Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
File: 7dnow7XdvumM1_7qDf-MdiW4Wp0.mft (raw, json)
Hash identifier: 28g2PKMDkxrQJATirDrRvm8mnHS6VxraiMSiw2EhKp4=
Subject key identifier: 14:A3:1D:05:DB:C1:B2:F3:92:77:BD:79:D8:75:CD:FD:37:E8:86:03
Authority key identifier: ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D
Certificate issuer: /CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
Certificate serial: 019CAA58CF8CECAAFCD95475EF631E0BD5EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
Manifest number: 0DB5
Signing time: Sun 01 Mar 2026 17:01:12 +0000
Manifest this update: Sun 01 Mar 2026 17:01:12 +0000
Manifest next update: Mon 02 Mar 2026 17:01:12 +0000
Files and hashes: 1: 7dnow7XdvumM1_7qDf-MdiW4Wp0.crl (hash: 1D/TeXZUJPS1RweS43qh8CHdRAmr5MB0mIfgunHeEpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:cf:8c:ec:aa:fc:d9:54:75:ef:63:1e:0b:d5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
Validity
Not Before: Mar 1 17:01:12 2026 GMT
Not After : Mar 2 17:01:12 2026 GMT
Subject: CN=14a31d05dbc1b2f39277bd79d875cdfd37e88603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ae:e8:92:03:4e:f4:6e:24:3e:45:ac:08:09:
4a:ff:0c:01:af:d0:3c:f4:b4:8d:31:ac:34:2e:6e:
36:ab:eb:e8:99:1a:1c:8b:91:ed:fb:30:4f:67:26:
97:8c:28:dd:76:32:ac:4d:3c:de:36:e1:ce:9e:e1:
6d:63:24:d7:fa:18:4e:e1:ba:ab:a9:c4:de:4f:49:
d4:2e:07:3d:5e:23:5a:04:6f:3a:c0:34:0a:99:81:
cf:b6:9c:97:30:2f:f6:b1:51:f9:bf:0b:a2:54:c1:
f9:37:d9:5d:51:62:4d:2b:a4:4e:16:32:18:c9:f8:
60:39:09:00:46:86:fc:e2:6c:d6:79:74:f1:d5:db:
7d:ec:57:ec:72:83:8c:30:f0:37:8e:5b:96:2b:17:
f4:d7:80:7c:04:2b:ef:b8:ff:46:e1:e1:b3:aa:5b:
b5:b3:73:34:8a:f0:68:65:64:03:9c:95:e6:33:a5:
5e:87:11:e7:d3:77:c2:e1:90:8c:f4:0c:ad:a3:bf:
c0:3b:67:9e:99:b0:b8:30:08:55:de:24:a2:77:bb:
42:0c:11:cd:36:f5:31:40:d3:d5:a6:70:09:12:67:
ce:6d:3a:04:df:80:20:10:8f:de:d0:a4:2f:42:7c:
1d:3f:f9:bd:0a:96:98:88:01:d3:82:1f:43:8a:68:
97:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A3:1D:05:DB:C1:B2:F3:92:77:BD:79:D8:75:CD:FD:37:E8:86:03
X509v3 Authority Key Identifier:
keyid:ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:68:53:37:09:9d:6a:22:12:7d:d2:86:38:9a:aa:46:7a:94:
aa:cb:d4:fa:15:ea:56:f6:1e:85:90:fa:5e:ed:58:5b:86:12:
a8:3a:68:65:bd:ab:dc:a0:54:c8:5c:32:c0:c4:89:ef:85:6b:
93:08:ce:83:ba:c9:7e:bc:8b:b5:c7:12:e9:0d:22:c3:3f:39:
8c:9a:f9:37:03:ee:53:3d:00:5d:a8:38:ba:cf:b4:cc:c2:b2:
d7:b1:f4:98:fc:74:76:a5:55:50:bc:a0:27:62:16:29:89:83:
90:ba:0f:d1:79:9c:ed:6d:c2:3c:09:61:9c:c7:89:5f:4b:a3:
d5:82:93:3f:55:90:4a:6f:fc:4c:88:06:a7:4d:3f:20:fc:46:
58:fa:0b:80:cb:b2:b5:39:eb:c6:8d:3b:69:d1:f2:2a:df:89:
c6:76:e6:3e:51:aa:ef:8a:63:30:0c:88:b7:34:13:a9:2a:80:
b3:2d:4f:23:c0:ce:9e:d5:7a:f5:73:ac:f2:9b:db:4d:ed:f4:
79:66:0a:ca:9f:4e:6b:87:ee:96:b2:37:6b:f9:ea:cb:55:96:
aa:21:ba:13:13:14:51:b1:a6:d5:d9:5e:1b:1e:ea:6b:2e:56:
3c:ac:26:0b:74:bf:de:02:52:f2:bd:c8:c8:e6:f9:c1:1d:51:
8a:43:9d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:50 2026 by rpki-client