Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a0d612-b49b-4839-9bea-ab94229ee1b5/1/7L1dowHbZ5BT1pJoqKlDpF7OJkU.mft
File: 7L1dowHbZ5BT1pJoqKlDpF7OJkU.mft (raw, json)
Hash identifier: 5AFHCgtijf90VuhyUAOjNrCjjyzKHsjkOCtPJPzt+e0=
Subject key identifier: 4E:C7:8E:3F:B1:29:B1:DB:3C:AA:15:0F:BA:2D:6A:3A:AA:A3:95:05
Authority key identifier: EC:BD:5D:A3:01:DB:67:90:53:D6:92:68:A8:A9:43:A4:5E:CE:26:45
Certificate issuer: /CN=ecbd5da301db679053d69268a8a943a45ece2645
Certificate serial: 019D27A8F49EF111BD0510BBA6AD3C356094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7L1dowHbZ5BT1pJoqKlDpF7OJkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a0d612-b49b-4839-9bea-ab94229ee1b5/1/7L1dowHbZ5BT1pJoqKlDpF7OJkU.mft
Manifest number: 3C
Signing time: Thu 26 Mar 2026 01:01:17 +0000
Manifest this update: Thu 26 Mar 2026 01:01:17 +0000
Manifest next update: Fri 27 Mar 2026 01:01:17 +0000
Files and hashes: 1: 7L1dowHbZ5BT1pJoqKlDpF7OJkU.crl (hash: 9k6pTSKGlbpYVHdDC/FM+L/oxZ5UIlDwFtjOkTzlPOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a0d612-b49b-4839-9bea-ab94229ee1b5/1/7L1dowHbZ5BT1pJoqKlDpF7OJkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a0d612-b49b-4839-9bea-ab94229ee1b5/1/7L1dowHbZ5BT1pJoqKlDpF7OJkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7L1dowHbZ5BT1pJoqKlDpF7OJkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:f4:9e:f1:11:bd:05:10:bb:a6:ad:3c:35:60:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbd5da301db679053d69268a8a943a45ece2645
Validity
Not Before: Mar 26 01:01:17 2026 GMT
Not After : Mar 27 01:01:17 2026 GMT
Subject: CN=4ec78e3fb129b1db3caa150fba2d6a3aaaa39505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:4a:e1:eb:95:a3:9f:00:65:a9:83:a2:03:
50:32:d7:2e:da:a4:44:00:4b:46:dd:b4:c2:31:64:
30:60:d7:3e:8f:6b:cb:2c:67:68:f4:93:da:78:60:
f9:28:79:ea:1b:b5:b0:e8:00:d2:2a:89:8a:83:0b:
0d:c3:b1:e2:16:c4:bd:1b:e3:55:6b:49:16:60:d7:
1d:5e:d5:6e:dc:b0:57:aa:39:ed:b8:43:66:e1:28:
63:92:a0:b4:0d:b4:3d:07:8e:75:34:59:29:d6:fd:
10:fc:9a:0a:6a:92:cb:2a:1e:03:ab:d6:ad:62:49:
a1:90:be:dc:38:76:c6:6f:bb:f6:c6:62:da:c7:a1:
72:70:a6:c9:92:5b:02:4e:00:c8:c5:62:f4:2d:c7:
80:87:4b:d9:38:37:52:9b:04:9a:c8:07:6a:8c:ee:
a8:97:be:a5:1d:9e:49:3d:04:43:5a:8a:45:7c:8f:
8a:7c:4f:8c:da:b8:ca:7f:e4:ba:7b:c2:e8:f8:4e:
9f:98:d8:c6:a7:d5:e3:c2:61:88:e8:8a:d9:dc:b6:
fe:6b:b7:71:03:8f:1e:95:2d:63:75:7a:f0:bf:a3:
48:6f:e9:f8:3b:0c:52:3e:82:5c:cd:9b:fe:68:e2:
64:c3:ce:2e:d6:8b:ae:93:90:5f:c1:59:75:e9:d5:
56:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C7:8E:3F:B1:29:B1:DB:3C:AA:15:0F:BA:2D:6A:3A:AA:A3:95:05
X509v3 Authority Key Identifier:
keyid:EC:BD:5D:A3:01:DB:67:90:53:D6:92:68:A8:A9:43:A4:5E:CE:26:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7L1dowHbZ5BT1pJoqKlDpF7OJkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a0d612-b49b-4839-9bea-ab94229ee1b5/1/7L1dowHbZ5BT1pJoqKlDpF7OJkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a0d612-b49b-4839-9bea-ab94229ee1b5/1/7L1dowHbZ5BT1pJoqKlDpF7OJkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:df:76:0b:55:5c:82:6c:46:3d:fa:7d:3a:54:94:30:52:4c:
23:5f:8f:e9:b7:a6:4d:27:a0:f1:d6:9c:b0:ae:89:44:92:e0:
4a:ff:e1:5a:77:55:74:ec:1b:89:dc:64:d3:b1:88:5c:ce:f1:
39:aa:82:f9:db:e0:21:43:23:0d:b9:1a:ab:0f:a5:c9:95:c2:
6a:81:32:d0:90:28:81:9f:37:51:d6:95:91:80:9e:0d:f7:a1:
7a:01:45:71:c1:1a:64:aa:95:0f:84:e9:5f:ba:ba:a1:fe:6d:
98:6b:47:f5:4f:49:9f:61:b2:cd:f8:96:5a:11:07:84:e8:b7:
04:6b:70:75:88:39:a6:9e:d4:6d:c3:ae:32:f1:e7:b9:08:28:
1d:62:e4:d4:85:74:13:76:f4:2b:8e:ae:28:22:c9:e9:03:54:
99:82:1c:4a:a3:aa:a7:8f:93:8a:2f:27:f2:84:d6:f5:3d:12:
66:13:5f:75:25:04:a2:b8:0c:4c:1b:19:45:ee:98:b4:e3:02:
b9:b6:fe:04:a9:4e:5f:35:c2:a7:a7:4b:03:63:4c:ec:5c:6d:
ba:ac:13:3d:69:09:36:1e:89:a4:eb:0c:a9:34:b2:0f:dc:a4:
f3:11:3f:a2:93:ad:05:45:8a:9f:bd:4f:c7:2a:2c:21:f4:65:
16:86:dd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:07:34 2026 by rpki-client