Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
File: p7ZLX1AsUfocwRSIHLpStansHsg.mft (raw, json)
Hash identifier: WSlBUYLKwJl8D3oNUclBJFcDpBZK6Jj6LVkNv0ixo0E=
Subject key identifier: 68:C1:FD:3E:85:A7:E7:B9:5D:87:28:1F:AF:F9:00:05:71:6F:57:E7
Authority key identifier: A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
Certificate issuer: /CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Certificate serial: 019CACB57E2507CEE0978F17ED2CD6A6E39B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
Manifest number: 0BB7
Signing time: Mon 02 Mar 2026 04:01:41 +0000
Manifest this update: Mon 02 Mar 2026 04:01:41 +0000
Manifest next update: Tue 03 Mar 2026 04:01:41 +0000
Files and hashes: 1: p7ZLX1AsUfocwRSIHLpStansHsg.crl (hash: lscctBpDR6VJjALti6niwA3L0Lqy1amUUFeGXVvpltM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:7e:25:07:ce:e0:97:8f:17:ed:2c:d6:a6:e3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Validity
Not Before: Mar 2 04:01:41 2026 GMT
Not After : Mar 3 04:01:41 2026 GMT
Subject: CN=68c1fd3e85a7e7b95d87281faff90005716f57e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1a:de:6d:60:9d:c1:b2:d8:c9:07:67:73:47:
96:6d:60:10:fd:f8:1e:9e:d4:38:2e:02:a2:a5:d7:
b7:22:b7:33:0d:1b:2f:fc:4c:93:45:71:41:04:13:
49:46:cb:45:18:73:3c:b9:a9:62:c4:6d:c0:c7:d6:
a9:e5:ba:71:8c:b4:0d:ae:01:7a:3b:94:74:0c:64:
9d:d8:d5:53:3d:6e:64:4c:36:21:18:7d:64:21:56:
09:6d:e7:38:26:38:83:2c:30:2f:7d:83:c5:32:f3:
fa:b1:f6:b8:20:d0:0d:b4:87:e3:f3:2b:87:45:90:
5d:be:e2:ae:1b:20:f7:1b:8f:a4:54:8c:bd:33:87:
b9:04:d5:02:d7:cd:b3:2c:05:39:e8:33:6b:6a:20:
92:84:27:65:91:79:0c:70:35:7a:d8:80:94:6d:00:
ef:d5:58:5d:07:0a:97:86:cc:e7:75:05:13:65:cc:
4b:1a:26:42:f7:f2:f8:91:a3:37:16:16:3a:b5:48:
92:75:f1:8b:78:a0:ea:59:31:99:b4:78:ac:44:a8:
ee:c2:28:88:1c:48:79:9f:de:50:a7:c7:85:a8:f8:
27:d1:e2:e1:a6:73:25:0e:2b:8a:37:73:aa:82:11:
63:3c:27:79:e3:f7:dc:a5:dc:b0:0e:38:03:c4:79:
a1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C1:FD:3E:85:A7:E7:B9:5D:87:28:1F:AF:F9:00:05:71:6F:57:E7
X509v3 Authority Key Identifier:
keyid:A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ce:ee:86:0f:44:ef:7f:78:e3:2c:b5:17:b9:eb:dd:89:3c:
2c:a5:47:a3:36:b9:60:ab:ed:74:4f:af:45:5e:a8:43:8a:7d:
9b:44:c1:cf:8f:ed:38:1d:83:87:0c:32:14:ea:a4:6e:13:cb:
44:96:93:27:c4:05:0b:d2:32:1d:b7:75:a8:f7:a6:f9:25:35:
18:cf:ba:c1:c5:20:0a:8e:03:79:63:42:f6:37:3f:74:98:e2:
0a:de:d8:14:6e:87:9d:5a:19:39:c0:58:cf:45:2a:09:d5:d6:
83:95:70:ba:f7:63:db:d9:74:5b:eb:91:4b:d9:68:83:b3:bd:
3a:74:c9:09:2a:da:fe:b9:42:a5:d8:49:1f:d0:1a:c1:10:13:
36:a1:77:09:e4:40:73:09:76:9c:95:f4:69:bf:03:38:2c:85:
59:c3:70:b1:88:fc:9e:10:3c:5e:fc:16:5b:76:e8:ea:54:fd:
a7:6c:30:d6:c6:47:cf:37:94:37:d0:cc:5b:da:2a:70:7a:e4:
3e:cf:94:dc:0e:31:7b:74:77:da:b9:10:63:35:eb:92:41:82:
0c:90:9d:96:ba:fd:e1:c5:b1:08:0a:12:d8:21:97:29:ce:8e:
eb:dd:c7:0e:3e:63:a3:41:4f:3c:fb:d1:b3:73:47:3c:37:12:
9f:f7:df:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:46 2026 by rpki-client