
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
File: 7zxxAAZFDN50pBmnFDKY5VBm8mw.mft (raw, json)
Hash identifier: jh+aLWJsIPt7+/xl0nbQxydhckXN/6VmV2+YEmB53r0=
Subject key identifier: 3C:8C:2D:87:62:03:8F:E4:5D:DF:BF:49:66:23:92:40:F5:4B:09:79
Authority key identifier: EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C
Certificate issuer: /CN=ef3c710006450cde74a419a7143298e55066f26c
Certificate serial: 019CAAC64D303E8461EE88CB7852293EECE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
Manifest number: 0740
Signing time: Sun 01 Mar 2026 19:00:48 +0000
Manifest this update: Sun 01 Mar 2026 19:00:48 +0000
Manifest next update: Mon 02 Mar 2026 19:00:48 +0000
Files and hashes: 1: 7zxxAAZFDN50pBmnFDKY5VBm8mw.crl (hash: uYLiXwZHEERZOXRqklRkzLKQC+Fy8pI7lemzB0SC+g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:4d:30:3e:84:61:ee:88:cb:78:52:29:3e:ec:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3c710006450cde74a419a7143298e55066f26c
Validity
Not Before: Mar 1 19:00:48 2026 GMT
Not After : Mar 2 19:00:48 2026 GMT
Subject: CN=3c8c2d8762038fe45ddfbf4966239240f54b0979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:13:d3:58:4a:54:22:2d:f8:06:2a:2a:67:02:
b5:f8:b8:f7:74:91:ae:b7:d4:7e:d3:02:62:a6:86:
4a:44:bb:d8:9a:e7:38:85:42:02:cf:a9:0c:33:cb:
78:9f:a1:22:aa:f1:27:1e:30:1a:36:cc:68:6d:b5:
21:62:a2:dd:31:bb:c3:20:10:3a:1a:0e:a4:a0:4f:
e8:9e:25:cf:68:90:46:8f:5e:60:52:14:d9:35:03:
68:88:3f:18:18:65:e5:2c:72:6f:e0:ae:e2:02:84:
9f:dd:7c:f5:d8:36:ee:f4:23:1b:5c:d9:17:b7:37:
61:f0:f4:0c:6e:f6:d3:f7:51:cc:75:ad:ab:86:ce:
c6:5d:62:56:29:fa:48:21:e9:bf:3a:67:4f:c9:2c:
6b:14:4a:63:60:f8:1b:1c:7c:e1:42:fd:7e:2b:06:
a1:bf:72:cd:14:a4:d8:7f:ee:27:b9:3c:1e:a0:c9:
d1:40:8b:fd:a2:6d:ce:47:0a:f8:36:88:2a:10:bb:
9e:81:87:53:17:d7:7f:3e:9c:db:fb:af:1c:b5:97:
50:16:36:72:6e:89:c1:e1:26:99:d2:7b:b9:26:24:
da:bc:1f:14:c7:6f:c2:ad:6d:4b:b5:43:cb:05:13:
b6:62:e0:d6:ba:0c:7b:18:77:fa:f4:f5:a6:35:de:
23:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8C:2D:87:62:03:8F:E4:5D:DF:BF:49:66:23:92:40:F5:4B:09:79
X509v3 Authority Key Identifier:
keyid:EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:44:3c:f4:a7:a0:ed:29:64:4f:dd:8f:9e:e5:dc:e5:79:81:
18:24:f9:7e:9a:d0:d6:c5:14:6a:14:1f:db:7d:7e:5b:23:19:
10:6d:16:d3:6c:f1:dd:00:cf:f8:eb:fb:db:52:4f:e4:99:6f:
33:16:71:5e:8a:65:ef:41:b5:42:7d:47:82:fb:1e:82:7a:cf:
2a:0e:1f:7f:28:d5:8e:08:6b:fb:e8:82:1e:87:71:01:63:02:
26:29:35:e8:1e:7a:f8:d2:d5:8c:5e:30:87:a2:6d:ab:e5:e6:
57:17:8c:69:01:8b:9a:42:88:b0:07:70:6e:70:ba:14:9e:9a:
1c:c7:df:d3:48:02:3a:9e:5b:34:6b:95:bf:f7:ae:2b:1d:18:
c5:84:f6:1c:1b:10:14:1e:2e:9a:a5:12:5c:aa:90:6a:ad:84:
64:fd:43:13:29:94:41:74:62:ae:2d:0f:da:e3:16:ab:18:62:
f1:18:92:a9:ea:2b:65:15:8b:1d:67:a5:fe:e6:c4:c2:14:c8:
ef:83:9a:3a:be:c3:15:71:38:ae:ed:fc:e7:01:1c:dd:1d:67:
26:b3:27:ae:5b:56:03:5a:11:56:d1:43:35:1f:10:7b:69:78:
f3:da:38:c3:29:e5:c8:a9:26:d8:c4:24:9a:c9:94:b9:85:98:
2c:88:56:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:44 2026 by rpki-client