Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
File: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft (raw, json)
Hash identifier: ZR9q3FJfIW4yPERqv5IO+pv+ZRKl85Ot6l6rI7CvMJA=
Subject key identifier: 04:52:DD:7F:B9:2C:C8:73:F7:75:6F:08:C8:A8:0C:4B:11:39:FF:AE
Authority key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
Certificate issuer: /CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Certificate serial: 019CAC10280769057B4A67A7B21012CB2487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
Manifest number: 05CA
Signing time: Mon 02 Mar 2026 01:01:05 +0000
Manifest this update: Mon 02 Mar 2026 01:01:05 +0000
Manifest next update: Tue 03 Mar 2026 01:01:05 +0000
Files and hashes: 1: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl (hash: yQHmrYwomQAOPzjuqxgM3s6TbSxJIo2favLLMH+OZXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:28:07:69:05:7b:4a:67:a7:b2:10:12:cb:24:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Validity
Not Before: Mar 2 01:01:05 2026 GMT
Not After : Mar 3 01:01:05 2026 GMT
Subject: CN=0452dd7fb92cc873f7756f08c8a80c4b1139ffae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c2:3e:97:b8:0e:4d:ec:b6:3f:21:f5:72:f7:
c8:2b:fd:1c:9c:21:be:02:2f:a3:a4:d7:eb:54:f1:
10:8f:08:c8:94:4b:8b:8e:5f:fa:55:54:6a:0e:e6:
f4:c8:be:cb:3e:4f:b9:aa:6a:d7:99:ba:fe:a9:db:
00:40:9c:07:b0:34:5d:3b:06:31:9c:e0:4a:44:55:
e2:dd:6e:91:ee:fa:c7:2c:fb:8f:2f:8c:5f:a4:8e:
86:e3:d8:33:3b:b9:3a:11:15:11:2d:fa:7a:4e:e6:
a4:28:71:46:62:76:b4:32:95:b7:61:77:26:6e:84:
55:3c:11:6d:87:f1:90:3a:5a:77:b5:55:12:4f:95:
ac:8b:82:fe:09:2b:26:99:df:c8:a3:c0:fd:3b:ce:
bc:56:0c:5e:36:d8:ad:7c:b9:c9:3f:ff:19:c6:8b:
df:0c:94:0b:7a:07:00:1b:f7:50:d0:29:3b:35:da:
04:76:14:c9:43:89:7f:5c:99:98:aa:4b:ed:07:97:
e6:3d:73:2b:0e:f6:e8:7d:9f:ab:a8:de:86:47:fb:
56:1b:b6:a4:3a:3b:6d:25:f1:df:52:68:53:b5:6f:
ba:ea:11:bf:85:d8:f7:a9:91:f1:f2:0a:b2:1d:1b:
e7:0d:f2:b3:d5:9b:d7:45:f2:f2:21:ef:8f:3e:d3:
81:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:52:DD:7F:B9:2C:C8:73:F7:75:6F:08:C8:A8:0C:4B:11:39:FF:AE
X509v3 Authority Key Identifier:
keyid:EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:2b:33:8d:30:4b:bb:5c:6e:62:be:59:3c:7b:86:80:b6:67:
d4:08:02:dc:1e:63:b9:27:21:bf:c7:5f:26:fc:4d:a3:ba:e6:
c5:89:2b:dd:8a:42:9c:51:0e:15:d1:93:72:95:ee:7e:ab:19:
6b:21:0e:31:98:80:f5:95:9f:54:8c:fd:95:79:19:23:82:f1:
2b:a7:a2:93:f3:b9:7f:89:5d:e1:f5:81:8c:fc:b4:f6:94:26:
6a:ab:d0:f2:7b:10:18:3c:ea:29:cb:ff:c3:1d:59:29:12:e6:
4c:32:56:e0:d0:91:a2:f3:73:d0:d1:f4:5c:47:97:32:8f:50:
8f:ba:ae:aa:8e:f4:0b:48:be:b2:d2:96:7f:52:57:84:2a:3c:
b0:b1:9a:12:e1:01:f6:d9:9e:7f:bb:0e:99:4f:e1:50:8f:a3:
e5:1b:08:1b:3c:2d:ea:f7:8e:13:a0:53:7c:a0:74:9e:83:2b:
78:2f:9f:df:ea:03:a4:f9:95:1c:53:8b:69:ec:a1:76:25:db:
2f:0c:99:a7:16:ca:f6:93:fa:73:94:c5:f5:3d:42:e8:de:c7:
12:de:b6:af:43:74:60:06:00:f0:fb:ea:93:7f:6b:f5:1a:dc:
53:7d:98:cf:69:2b:c3:2c:32:43:77:a9:64:b0:3e:cb:49:86:
76:7c:1f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:00:50 2026 by rpki-client