
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
File: 7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft (raw, json)
Hash identifier: V90M/5YEvB99z2JMrl5o3tXXoNtYlZL6iuTQvHn7taI=
Subject key identifier: F4:5E:6A:68:B5:43:F1:50:0C:1C:66:54:BC:7B:73:CB:EB:BB:AB:E8
Authority key identifier: EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA
Certificate issuer: /CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
Certificate serial: 019CABD982994F4230E1E62C636473311508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
Manifest number: 1842
Signing time: Mon 02 Mar 2026 00:01:24 +0000
Manifest this update: Mon 02 Mar 2026 00:01:24 +0000
Manifest next update: Tue 03 Mar 2026 00:01:24 +0000
Files and hashes: 1: 7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl (hash: waXySfb1oUkS0BIfTo51mj8TP22mN5sAhSj9aHQ3MzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:82:99:4f:42:30:e1:e6:2c:63:64:73:31:15:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
Validity
Not Before: Mar 2 00:01:24 2026 GMT
Not After : Mar 3 00:01:24 2026 GMT
Subject: CN=f45e6a68b543f1500c1c6654bc7b73cbebbbabe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9b:70:5d:8b:7b:03:a1:6f:77:f5:ae:75:14:
8c:c5:c2:fb:1f:fd:42:8b:29:70:db:6a:76:61:5d:
ed:35:25:44:0f:ec:5c:b3:1c:6d:d7:24:83:60:6f:
3d:76:56:40:40:ae:df:6b:29:99:a0:a8:96:6c:a8:
59:c6:47:cf:e8:ca:1a:7e:68:d6:7d:f0:65:bb:b7:
3d:8c:2b:74:b8:8d:ed:4b:cd:36:c7:ea:a1:77:16:
6f:c0:93:a2:94:85:1d:12:6a:4c:ec:b8:b3:13:05:
72:70:4d:5a:3e:7f:96:51:48:ae:ba:cd:9e:2b:f7:
7a:d1:ac:c4:85:4b:86:a8:34:0c:29:51:2b:54:2e:
97:4b:51:41:c9:3e:14:12:65:25:0d:dc:e0:ae:b9:
ca:a9:ac:39:a0:56:7a:e7:65:51:4d:0b:b1:4d:ac:
ae:da:78:9e:85:8a:b5:1d:c4:26:51:55:36:55:35:
61:a9:ac:e7:94:4e:b1:b0:98:8c:97:e7:92:ad:5a:
ed:34:a0:4a:91:2e:d5:b8:25:4d:76:24:d0:05:38:
92:f8:57:7e:c1:44:89:2f:96:98:3d:2d:6b:bd:0c:
5d:95:1d:5f:38:01:ae:42:1b:83:1e:4c:a2:a6:0c:
c6:20:5e:22:ab:aa:23:34:03:00:c9:db:1e:96:a9:
da:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5E:6A:68:B5:43:F1:50:0C:1C:66:54:BC:7B:73:CB:EB:BB:AB:E8
X509v3 Authority Key Identifier:
keyid:EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f1:4c:11:5c:5e:df:f5:58:6f:40:8d:cc:73:e6:a1:7c:e1:
07:32:d9:cc:08:2e:db:85:f3:55:07:42:52:b7:86:95:e0:0f:
d9:09:fb:bb:43:4b:43:ec:2c:61:2d:be:e1:ab:a3:7f:79:25:
2d:d0:35:b8:5d:d4:f5:4e:9b:19:22:11:79:3c:22:d2:07:0d:
50:af:46:ea:40:80:85:34:e8:fe:f5:48:08:de:87:f1:79:39:
a1:95:b3:a8:84:43:cb:54:ff:a6:46:ed:9a:72:58:b1:67:ef:
13:ee:99:ab:31:ee:2e:97:a4:e6:5b:20:06:4f:45:51:e4:e7:
10:4b:41:98:20:44:4e:ac:9c:c8:6a:7d:7e:90:2f:19:d2:bb:
af:26:18:7f:64:dd:ef:69:a4:80:6b:6c:f8:af:33:11:49:49:
c6:f7:76:23:dc:1e:08:33:ef:b1:46:f4:1e:f8:3b:b7:6b:05:
06:f8:da:71:ae:57:6a:40:ae:11:51:ee:80:c7:af:64:51:b6:
83:66:57:d3:1f:5e:0e:d9:1b:a2:95:81:03:49:e1:1a:3c:98:
67:e7:99:fa:39:9c:8f:d7:7c:7a:57:df:ea:ce:65:3a:e6:ac:
34:b7:f3:c2:be:b2:03:30:af:19:89:0e:fd:34:cd:41:d3:7f:
9d:c6:cc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:51 2026 by rpki-client