Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
File: 7kDaG04w_7sypOSkt61zHAMeRCk.mft (raw, json)
Hash identifier: hG+N6sPFkZFr6u6VCXeuyAKm49KEAmkq9blcmq9yfHA=
Subject key identifier: A7:40:04:F0:85:DF:DE:1F:62:6B:8C:BB:06:B0:50:1E:45:28:E7:C9
Authority key identifier: EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
Certificate issuer: /CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Certificate serial: 019D28842D2228D075F4CBB49A62E0484314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
Manifest number: 071A
Signing time: Thu 26 Mar 2026 05:00:43 +0000
Manifest this update: Thu 26 Mar 2026 05:00:43 +0000
Manifest next update: Fri 27 Mar 2026 05:00:43 +0000
Files and hashes: 1: 7kDaG04w_7sypOSkt61zHAMeRCk.crl (hash: t21a7V90g00ye7+VnM9/+6bWc9pfJdv/fDOMYi0Azfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:2d:22:28:d0:75:f4:cb:b4:9a:62:e0:48:43:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Validity
Not Before: Mar 26 05:00:43 2026 GMT
Not After : Mar 27 05:00:43 2026 GMT
Subject: CN=a74004f085dfde1f626b8cbb06b0501e4528e7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:62:2c:8a:21:02:5e:3e:78:e0:3c:66:a6:
54:fc:dc:a1:37:a7:63:68:95:46:5f:aa:e3:e5:8e:
01:01:9a:6b:e6:4a:6e:ec:8c:7b:31:b1:52:e7:60:
de:29:0d:a9:b8:45:59:22:00:97:fd:af:7f:1f:5d:
15:7d:c4:57:83:c6:d6:89:d1:4c:1e:f4:9f:5e:4d:
f6:84:b6:07:17:8e:14:95:c3:06:37:fc:ee:03:41:
42:93:3b:ff:ca:b4:31:79:16:03:8a:46:e1:31:79:
c4:07:67:98:e7:2c:5b:2d:38:8e:47:e9:63:43:00:
e7:9c:19:f2:41:c1:2f:60:95:ef:88:d9:a0:4e:a3:
2c:35:53:f8:1c:cd:e5:c4:49:e5:30:ec:da:20:e0:
6a:1e:16:f2:ff:4b:31:28:4d:01:76:04:bb:a1:4e:
ea:7a:97:a9:0e:b8:15:41:d3:e7:a5:28:cf:75:c6:
2e:ec:fa:36:64:26:c9:9c:66:17:17:4d:fc:ca:0c:
b6:0e:a5:6e:7a:2e:4d:00:62:d0:de:d1:10:f6:4a:
d8:b2:29:51:ff:ad:d0:46:c3:59:e0:60:2c:60:9e:
45:eb:9f:2f:71:4d:58:60:07:91:61:8d:6b:be:ae:
ec:cf:fa:a4:58:ad:21:d9:6a:ff:6b:27:2f:e1:2b:
e7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:40:04:F0:85:DF:DE:1F:62:6B:8C:BB:06:B0:50:1E:45:28:E7:C9
X509v3 Authority Key Identifier:
keyid:EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4a:ce:88:1b:fa:b9:01:50:66:b7:26:da:06:7d:e4:b9:09:
db:f4:bd:d1:6e:13:58:c3:32:27:ed:54:53:2b:69:f0:51:f6:
5a:ef:55:55:ad:e3:72:a9:3c:b7:b2:12:0f:0f:4d:ce:56:e7:
ac:3d:e2:c6:56:8a:58:b1:9e:8b:88:3f:11:37:4b:43:fe:22:
f7:8a:8c:03:92:96:a2:b2:32:15:47:8d:14:7c:e5:28:02:f8:
98:5e:0d:eb:81:ef:2a:6f:4f:51:8b:e0:4f:6a:1f:8c:15:d1:
27:e1:97:97:04:eb:3f:63:15:d3:31:2c:8c:6d:56:90:c0:30:
57:e9:30:4a:82:a3:7d:50:08:78:75:04:3e:8f:16:06:fc:a2:
4d:4f:11:8f:0b:0f:62:80:0e:bd:fa:da:ee:ab:0e:a8:ba:46:
b5:d1:ed:d7:e5:e7:0a:67:1f:49:c1:f1:e1:f0:2a:15:4a:33:
1c:76:5f:8c:97:83:13:a5:3a:02:af:4a:bc:c8:1c:e1:f1:fb:
7c:14:7e:71:50:d5:d5:ae:e5:c7:86:ad:9e:f7:77:5b:36:51:
dd:79:4f:c3:3b:4a:e8:dc:6b:14:a8:c1:4c:4c:1f:a8:ac:6f:
30:23:c4:54:d3:a8:d0:55:3f:6c:b0:34:74:e2:55:a1:4b:fa:
9c:75:b0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:52:19 2026 by rpki-client