Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
File: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft (raw, json)
Hash identifier: R8z2yhCsQLobOgCeJWq6SMwxY/seNUVKNB/7bgWXnrg=
Subject key identifier: C3:5E:5D:F4:72:0E:30:DE:A7:11:00:D1:DE:D1:F5:89:79:E7:65:E5
Authority key identifier: EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
Certificate issuer: /CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Certificate serial: 019E1D23314BAF0CD6E19D6771D931614BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
Manifest number: 0FE5
Signing time: Tue 12 May 2026 17:01:46 +0000
Manifest this update: Tue 12 May 2026 17:01:46 +0000
Manifest next update: Wed 13 May 2026 17:01:46 +0000
Files and hashes: 1: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl (hash: xX/UepZBzjcBWXBGKDh+Zj2CoHUg1ZrtXgaszcJvmXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:31:4b:af:0c:d6:e1:9d:67:71:d9:31:61:4b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Validity
Not Before: May 12 17:01:46 2026 GMT
Not After : May 13 17:01:46 2026 GMT
Subject: CN=c35e5df4720e30dea71100d1ded1f58979e765e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:f0:3b:a5:8b:81:82:3f:45:95:88:e4:1f:
3f:f7:e1:9f:dd:5b:21:b1:96:d0:95:04:ff:e3:bf:
7b:62:d8:c7:4b:a9:bb:6b:59:76:bf:c4:56:1c:dc:
ed:21:7a:b3:13:50:c5:4f:84:4d:f4:4f:47:a3:03:
7f:a8:f8:95:05:3b:aa:1c:15:eb:36:93:51:55:72:
b1:e9:3c:a5:e9:c8:39:9f:e6:5e:7c:f9:44:0f:64:
37:0d:f0:cf:d1:ae:cc:6a:ab:dd:d8:08:43:15:62:
54:91:3d:86:a2:cc:45:29:c0:9e:ef:e1:a1:8c:98:
9a:a3:19:d6:77:aa:e8:d0:4b:82:8c:fb:ad:d7:dd:
d7:54:f9:4c:e9:cf:9a:cd:aa:17:d0:4a:0e:1d:58:
ed:3a:72:b4:cb:cc:f7:a5:a7:c8:fe:0b:57:de:d1:
8c:95:d7:a1:a3:51:3d:99:be:cf:84:e4:83:8e:47:
7b:f6:ee:59:84:37:e3:34:48:17:e8:3e:31:65:2c:
57:92:66:96:fe:34:bf:b5:07:d9:27:11:48:3e:1e:
0b:60:7c:12:5d:8f:2f:77:8e:5c:f7:75:72:32:44:
e9:1e:3b:61:47:e3:8e:2f:be:bc:de:d0:65:27:04:
08:d0:89:93:18:de:50:ea:aa:d5:d1:77:9f:3e:66:
26:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5E:5D:F4:72:0E:30:DE:A7:11:00:D1:DE:D1:F5:89:79:E7:65:E5
X509v3 Authority Key Identifier:
keyid:EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8f:01:73:d2:da:86:e6:db:e7:70:68:14:44:8c:e7:7c:90:
9b:e1:2a:b3:a5:8b:de:eb:0f:0b:b8:1c:fd:ba:05:e0:75:bd:
92:45:c1:26:98:8c:1c:ff:f9:59:c8:ab:2d:55:e3:96:6c:4f:
51:79:00:95:c0:7f:06:b4:49:06:0e:36:54:24:1c:7e:1d:ba:
51:2d:c8:2a:20:f1:d3:0d:ad:7f:65:e6:d8:b2:87:68:3d:96:
ef:b1:50:f0:a4:6e:4b:3a:48:76:d4:26:62:66:da:90:cc:26:
9e:54:45:12:0c:d0:5f:f2:8f:da:e3:3d:cc:94:40:37:b8:3c:
c4:17:26:42:8a:1c:4c:3e:14:24:8c:1d:92:0f:99:33:07:13:
06:f7:d1:bd:af:b8:6c:96:f2:62:25:f5:87:6e:89:b3:18:28:
75:1d:0d:9d:36:aa:21:38:f3:a6:92:f2:ff:fc:0a:78:64:4a:
19:71:0c:b1:6a:8a:14:f6:d3:18:24:20:4c:24:f5:73:06:28:
aa:6a:ff:a6:df:48:de:22:3c:c6:3d:85:a7:73:97:6d:26:01:
cf:fa:a5:0f:dd:78:9e:39:c5:d8:a1:aa:b5:37:36:b3:d7:67:
6f:4f:57:50:ed:bc:c3:b0:06:07:01:20:f8:2a:f1:50:22:03:
46:6c:ee:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:57:11 2026 by rpki-client