Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
File: p7ZLX1AsUfocwRSIHLpStansHsg.mft (raw, json)
Hash identifier: v2tiL9qO7YqYbbvUPHkB9l3lTXeapH+gaVd13dXrYgk=
Subject key identifier: E9:92:D6:BE:76:14:4C:F8:18:30:E3:FF:55:6A:94:C1:FD:C1:CD:52
Authority key identifier: A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
Certificate issuer: /CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Certificate serial: 019D9A3EA202CF1CA3FE1E179B06DE18349C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
Manifest number: 0C32
Signing time: Fri 17 Apr 2026 07:01:29 +0000
Manifest this update: Fri 17 Apr 2026 07:01:29 +0000
Manifest next update: Sat 18 Apr 2026 07:01:29 +0000
Files and hashes: 1: p7ZLX1AsUfocwRSIHLpStansHsg.crl (hash: wBH3rIKVRSB+T9DEn7v5LvxJQZNGJ+4K9aDKxhFY5sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:a2:02:cf:1c:a3:fe:1e:17:9b:06:de:18:34:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Validity
Not Before: Apr 17 07:01:29 2026 GMT
Not After : Apr 18 07:01:29 2026 GMT
Subject: CN=e992d6be76144cf81830e3ff556a94c1fdc1cd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:72:33:75:9e:a5:69:0d:dd:38:9d:1c:77:
89:80:13:30:b6:a7:93:d2:f6:82:e1:4d:33:94:bc:
7e:da:91:78:54:b2:b3:28:5c:63:03:13:70:5d:be:
b7:dd:7b:24:76:b6:a1:53:e1:4e:2e:82:9f:4c:c9:
1f:d1:ca:c4:bc:2f:43:e0:5a:d6:66:61:0b:af:47:
38:3e:c4:a7:15:bc:23:8e:c9:d5:7a:30:54:46:ad:
f3:ec:8c:10:19:09:51:29:b2:3e:2d:f0:fa:1b:5d:
71:c2:24:13:e3:4d:9c:00:9b:46:ec:d0:5b:ad:93:
59:42:ca:1e:3e:c8:e5:43:2d:81:d6:1e:5d:70:01:
0c:60:78:8f:74:aa:f0:42:1e:8b:da:4c:d7:0c:f3:
91:2b:75:3e:c7:12:3f:df:a9:1b:1d:cf:08:dc:8b:
99:01:d6:df:20:d9:45:43:40:7f:82:f5:b4:f9:99:
89:80:24:2c:ac:8f:e4:e7:78:0e:11:ce:57:0c:b3:
54:da:7e:2e:c7:7e:5d:34:92:7c:23:0a:2c:5c:b1:
fd:0d:33:3b:8c:7f:c9:1e:eb:80:f2:2b:97:cc:df:
b9:d7:44:38:28:e2:22:da:15:1e:5a:c2:59:74:b5:
9a:76:ab:84:1c:9f:5b:cb:34:da:bc:9b:b7:76:7f:
b3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:92:D6:BE:76:14:4C:F8:18:30:E3:FF:55:6A:94:C1:FD:C1:CD:52
X509v3 Authority Key Identifier:
keyid:A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d6:77:4e:67:71:36:92:cc:ff:f1:b3:76:3e:15:73:68:ef:
bc:80:4f:b8:3a:e6:e5:53:7a:9d:4b:d6:d1:20:c9:cf:ba:8e:
d5:34:c6:8a:0f:f1:b1:68:ad:cd:ec:9b:56:ae:52:83:5b:99:
a3:3f:5b:28:1e:0f:42:38:52:f3:9c:7d:43:5c:1c:c4:f4:6c:
1b:2f:0b:4c:54:45:11:d4:44:96:4c:1f:a4:9f:eb:c4:27:cf:
69:b0:fa:c4:1c:ef:e8:f8:3a:ff:c2:cb:53:cf:1b:c0:f1:20:
ed:78:a1:ec:5d:21:30:c6:76:25:3c:d0:be:97:84:96:00:9b:
b5:49:b5:73:6e:92:09:11:16:15:88:e2:e4:ce:6b:77:f5:85:
0a:fe:56:f5:37:21:d1:1f:ac:6b:c9:63:87:28:c2:20:6e:fb:
1c:5c:02:43:cc:89:88:ec:2b:d8:29:13:37:92:e1:80:45:12:
6e:6e:5e:7f:0b:bd:50:d6:3a:f2:48:dd:ca:4e:ac:4c:65:61:
9d:26:ab:35:af:00:ac:3a:77:d9:8f:77:ab:a2:79:10:83:76:
5a:f0:07:a6:8d:77:c6:e3:d1:66:31:e9:db:0e:c1:2f:6e:e9:
43:47:f6:4b:78:d4:77:59:bb:cc:21:8e:8a:00:d5:fc:78:b1:
32:69:51:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPqICzxyj/h4XmwbeGDScMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YjY0YjVmNTAyYzUxZmExY2MxMTQ4ODFjYmE1MmI1YTll
YzFlYzgwHhcNMjYwNDE3MDcwMTI5WhcNMjYwNDE4MDcwMTI5WjAzMTEwLwYDVQQD
EyhlOTkyZDZiZTc2MTQ0Y2Y4MTgzMGUzZmY1NTZhOTRjMWZkYzFjZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJByM3WepWkN3TidHHeJgBMwtqeT
0vaC4U0zlLx+2pF4VLKzKFxjAxNwXb633XskdrahU+FOLoKfTMkf0crEvC9D4FrW
ZmELr0c4PsSnFbwjjsnVejBURq3z7IwQGQlRKbI+LfD6G11xwiQT402cAJtG7NBb
rZNZQsoePsjlQy2B1h5dcAEMYHiPdKrwQh6L2kzXDPORK3U+xxI/36kbHc8I3IuZ
AdbfINlFQ0B/gvW0+ZmJgCQsrI/k53gOEc5XDLNU2n4ux35dNJJ8IwosXLH9DTM7
jH/JHuuA8iuXzN+510Q4KOIi2hUeWsJZdLWadquEHJ9byzTavJu3dn+z9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmS1r52FEz4GDDj/1VqlMH9wc1SMB8GA1UdIwQY
MBaAFKe2S19QLFH6HMEUiBy6UrWp7B7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDdaTFgxQXNVZm9jd1JTSUhMcFN0YW5zSHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9hODdlNmItYTAwMy00NTNjLWJjMGQt
NDJkZjMxOTc0ZDY4LzEvcDdaTFgxQXNVZm9jd1JTSUhMcFN0YW5zSHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9hODdlNmItYTAwMy00NTNjLWJjMGQtNDJkZjMxOTc0ZDY4
LzEvcDdaTFgxQXNVZm9jd1JTSUhMcFN0YW5zSHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdZ3Tmdx
NpLM//Gzdj4Vc2jvvIBPuDrm5VN6nUvW0SDJz7qO1TTGig/xsWitzeybVq5Sg1uZ
oz9bKB4PQjhS85x9Q1wcxPRsGy8LTFRFEdRElkwfpJ/rxCfPabD6xBzv6Pg6/8LL
U88bwPEg7Xih7F0hMMZ2JTzQvpeElgCbtUm1c26SCREWFYji5M5rd/WFCv5W9Tch
0R+sa8ljhyjCIG77HFwCQ8yJiOwr2CkTN5LhgEUSbm5efwu9UNY68kjdyk6sTGVh
nSarNa8ArDp32Y93q6J5EIN2WvAHpo13xuPRZjHp2w7BL27pQ0f2S3jUd1m7zCGO
igDV/HixMmlR2g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:24 2026 by rpki-client