Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
File: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft (raw, json)
Hash identifier: LuHhBBAdeV1kvkE+6T5MmiSOvMpNH2BTGHdKDiTR4RA=
Subject key identifier: AD:21:EC:04:B2:3B:3F:59:93:82:42:FC:98:6B:B0:B2:6F:7A:5F:17
Authority key identifier: EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
Certificate issuer: /CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Certificate serial: 019CAB6B5FA28669F127EC929E93431827B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
Manifest number: 14F8
Signing time: Sun 01 Mar 2026 22:01:06 +0000
Manifest this update: Sun 01 Mar 2026 22:01:06 +0000
Manifest next update: Mon 02 Mar 2026 22:01:06 +0000
Files and hashes: 1: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl (hash: FJ4bmO0oOw7b11acEXuPotUf5ROvX/Fjjc7I9U3DF4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:5f:a2:86:69:f1:27:ec:92:9e:93:43:18:27:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Validity
Not Before: Mar 1 22:01:06 2026 GMT
Not After : Mar 2 22:01:06 2026 GMT
Subject: CN=ad21ec04b23b3f59938242fc986bb0b26f7a5f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4b:a8:20:33:6c:9a:ad:92:94:dd:cc:f2:7c:
17:11:b2:83:4a:af:3b:87:b7:68:cb:33:52:ab:49:
59:ef:5a:17:45:cc:ac:d9:39:9c:1d:f8:50:fb:55:
ea:76:3c:44:37:79:64:f9:14:a9:7e:57:f0:54:52:
cd:ef:3d:b8:e1:54:d5:92:fe:3c:d9:b7:10:d4:6d:
68:3e:c2:ec:f4:b3:44:04:b2:aa:1e:e9:af:92:22:
32:70:48:ae:9b:f2:0f:dd:c7:83:85:83:42:f8:64:
91:0a:39:32:52:3f:4b:06:6d:40:75:14:9e:f7:6d:
4e:c5:a3:39:4a:ce:f0:96:5b:56:c9:34:1c:a0:fc:
74:da:84:94:47:03:43:d5:1f:0e:de:9a:57:6b:25:
b8:40:1b:33:07:ac:cb:7b:30:ac:75:81:af:e4:ef:
7f:bb:b4:10:2d:a7:13:8d:6f:c9:be:bc:ad:b2:53:
2e:9f:fc:00:f0:b2:3b:d7:55:11:97:73:12:32:d8:
d7:e2:54:dc:63:10:61:5d:f4:cc:8f:8a:41:39:0d:
7c:f4:48:35:2e:50:ed:32:b2:c7:eb:27:33:b3:09:
a2:41:56:f2:4b:07:37:97:a4:8f:ff:90:02:52:6f:
79:e2:76:58:58:9c:37:7a:e5:da:7e:21:52:38:11:
15:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:21:EC:04:B2:3B:3F:59:93:82:42:FC:98:6B:B0:B2:6F:7A:5F:17
X509v3 Authority Key Identifier:
keyid:EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3b:bb:97:08:13:ca:c6:21:89:8c:a8:07:2d:07:d5:27:6b:
3b:cf:1d:48:d8:02:c6:08:40:6f:64:ff:ad:cb:59:1b:61:5d:
b8:14:6e:9b:49:95:51:49:8c:a3:cc:bf:a0:63:f2:0c:3b:84:
a2:fb:6e:90:b2:b6:94:bb:58:a2:23:b7:16:6a:33:69:c0:73:
a2:ce:0b:95:e3:2a:de:7f:f5:6b:ef:11:66:b7:2c:6f:ab:e3:
f0:f3:a0:a2:ba:a5:2b:51:5a:9e:01:81:d7:21:ec:62:c1:27:
52:0b:96:96:c0:e2:cc:6b:81:d6:d3:a9:92:f7:4a:ee:31:1d:
b7:a3:1f:43:ca:aa:db:27:ac:fc:d2:c3:fe:e9:75:97:9a:61:
e9:f4:06:57:7d:91:ff:f4:c7:47:48:47:f3:8b:28:88:ba:65:
59:ca:fb:ba:05:7d:d5:c9:68:bd:db:ad:11:7a:86:60:dc:aa:
3f:5c:a5:1e:a2:81:b7:7a:e7:16:11:d6:21:18:4d:de:e1:38:
56:7c:7c:2a:82:9f:fc:16:ee:03:06:6c:ce:6c:ca:9d:2a:b9:
f0:b1:4a:86:d6:57:bb:ae:a7:06:97:1c:35:5e:89:76:0e:f9:
a6:32:24:cb:06:8f:36:57:6b:0d:0f:bb:dc:22:ac:e7:26:16:
8b:6f:6c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:32 2026 by rpki-client