Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
File: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft (raw, json)
Hash identifier: 7C91S42XvFi36VZFYjbnS5B859SD+SE/FU5sXBqQMzA=
Subject key identifier: 05:5F:E3:6C:34:B4:C5:A7:52:A3:37:C7:87:9F:A7:25:87:C5:47:D2
Authority key identifier: EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
Certificate issuer: /CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Certificate serial: 019DA48B154C603AFBB6D016DD7DB1C59737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
Manifest number: 1579
Signing time: Sun 19 Apr 2026 07:01:11 +0000
Manifest this update: Sun 19 Apr 2026 07:01:11 +0000
Manifest next update: Mon 20 Apr 2026 07:01:11 +0000
Files and hashes: 1: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl (hash: j2E7K2CUewe8g574O8aujEPqPCFLtlvX7b2BOBr0AuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:15:4c:60:3a:fb:b6:d0:16:dd:7d:b1:c5:97:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Validity
Not Before: Apr 19 07:01:11 2026 GMT
Not After : Apr 20 07:01:11 2026 GMT
Subject: CN=055fe36c34b4c5a752a337c7879fa72587c547d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a6:f1:20:b1:d7:4c:50:2b:6e:8c:c5:0f:9b:
d3:13:bd:56:4d:1c:4b:c5:33:7b:25:fe:3f:28:f2:
57:78:cf:32:98:45:e3:70:9d:58:b4:a0:37:38:4f:
dc:77:8f:a5:a8:f0:00:3a:4f:e4:35:d9:b4:80:42:
1c:05:d5:6b:e7:6c:81:6f:2b:5a:14:5d:2a:b3:bb:
8c:b4:d7:50:8d:6d:d3:ca:8a:fb:a2:fb:6b:30:bc:
67:1b:de:7b:54:ab:b2:2b:0f:41:ce:e7:0f:97:62:
0c:d4:fd:c5:cb:0f:fc:2e:b0:5d:bf:cc:78:35:4c:
fb:2c:ae:a0:af:58:25:9c:0d:bb:39:b2:2f:f2:60:
63:3f:3b:f3:68:b1:6e:6c:34:01:dd:ce:11:56:85:
4d:29:b6:b2:03:88:78:7b:aa:7d:a7:c9:6f:0f:a1:
6d:0b:8f:05:83:55:86:0d:bf:75:5d:c9:c5:20:8f:
b5:8e:5d:89:d9:66:73:f5:62:d4:e2:06:fc:42:74:
1b:00:b7:29:72:49:2b:2e:52:45:0b:2f:10:fb:00:
3e:1f:9e:55:ab:a0:f4:7c:57:49:75:c4:97:13:43:
0d:bd:81:c7:db:f2:48:62:86:d3:cf:0e:82:f6:ca:
00:a5:a7:f0:76:7f:7b:ea:96:a1:5a:b5:16:5b:da:
70:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5F:E3:6C:34:B4:C5:A7:52:A3:37:C7:87:9F:A7:25:87:C5:47:D2
X509v3 Authority Key Identifier:
keyid:EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b6:16:b4:d2:53:ca:ad:5f:3f:87:24:e3:7e:31:b5:29:ce:
c2:80:53:50:3c:6c:48:8b:6d:e7:0e:7a:23:6a:59:3b:df:56:
17:de:55:59:3b:d7:52:da:9d:98:0c:d0:5b:6e:f6:2b:23:f9:
f4:00:3c:41:a9:df:64:ed:27:0a:8c:65:1c:b1:e8:a4:e4:ea:
49:bf:0f:77:a9:2e:a0:93:8b:4c:52:ba:7e:d5:4b:17:23:68:
39:37:1b:1c:c7:da:92:76:f6:df:33:67:ee:79:5a:bc:c5:ae:
28:b9:e1:3f:cb:fb:9b:01:78:13:c4:5d:69:d6:86:a7:13:bf:
e7:86:52:52:8c:b7:43:a3:8e:96:f0:d3:2b:de:b5:d1:b1:b2:
c2:27:8a:8d:29:61:39:ae:1b:53:88:89:3c:89:1f:e5:ed:2c:
b5:fd:fc:80:5c:75:1d:88:ea:e0:45:31:c4:9b:61:98:fa:5b:
a8:74:01:c5:93:2b:f4:18:72:68:01:42:d6:73:59:c1:7e:89:
69:5c:6d:04:25:7f:7b:cd:24:66:56:3c:2f:eb:50:78:19:51:
92:7f:01:91:3b:37:6a:d4:cb:ac:c4:ea:6c:5d:28:93:e7:69:
b2:7a:a5:d9:20:a6:44:97:1d:3d:c7:ae:ff:bb:46:04:f6:e2:
80:bd:26:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:38:40 2026 by rpki-client