Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
File: 7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft (raw, json)
Hash identifier: yYnKQqK/2Qs+pcPlCaWrI48xTUGPowx66cQeHV29BWk=
Subject key identifier: 88:B8:6D:48:60:8D:59:60:5B:A8:F7:59:D6:9F:47:FD:71:9A:CE:D1
Authority key identifier: ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16
Certificate issuer: /CN=edd97f6078d22e82fd3d04aec5d6721715256f16
Certificate serial: 019CAB6BAE78BE79ADC45A488FDEAFA17E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
Manifest number: 0BCE
Signing time: Sun 01 Mar 2026 22:01:26 +0000
Manifest this update: Sun 01 Mar 2026 22:01:26 +0000
Manifest next update: Mon 02 Mar 2026 22:01:26 +0000
Files and hashes: 1: 7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl (hash: z6OGGEUztpGPibYdwfNViRqWSYkV6mkxe5zSXt+VWG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ae:78:be:79:ad:c4:5a:48:8f:de:af:a1:7e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd97f6078d22e82fd3d04aec5d6721715256f16
Validity
Not Before: Mar 1 22:01:26 2026 GMT
Not After : Mar 2 22:01:26 2026 GMT
Subject: CN=88b86d48608d59605ba8f759d69f47fd719aced1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:55:89:c9:36:05:7c:0a:9a:5b:a9:96:4c:af:
be:78:a0:06:f0:a9:4a:2b:5d:9e:90:50:4f:d6:81:
46:3b:af:75:5c:0c:85:78:1f:e5:39:45:34:72:91:
7b:ba:8c:f7:00:31:30:67:b0:9c:b2:90:26:26:f1:
ae:10:4c:7b:eb:c6:ea:9a:1f:e4:ea:a3:dc:32:29:
cd:f2:26:cd:c2:51:2a:38:3f:a4:f8:b4:ae:b4:36:
68:da:39:da:19:45:e4:c3:ba:11:7a:14:74:68:23:
d8:6f:a6:99:72:29:fc:eb:a9:94:f6:da:b0:42:fa:
9f:2d:08:51:c1:10:4e:d2:c7:a6:0a:d1:69:b8:84:
4d:12:d9:c2:ad:0c:3b:38:04:a5:3c:85:29:3e:54:
21:1e:53:90:a8:72:e6:d6:26:7f:09:8f:fb:0e:78:
de:40:d9:69:64:9d:89:72:c9:fe:2a:c4:12:99:1d:
16:e0:2c:73:84:df:76:f3:be:c0:2e:c3:e9:6b:c0:
87:6c:00:d3:d1:56:c0:e6:6d:4b:12:ff:53:32:88:
8d:d5:1c:7e:49:6c:bf:3f:ca:b2:f4:b8:a6:73:8c:
65:61:fc:de:77:b0:0c:f6:80:ea:18:fc:a2:5a:fc:
76:56:1e:90:42:e0:06:30:a7:9e:00:48:9b:9c:8f:
7b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B8:6D:48:60:8D:59:60:5B:A8:F7:59:D6:9F:47:FD:71:9A:CE:D1
X509v3 Authority Key Identifier:
keyid:ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:71:4b:aa:01:ab:c7:d7:ca:15:ce:28:e9:04:30:04:8a:dd:
1b:a2:46:0c:34:e0:22:34:ae:71:80:3f:09:7b:9e:ae:0d:d5:
6d:5f:27:20:f0:e0:88:3a:9e:38:da:53:c6:23:a9:58:f1:1f:
63:55:7b:ae:61:21:83:f0:0a:f3:60:a3:f5:03:f2:87:fb:d6:
bf:11:6d:df:f6:10:90:7e:32:6a:05:72:c4:df:f6:1e:2f:e8:
48:90:6e:73:d9:7d:31:60:41:19:39:ee:11:aa:9d:9c:83:e3:
ab:1d:4c:50:3d:15:ef:68:f8:ef:53:68:e1:e1:e6:52:d9:f3:
97:2d:2b:13:c7:86:b9:1e:7f:8e:4f:c3:76:7b:f9:39:bb:ec:
7b:2d:11:b4:0a:fd:50:43:cb:d7:f3:ee:10:f5:52:72:05:26:
17:e9:25:27:99:e0:14:fb:36:12:ed:93:c3:1b:ac:c4:2e:89:
cc:15:da:a2:07:77:1a:c1:1e:b9:08:16:95:b7:fe:5b:8a:96:
73:47:e1:5d:59:b9:54:7b:eb:13:c9:97:a4:33:01:e8:15:d5:
e7:5d:77:06:80:ef:fe:f0:53:a8:99:52:b7:fd:01:45:84:5a:
78:a9:98:98:70:cb:58:5a:19:0f:3d:12:9a:bf:9a:42:a7:8f:
b8:65:85:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:23 2026 by rpki-client