Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
File: 7oAELqPLNIc97Q6wZJWU4v8jkIE.mft (raw, json)
Hash identifier: 1ZZKFkIa+t4ekFtrIFRL0TQyynXw6bLOC9O4ThvNIvI=
Subject key identifier: F8:43:76:FA:7E:8B:BB:B5:65:DA:13:AE:25:6A:28:36:74:34:59:A5
Authority key identifier: EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
Certificate issuer: /CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Certificate serial: 019E1E355D06DC1E3ADB8C7F9DC4D36F1F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
Manifest number: 0D12
Signing time: Tue 12 May 2026 22:01:13 +0000
Manifest this update: Tue 12 May 2026 22:01:13 +0000
Manifest next update: Wed 13 May 2026 22:01:13 +0000
Files and hashes: 1: 7oAELqPLNIc97Q6wZJWU4v8jkIE.crl (hash: +VeajsEuboflwZtGjM8G4eorWkwGa4+aSWsu6HJMHdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:5d:06:dc:1e:3a:db:8c:7f:9d:c4:d3:6f:1f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Validity
Not Before: May 12 22:01:13 2026 GMT
Not After : May 13 22:01:13 2026 GMT
Subject: CN=f84376fa7e8bbbb565da13ae256a2836743459a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b3:84:14:f3:8a:ce:5f:8a:6e:08:f1:81:fa:
03:9e:fa:0b:97:18:6e:7b:00:33:1a:b0:61:88:b9:
2b:a4:6f:d2:94:e2:77:c3:1c:e6:5b:04:35:73:6a:
bf:ac:81:0c:05:02:e1:ac:1c:a9:c9:6f:6c:da:ae:
10:d6:11:27:2d:b4:75:fe:66:c9:86:34:1f:39:04:
a2:bf:cf:7b:7f:e4:ff:c4:a5:9c:0e:69:81:ec:d6:
32:d5:9f:ab:63:0c:67:43:4b:96:7b:47:c8:ef:fd:
e6:b8:a7:04:0a:d9:de:d9:43:5c:9e:47:e1:5b:75:
ec:43:24:6c:0e:af:08:c1:65:e7:56:ce:f7:04:fb:
0f:64:de:5f:6d:5a:0c:55:59:b3:bf:85:05:ac:4d:
3b:5b:5f:1f:88:5b:b0:02:b9:bd:9e:37:c7:5d:ff:
5d:99:d7:db:ba:1c:04:43:fc:47:eb:5b:5b:e1:03:
5e:53:7d:32:fd:13:cf:73:ef:b4:92:98:68:77:17:
4a:4e:d2:94:da:23:6f:e1:f2:3e:04:21:c8:7e:2f:
6b:b7:ea:0a:0b:5e:0d:7c:f4:ff:0e:8a:3d:9d:68:
00:5f:91:00:74:65:fe:58:61:b1:b0:2f:f3:56:a3:
e1:43:55:19:6a:84:61:61:91:ae:0b:a1:fe:3e:64:
9e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:43:76:FA:7E:8B:BB:B5:65:DA:13:AE:25:6A:28:36:74:34:59:A5
X509v3 Authority Key Identifier:
keyid:EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:70:18:6c:fc:26:ae:97:99:a6:f4:ff:f3:24:67:b7:07:05:
c5:b8:5c:7b:a1:e3:ca:10:2d:7a:8c:ba:be:9b:d2:0a:c6:d0:
35:34:f7:f9:02:c7:6f:27:9a:cd:0e:a9:11:f4:14:5d:5b:c1:
f0:ef:69:02:37:7f:23:95:4a:ec:b4:31:ac:4b:64:8b:13:c0:
51:1d:3d:c2:fe:90:82:2a:9d:25:e4:5d:11:60:f6:49:ec:bb:
86:a3:b7:fc:97:3f:db:41:8e:bc:dd:7a:ad:98:61:ea:72:43:
cc:27:7e:bd:6f:74:9e:3a:56:c8:b4:55:f1:a7:07:1f:2e:12:
94:ff:39:46:5a:81:9d:12:72:d1:57:34:28:50:35:99:b6:85:
14:ac:31:28:9b:81:41:9e:61:5d:e6:2f:fe:0b:f5:cc:96:c6:
ae:ab:4e:f3:e1:30:13:2e:91:6b:ec:bc:4c:81:ea:93:68:0f:
b8:fd:5f:ad:26:84:a5:17:2b:ed:24:ff:f8:8c:3b:69:b2:d4:
54:07:f6:23:50:bf:d2:98:58:64:2d:ab:fc:6c:c0:dd:f6:c8:
d4:c5:e5:03:39:33:91:6e:a9:6e:65:d1:55:5d:b4:d3:4d:55:
d7:3f:69:75:6e:6f:3f:f3:31:bb:60:ad:63:b4:f7:e1:13:a7:
50:57:c2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:43:07 2026 by rpki-client