Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
File: 7JjcJavXq2PjW2KOqsKlTZSan0Y.mft (raw, json)
Hash identifier: j4xd1UoMUZfQXjhUgpLAsVdI2Z9hhY5iB58hpzNTdd4=
Subject key identifier: 2E:CB:04:63:D3:B5:CA:F6:F6:07:08:D9:0B:C6:CB:15:02:68:96:03
Authority key identifier: EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
Certificate issuer: /CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Certificate serial: 019EBE7EDB99092E25B34949B79F64EE00A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
Manifest number: 0CDD
Signing time: Sat 13 Jun 2026 01:00:45 +0000
Manifest this update: Sat 13 Jun 2026 01:00:45 +0000
Manifest next update: Sun 14 Jun 2026 01:00:45 +0000
Files and hashes: 1: 7JjcJavXq2PjW2KOqsKlTZSan0Y.crl (hash: Thhrks77XmYGPVL+yKe4aEs7oNgQFMgPT6vAdetw/Sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7e:db:99:09:2e:25:b3:49:49:b7:9f:64:ee:00:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Validity
Not Before: Jun 13 01:00:45 2026 GMT
Not After : Jun 14 01:00:45 2026 GMT
Subject: CN=2ecb0463d3b5caf6f60708d90bc6cb1502689603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:70:55:4d:4d:ac:60:81:bf:98:fb:0d:29:
4b:0f:c6:6f:cf:0d:bc:02:b9:84:9f:77:ce:05:6d:
a9:0e:ab:93:6e:14:be:28:4a:2f:42:67:1e:d7:be:
74:35:a6:be:e9:11:43:82:96:8a:67:bc:36:ab:76:
95:47:40:40:5b:fb:c8:11:b2:e1:69:c7:59:fa:f0:
1c:ce:66:be:9a:01:16:24:6c:3f:9f:f9:bb:dc:0a:
6a:a4:f9:0d:52:14:d5:d4:77:35:15:7b:c4:ab:9e:
a1:61:d9:8c:75:42:d3:07:eb:85:29:a5:b2:e1:0e:
20:44:91:2d:b9:ff:9c:6f:c2:61:1b:5c:f5:ad:66:
2f:ad:3e:8e:2b:c7:5a:71:7f:5e:47:74:bb:0d:7a:
c1:0c:a1:7a:8b:80:ea:c5:4c:44:69:6e:3a:0a:f1:
f0:6a:13:b5:49:ae:89:aa:8c:79:a8:15:ab:f6:a6:
9b:e2:78:b7:c9:de:23:6b:7e:bd:e6:92:dd:1b:e6:
4c:0f:d7:5d:92:be:cb:2a:ca:e9:dd:22:ab:72:2d:
84:ea:44:d3:4e:34:6d:64:09:7b:91:d7:5c:1f:df:
d5:25:6f:78:43:ec:df:4b:9c:37:bc:e9:5a:d6:43:
f8:14:ca:07:45:eb:a7:57:1d:e3:7a:46:cb:7f:7b:
6f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CB:04:63:D3:B5:CA:F6:F6:07:08:D9:0B:C6:CB:15:02:68:96:03
X509v3 Authority Key Identifier:
keyid:EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:43:15:d0:0d:85:a4:a7:97:ea:3d:b1:6c:db:31:a0:94:4c:
0e:22:31:84:ce:55:6a:f6:19:9c:42:3c:63:fa:83:ff:ab:41:
8b:95:d0:12:e9:b0:ce:6c:84:f8:73:44:9e:f3:fc:00:5e:45:
77:95:2c:ea:6f:7d:ab:4e:62:02:20:90:aa:f6:8f:44:46:18:
24:44:75:7b:ec:d0:65:ee:ed:32:a3:94:5f:83:32:47:fd:6f:
06:37:16:60:79:2d:0e:ea:1f:76:0f:90:6f:8e:2f:d0:d6:75:
f5:ae:63:d3:ca:8b:e0:4e:e4:c1:3e:41:2e:bb:d9:ef:cc:3c:
04:c1:79:f3:78:6e:2b:85:32:b8:43:13:c3:9b:f9:e7:22:1e:
0b:9c:e4:42:6e:82:eb:e6:c5:4c:72:5c:17:59:27:be:cb:d4:
aa:90:14:d8:73:67:fd:a5:99:59:07:59:77:a4:4c:b8:47:83:
3d:29:a7:be:bc:d8:21:82:16:c5:c7:ef:e1:39:44:98:23:d5:
60:f0:7e:57:f3:14:3c:65:f4:f0:e9:35:dc:c2:ff:bf:d0:24:
16:12:95:95:b3:90:cd:e6:b9:6e:1f:b4:fc:58:2e:ed:de:9b:
71:51:c1:b2:d5:cd:ac:13:d5:9b:5d:9e:31:86:e0:3f:83:89:
df:2b:bb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:46:40 2026 by rpki-client