Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
File: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft (raw, json)
Hash identifier: eOkFVKTzpW0PJLbDCZZwLyms9k5k79kPRuAmzuJcsgU=
Subject key identifier: A1:1E:A7:82:C2:67:D7:D0:EB:15:4A:79:E5:AE:3C:43:8E:5D:90:DB
Authority key identifier: EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
Certificate issuer: /CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Certificate serial: 019FA89A14FD40D636B41F77DF647F94016E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
Manifest number: 0E54
Signing time: Tue 28 Jul 2026 12:01:37 +0000
Manifest this update: Tue 28 Jul 2026 12:01:37 +0000
Manifest next update: Wed 29 Jul 2026 12:01:37 +0000
Files and hashes: 1: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl (hash: ZkF+krj+jBB/OFMXr4p/93qEmcWDX3O+JCju8tIvflY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:14:fd:40:d6:36:b4:1f:77:df:64:7f:94:01:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Validity
Not Before: Jul 28 12:01:37 2026 GMT
Not After : Jul 29 12:01:37 2026 GMT
Subject: CN=a11ea782c267d7d0eb154a79e5ae3c438e5d90db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9a:f1:8d:79:a4:bc:61:9f:5e:cb:37:f3:02:
c3:99:27:a0:52:6c:d9:3d:0d:80:77:31:f8:7d:fe:
d2:16:d4:97:4f:0e:ea:f4:70:db:0d:a9:11:8d:69:
e0:12:ae:8b:70:ff:ce:ff:22:4f:55:eb:2e:48:1b:
e2:48:f6:6c:bf:0f:2d:be:4f:fb:9e:df:49:68:6f:
0c:f9:74:59:9b:c6:55:d9:67:f3:30:e5:76:fd:d5:
0c:54:24:1e:5a:08:49:bd:2d:51:71:f2:c6:2f:f0:
65:30:34:c9:c3:b6:64:91:91:38:ea:da:9c:95:e7:
b2:cf:71:65:f8:6e:c7:b3:74:43:36:3a:f0:a9:05:
38:c6:2c:6a:e9:bd:45:43:1f:8a:c9:0b:22:db:03:
94:6c:43:2d:30:b2:3b:11:47:3e:50:7d:05:3d:48:
d4:65:b8:0a:9f:bf:23:6d:e0:00:dc:f5:f8:be:3f:
2d:81:58:09:f2:89:3d:10:73:91:43:a1:3d:79:3d:
f0:5c:15:fa:70:9c:80:70:97:0d:ee:24:2e:ea:e5:
c5:17:cc:7f:4d:c5:5e:df:8d:98:93:f6:63:05:01:
3a:d8:7a:da:e2:5e:6b:ef:c8:fe:4d:1c:b3:b4:4a:
a3:66:ad:81:63:37:6a:c0:b2:db:75:48:75:6f:40:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1E:A7:82:C2:67:D7:D0:EB:15:4A:79:E5:AE:3C:43:8E:5D:90:DB
X509v3 Authority Key Identifier:
keyid:EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:75:50:d4:07:56:3e:42:9d:b3:eb:16:54:1b:7d:f6:ef:c2:
67:f1:ef:e5:02:de:d2:31:36:89:f9:99:fb:92:c2:26:bd:98:
61:b9:27:b1:a9:8b:2d:b6:2a:5a:22:f7:3c:d3:6f:90:e8:16:
2d:46:0d:89:96:a9:5b:23:b0:6b:30:87:de:4e:2e:bb:9a:ca:
bd:09:07:dc:3f:11:a4:d4:f0:67:aa:ae:d8:c5:10:fb:bc:39:
c3:a7:d0:db:c9:e9:95:44:f0:80:ff:6b:4d:1d:28:6c:27:c6:
2a:b7:a3:37:1d:29:f4:7c:92:7f:eb:67:49:c1:9c:02:4e:62:
bb:97:a0:1b:fd:3d:43:b9:ec:d5:3f:fd:4e:a3:da:3f:86:05:
33:1b:ee:12:3c:ef:93:fb:8d:65:2a:7a:6a:9b:c0:a7:5b:21:
9f:17:55:2f:71:e1:06:b9:3d:60:f1:30:f5:06:6e:1a:d7:ea:
d0:aa:29:f7:12:24:0e:33:60:d3:6b:c8:3d:21:29:38:9e:8d:
01:75:34:c0:9c:32:e2:c1:c1:d1:b3:2d:1a:7d:4e:1d:a1:c4:
79:e2:51:84:8d:da:02:b7:22:f1:e7:96:c2:56:1a:0f:94:3c:
9a:b5:e1:e3:74:d1:70:98:3c:da:d7:40:a4:72:ff:b8:61:4a:
74:c9:ff:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:31:24 2026 by rpki-client