Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
File: tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft (raw, json)
Hash identifier: t8SwL7MHSUyveU/M3+h/cIQsJ+9AtQeuM7tcuVlC63s=
Subject key identifier: 0B:6A:44:56:8F:E4:89:A9:F5:40:19:57:23:40:2A:8E:50:60:35:60
Authority key identifier: B5:0E:DF:C9:6D:2B:61:78:86:89:53:31:42:96:9E:65:56:65:12:AA
Certificate issuer: /CN=b50edfc96d2b61788689533142969e65566512aa
Certificate serial: 019CAC47929D4B926F2994575B6537DD1033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
Manifest number: 17C7
Signing time: Mon 02 Mar 2026 02:01:37 +0000
Manifest this update: Mon 02 Mar 2026 02:01:37 +0000
Manifest next update: Tue 03 Mar 2026 02:01:37 +0000
Files and hashes: 1: tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl (hash: 2YK+z8khWzTy017UW+fEOBbpzZxRRZZQBEcyaBIJkRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:92:9d:4b:92:6f:29:94:57:5b:65:37:dd:10:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50edfc96d2b61788689533142969e65566512aa
Validity
Not Before: Mar 2 02:01:37 2026 GMT
Not After : Mar 3 02:01:37 2026 GMT
Subject: CN=0b6a44568fe489a9f540195723402a8e50603560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ef:7a:88:ec:3d:18:f3:31:a0:4d:c5:b1:05:
d4:a3:61:26:3f:72:02:00:20:68:26:99:b2:4e:14:
6f:ac:fe:d3:f9:fd:ef:03:d7:0d:f2:ff:cd:28:37:
4e:17:a3:56:57:42:5e:85:15:6f:1b:09:9f:16:ad:
8c:22:7c:81:7b:35:d7:e6:42:1f:ac:49:b2:18:5a:
88:ac:6d:ff:75:fc:58:09:d4:56:8f:4e:26:b4:4b:
0c:c7:c6:2f:bc:18:ee:e5:a9:b6:60:73:4d:f5:3c:
17:85:95:61:be:d4:9d:1d:6a:35:c4:00:9e:4a:ce:
da:7f:63:a6:55:5f:b4:2a:1a:55:84:e3:02:2c:06:
5d:fd:a6:b6:6e:8a:69:9d:76:c3:2a:f0:56:6d:28:
57:4c:cd:f4:60:2f:02:3f:5f:80:85:53:eb:39:4e:
eb:90:4f:8b:d0:75:b0:20:1c:b7:35:09:af:1c:47:
86:3c:7e:18:9d:97:4e:32:e2:36:a5:24:bb:e5:76:
3b:3f:f0:45:29:05:a2:4e:5f:79:d5:78:1d:40:a6:
20:51:fd:cd:e7:a7:c2:3b:ae:03:25:24:e0:39:fc:
40:01:54:47:bb:ea:20:b7:8f:4b:15:99:f8:93:5a:
59:09:3c:03:36:44:ed:02:33:9a:bd:58:e3:b0:ec:
a3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6A:44:56:8F:E4:89:A9:F5:40:19:57:23:40:2A:8E:50:60:35:60
X509v3 Authority Key Identifier:
keyid:B5:0E:DF:C9:6D:2B:61:78:86:89:53:31:42:96:9E:65:56:65:12:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ba:49:74:9f:e8:7e:86:fe:fb:f3:fc:80:5e:26:e9:f7:14:
f5:6f:9e:36:ab:52:65:15:3b:31:94:6d:89:86:84:f7:48:81:
31:bc:09:cf:33:e2:ca:12:ca:ec:ea:75:21:f1:05:4f:15:82:
79:a0:ee:84:60:86:d7:71:7d:a9:da:9c:53:db:ae:02:ab:b1:
f0:7a:bc:b5:91:ce:cf:e0:62:b6:d2:4e:de:48:55:72:80:6d:
3a:29:e2:cf:a4:9f:c0:f1:ad:5a:08:9c:26:d6:fe:03:3b:9b:
40:91:42:37:e6:2c:34:eb:a3:7e:5e:ed:8b:f0:6d:7e:b3:c9:
3c:1f:46:48:12:b5:3e:84:37:0a:a8:ee:c4:3f:55:d5:43:6e:
e3:00:94:14:4f:b5:ac:84:5b:69:f1:8e:21:9e:aa:74:ca:c6:
61:52:a3:a5:9d:07:08:eb:17:84:25:b8:bb:eb:bf:72:d5:3d:
8d:06:2b:6e:56:87:3e:16:24:7f:47:74:96:66:3f:4a:2d:66:
d0:b2:3d:b0:59:66:c9:7d:b4:02:b3:6c:9a:c9:d3:17:6c:88:
c7:c0:72:42:59:cd:11:8c:e1:35:41:2f:4c:11:a7:d1:e6:37:
c3:73:be:11:c1:25:f7:d5:e7:2d:6d:13:65:6c:5f:ca:77:32:
4f:62:8d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:09 2026 by rpki-client