:a9:3a:e7:f9:77:93:
3e:7e:41:a5:b7:3f:57:1d:fa:6e:47:7a:ae:a2:61:
36:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8E:11:69:37:88:93:25:AA:B2:D4:F6:CC:10:ED:0B:D1:A2:78:98
X509v3 Authority Key Identifier:
keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c8:f8:93:81:4a:d3:77:eb:ee:7c:e9:d5:f9:ed:18:c6:65:
60:e6:bb:c2:af:63:3b:52:f4:34:7f:29:5e:b1:67:33:96:f9:
ca:d7:64:67:f5:25:56:26:04:a4:0e:b3:06:2b:8e:4c:ce:38:
d5:da:23:c8:e7:14:0b:70:f5:f5:ae:e3:88:68:3b:6a:ab:ce:
10:c8:a9:7b:e3:ae:b9:89:5f:df:80:c8:42:d6:75:89:af:e7:
9f:37:52:99:15:09:8b:48:a0:0e:dc:ab:94:50:99:7f:42:08:
99:25:f1:c1:8e:58:67:ee:d3:c1:c6:60:b7:4c:42:51:60:c8:
a6:2a:23:a4:6f:d6:c8:fa:de:8a:43:37:58:e9:d6:12:6d:b6:
05:e2:0b:f7:5c:d7:26:5e:f4:00:70:31:1d:e6:02:a5:27:e1:
ba:55:03:74:f7:97:2b:e6:c6:64:c8:c1:e6:0b:b9:d2:7e:3e:
5f:3b:06:22:bc:25:87:30:30:a9:69:95:17:ec:7f:52:60:94:
1f:11:b9:1c:eb:e8:47:f4:32:80:2a:7d:71:65:80:cd:46:79:
d3:00:67:57:74:13:45:a3:ff:92:11:2d:84:8b:e1:cf:03:6d:
e7:1f:12:89:58:27:f6:51:9f:c6:83:fc:b0:ee:72:5e:16:c5:
51:e3:27:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:16:16 2026 by rpki-client