Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
File: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft (raw, json)
Hash identifier: hULBwFNtfXw8lpeZvuOg3IyiDb3SIPS0c4QDXE/PMeg=
Subject key identifier: F2:E4:82:44:B6:E7:A7:D7:5C:8F:0F:66:A7:08:25:5C:F6:11:85:3E
Authority key identifier: EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
Certificate issuer: /CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Certificate serial: 019D99627B0538E8F9F2271C04BDE67B6427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
Manifest number: 0D43
Signing time: Fri 17 Apr 2026 03:01:01 +0000
Manifest this update: Fri 17 Apr 2026 03:01:01 +0000
Manifest next update: Sat 18 Apr 2026 03:01:01 +0000
Files and hashes: 1: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl (hash: RU5U+NBsLF1OXTNowkkjrhxY/dpnNb1Vxon8tjF+MF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:7b:05:38:e8:f9:f2:27:1c:04:bd:e6:7b:64:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Validity
Not Before: Apr 17 03:01:01 2026 GMT
Not After : Apr 18 03:01:01 2026 GMT
Subject: CN=f2e48244b6e7a7d75c8f0f66a708255cf611853e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0f:da:17:c8:c9:bb:da:e7:bb:57:b1:53:75:
40:28:f1:71:42:26:91:6c:e6:7e:56:78:30:26:1e:
68:7a:66:e2:5b:f2:16:e8:32:1f:e7:43:b6:7d:4e:
f7:be:3a:a9:b7:20:82:dc:ba:8f:58:28:a2:07:71:
d6:6b:b5:0a:2a:39:50:59:4e:18:1f:bf:bf:4d:f7:
79:e0:26:cb:24:fc:f3:fd:8e:ef:7a:c1:43:bb:b1:
0a:94:8e:f5:56:4c:36:61:96:9e:26:30:95:a3:18:
18:37:1e:df:08:54:ee:fa:c2:77:05:d2:2c:3a:46:
a9:c8:78:b5:d2:7e:fa:cf:9c:84:da:b1:bc:4b:88:
81:fd:a6:1f:cc:6f:90:12:66:14:29:cf:03:5a:f2:
2e:94:a4:46:03:6b:c9:fd:30:32:69:c8:8e:25:e9:
24:61:72:8f:fd:c0:33:11:4d:30:57:ff:c1:36:f9:
14:88:02:19:ee:11:07:93:74:fd:ea:a4:25:5c:82:
5c:87:43:7c:fc:57:d8:0e:ed:98:39:bb:fb:db:47:
d4:2b:fa:68:5a:06:39:e1:6c:53:5c:d3:12:46:3a:
b4:f7:cb:d8:5f:37:60:4b:b5:95:fe:01:6e:a5:3d:
87:81:1a:e9:29:39:70:ab:85:2a:93:b7:b8:08:32:
f6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E4:82:44:B6:E7:A7:D7:5C:8F:0F:66:A7:08:25:5C:F6:11:85:3E
X509v3 Authority Key Identifier:
keyid:EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3f:c2:8f:e2:7d:ae:68:4c:9d:44:e3:78:ce:41:fa:74:09:
1f:c0:56:a7:34:4b:1a:d7:73:5a:db:44:2e:66:9c:5e:af:06:
fe:bc:e1:8c:d1:45:dd:e5:b6:9a:f9:db:d5:e2:9b:cd:66:89:
1f:07:e2:56:b2:16:3e:3e:8b:a9:db:cb:07:eb:da:ae:49:d6:
d6:d7:62:86:2c:4a:62:99:06:68:c7:1a:46:55:85:a1:ae:bd:
54:e4:df:82:64:24:b6:48:1c:f4:39:ec:21:89:a1:07:59:ea:
8f:c9:7b:b4:66:39:58:3a:40:01:01:75:38:39:87:99:84:11:
3b:f4:43:dd:f8:3b:78:14:6b:54:dd:52:77:36:16:d3:ea:98:
f6:b8:36:bf:7a:da:68:c0:e2:64:ec:9f:30:0b:7b:e8:c0:72:
49:b2:d5:3f:2e:35:a8:1e:5b:86:95:06:61:8c:95:64:d0:31:
05:29:80:46:92:d6:4d:c2:6f:a6:f4:26:6c:ef:49:89:c2:4b:
5c:b4:78:37:41:9c:92:69:1e:c7:0c:78:06:82:5b:dc:63:f5:
e3:42:fe:f1:40:4b:0e:cd:ec:7b:94:a6:a6:d4:30:24:42:66:
27:02:a5:84:83:fe:39:df:b2:a2:74:0b:2b:3c:e8:62:77:b8:
b6:32:6f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:23:53 2026 by rpki-client