Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.mft
File: _u7-64gyDdP1gKaLWxzwpiQxBcw.mft (raw, json)
Hash identifier: flITsUpML3h2Rp1MIenC3FnQtrSz7UlW/3RaxSr24PU=
Subject key identifier: 2B:07:A0:D7:E8:26:04:47:34:ED:95:3D:06:9B:7B:C0:26:6D:9B:5B
Authority key identifier: FE:EE:FE:EB:88:32:0D:D3:F5:80:A6:8B:5B:1C:F0:A6:24:31:05:CC
Certificate issuer: /CN=feeefeeb88320dd3f580a68b5b1cf0a6243105cc
Certificate serial: 019D9AE31BC04D5CB570EF9574318F545633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u7-64gyDdP1gKaLWxzwpiQxBcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.mft
Manifest number: 0C60
Signing time: Fri 17 Apr 2026 10:01:08 +0000
Manifest this update: Fri 17 Apr 2026 10:01:08 +0000
Manifest next update: Sat 18 Apr 2026 10:01:08 +0000
Files and hashes: 1: _u7-64gyDdP1gKaLWxzwpiQxBcw.crl (hash: AFMmNCK1r+e75Zrop0grxJ/sE5ERx8E59lVSQWf4zWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_u7-64gyDdP1gKaLWxzwpiQxBcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:1b:c0:4d:5c:b5:70:ef:95:74:31:8f:54:56:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feeefeeb88320dd3f580a68b5b1cf0a6243105cc
Validity
Not Before: Apr 17 10:01:08 2026 GMT
Not After : Apr 18 10:01:08 2026 GMT
Subject: CN=2b07a0d7e826044734ed953d069b7bc0266d9b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:92:eb:e1:c4:5c:34:6a:9e:26:49:41:22:
86:5f:ef:39:07:e1:d4:5b:84:c6:8f:c7:c5:ac:8b:
99:07:85:30:51:39:15:e0:60:6f:54:76:2c:fe:e2:
17:81:65:c0:e4:02:d5:bc:3d:1c:c0:21:e6:05:3b:
cb:1d:24:c0:ba:a0:21:91:cd:80:5f:5e:be:4a:d6:
56:ee:95:aa:a2:31:2b:d4:d4:fa:14:25:c6:a6:ff:
e6:a3:ce:90:10:6d:e3:2e:6d:b4:57:68:6d:58:d6:
bb:37:b3:fc:f4:e1:87:36:0f:67:f3:47:d1:89:6c:
52:0c:8d:23:d7:e7:79:ee:b9:b7:ba:1c:53:96:1a:
e0:8b:cf:a5:2f:84:6f:ba:2e:8f:4a:7a:5d:1d:e0:
b6:74:de:81:50:01:2e:0f:0e:19:ac:b3:8e:17:aa:
1d:b6:0a:e2:d1:a2:c0:a3:f8:17:64:10:96:eb:29:
4d:c1:91:e1:6a:82:fb:d7:a2:12:ca:4a:53:3e:04:
57:45:17:bd:1e:de:3d:89:c7:2f:e7:f8:d2:a5:29:
50:f7:ae:a7:b7:b9:a9:76:a4:0c:31:10:40:74:18:
d8:4b:58:fa:57:12:39:58:c6:9f:60:f0:b2:5d:6d:
75:96:b7:b1:64:64:2e:ee:67:32:4a:42:14:3a:eb:
c1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:07:A0:D7:E8:26:04:47:34:ED:95:3D:06:9B:7B:C0:26:6D:9B:5B
X509v3 Authority Key Identifier:
keyid:FE:EE:FE:EB:88:32:0D:D3:F5:80:A6:8B:5B:1C:F0:A6:24:31:05:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u7-64gyDdP1gKaLWxzwpiQxBcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:99:ad:38:02:25:b6:fb:cf:97:fe:ab:8d:4d:f1:4d:03:cf:
0c:64:62:5d:5b:68:9b:56:3d:18:2c:0e:14:f9:04:85:d6:21:
8b:a4:48:9a:30:d6:9a:1b:e1:49:f3:cd:18:0a:f3:55:df:29:
0c:de:15:31:23:3a:3c:8d:fa:4b:63:33:c5:f1:ff:36:2f:cf:
a2:c2:75:e1:74:c2:fc:43:dd:10:3f:23:28:ac:d1:cc:a8:94:
60:1d:15:4f:63:0e:08:fd:84:9d:41:22:0b:b2:83:ff:c2:34:
be:7a:52:88:fc:93:bc:29:40:93:06:fb:03:70:cc:45:37:a2:
40:c1:55:d9:c5:27:f9:b4:1a:68:3a:e3:85:8c:17:f5:6e:13:
a3:d5:f5:bb:ea:92:e8:56:f1:9e:5c:7c:3e:85:85:f3:f0:5e:
90:04:ae:89:c4:e3:04:21:e1:94:ee:e3:60:06:47:f7:16:3f:
ec:dd:aa:c8:da:d6:1c:86:a7:85:a6:c4:e7:d5:a2:4f:84:e1:
31:f5:4a:67:51:9d:29:b8:4f:55:73:9a:1e:fb:9d:c3:a4:4c:
61:45:10:fb:2b:8d:f8:b5:ea:7f:0c:17:4f:85:4c:5f:20:6d:
7c:f3:52:b3:fe:56:ea:ab:a0:e2:b1:1b:24:74:06:7d:7d:99:
7e:f3:94:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:18:41 2026 by rpki-client