Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
File: 7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft (raw, json)
Hash identifier: NNmgstHUqIRPe0Ky4xOODFzj2iupLr2fisFTgRskhF8=
Subject key identifier: C1:49:59:A3:AF:6C:C1:84:FB:C5:7B:4F:D1:BC:DF:49:7E:A4:EF:DF
Authority key identifier: EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74
Certificate issuer: /CN=ee2c6d6284f1165d09ebedb44de6175fe033b774
Certificate serial: 019CA97CE4A385707741EAB70AC26DC19B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
Manifest number: 0BA3
Signing time: Sun 01 Mar 2026 13:01:00 +0000
Manifest this update: Sun 01 Mar 2026 13:01:00 +0000
Manifest next update: Mon 02 Mar 2026 13:01:00 +0000
Files and hashes: 1: 7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl (hash: yRyktg3sk6/LBKd3lDtbHjzFdtveYrjriMN0g+pN9wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:e4:a3:85:70:77:41:ea:b7:0a:c2:6d:c1:9b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c6d6284f1165d09ebedb44de6175fe033b774
Validity
Not Before: Mar 1 13:01:00 2026 GMT
Not After : Mar 2 13:01:00 2026 GMT
Subject: CN=c14959a3af6cc184fbc57b4fd1bcdf497ea4efdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:9b:20:e2:b3:17:ca:b3:c6:49:58:a5:90:
7f:29:b1:4c:df:70:0f:4c:e0:22:26:4e:12:ea:3f:
84:27:5c:f2:6f:5f:24:55:ae:a3:90:19:5b:8c:33:
00:a8:c4:a8:04:25:a1:1f:cf:f8:ee:b3:5f:18:65:
cb:72:0d:ca:5f:b3:25:aa:42:30:88:5d:bb:e5:c2:
22:33:9c:71:ff:03:a0:d4:7b:67:15:cd:6e:32:d1:
69:02:be:f0:c3:9f:b8:54:a0:b5:6b:ff:29:94:e4:
9e:04:2a:5f:a9:63:8c:16:77:19:0e:7a:2f:eb:1f:
4f:3f:a4:e9:be:fc:b5:4a:20:ce:3f:53:df:54:64:
f6:60:c3:67:2a:9c:b0:f9:98:cf:1f:db:be:47:56:
63:af:b5:fe:64:9b:b5:56:79:0f:69:8a:41:b5:58:
ef:e8:b5:f8:50:98:b2:00:62:8f:c0:9d:98:ad:b4:
17:d4:26:9b:2b:11:00:15:e4:a1:25:f6:cd:e9:d4:
31:87:a1:b6:2a:50:a5:05:8a:bb:33:3a:72:7b:3a:
ae:14:78:76:fa:40:46:67:b1:60:74:22:38:59:b4:
1a:80:0d:7b:db:14:ee:ac:88:a0:46:e6:c3:93:c7:
24:53:ce:d7:f3:a4:8a:56:7a:8e:8d:b6:f4:49:72:
4b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:49:59:A3:AF:6C:C1:84:FB:C5:7B:4F:D1:BC:DF:49:7E:A4:EF:DF
X509v3 Authority Key Identifier:
keyid:EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:3e:2a:df:56:8c:d8:18:87:52:d5:cf:83:8d:39:12:04:ae:
39:6a:88:fc:01:3e:52:5e:fe:38:58:ef:11:c5:1d:9e:68:27:
5c:fa:9a:44:19:c8:75:db:f5:75:75:22:10:38:4b:3d:d6:db:
ee:af:ee:fc:8f:0a:37:6c:aa:1a:20:5e:46:5f:1f:e7:c4:64:
60:6e:54:44:09:e7:dd:de:12:ef:43:57:f7:93:ff:b9:04:ce:
0e:48:6c:2d:59:1f:05:7a:69:a7:df:2d:58:90:18:e7:76:54:
b8:1c:e0:aa:d8:68:47:a7:40:84:9c:36:4d:1b:ef:aa:22:0a:
e0:e2:f0:16:14:87:b7:e3:f4:21:a1:37:14:f1:e6:07:6e:cf:
53:f8:0f:ef:1b:b2:af:97:fd:79:be:cd:ca:ce:fd:cf:27:bf:
95:ff:97:bc:c5:3a:6d:51:6a:0f:d4:7d:9a:ed:1c:3b:a0:05:
a3:88:53:b8:82:1c:24:a3:b2:b7:56:f9:9d:70:d0:0c:97:34:
cc:2c:7d:8d:c4:67:da:3b:c0:34:b4:46:4c:aa:d8:f5:01:60:
a2:7c:a0:6e:97:55:92:62:ca:37:73:3f:e6:4d:d9:ed:6e:f6:
23:52:f6:a7:4a:63:78:11:b3:5e:6f:f2:a1:27:d1:9f:34:5d:
59:ff:a5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:40 2026 by rpki-client