Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
File: 7crL2itLMjHQi1HxbxsqfAgjetE.mft (raw, json)
Hash identifier: FUiKLOGmwk2phm+RDUXAWW8hh4trEpYzjMd2VfOiQ0w=
Subject key identifier: 29:69:69:0E:CA:1E:E5:A6:17:5A:22:E4:57:EC:7E:0B:1F:25:63:54
Authority key identifier: ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1
Certificate issuer: /CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
Certificate serial: 019F8F7ECED940059D66273553AD3498A1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
Manifest number: 0631
Signing time: Thu 23 Jul 2026 15:01:19 +0000
Manifest this update: Thu 23 Jul 2026 15:01:19 +0000
Manifest next update: Fri 24 Jul 2026 15:01:19 +0000
Files and hashes: 1: 7crL2itLMjHQi1HxbxsqfAgjetE.crl (hash: xt/2s8cT1Cto4z9EXtGeCROMh9aDD287DbcLdVU+nCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:ce:d9:40:05:9d:66:27:35:53:ad:34:98:a1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
Validity
Not Before: Jul 23 15:01:19 2026 GMT
Not After : Jul 24 15:01:19 2026 GMT
Subject: CN=2969690eca1ee5a6175a22e457ec7e0b1f256354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4d:12:da:ef:ae:b6:1b:2a:e4:18:ad:60:73:
5d:21:fc:51:9c:9a:00:44:bc:2d:23:09:ae:fe:b8:
bd:99:60:6c:4f:d6:49:4a:25:22:ef:59:e2:b0:fe:
00:fb:da:ef:f3:21:6e:8f:ef:1b:64:80:59:63:3f:
0a:a0:09:5c:9a:0e:f5:57:67:14:19:7d:76:6c:6f:
09:8d:2b:7d:26:9d:41:72:40:86:04:09:4a:2f:78:
c2:31:a6:64:98:fc:6e:ab:29:02:2b:ae:06:3d:d4:
d0:07:35:4e:81:f6:22:9f:17:54:8b:be:59:4f:99:
6f:3e:c1:8a:f8:34:05:61:e2:1b:17:c2:92:e0:3b:
49:f9:41:ca:99:80:eb:2f:e2:a3:a5:94:e1:e0:da:
0e:ca:d5:77:8f:9f:d3:9a:e5:a1:7d:5d:fe:45:bd:
7d:7a:cd:82:2d:30:a0:0f:0c:fd:c9:5f:26:23:e5:
d5:b3:ba:68:d4:78:18:d7:99:be:a9:bc:ff:09:4f:
d3:00:49:62:57:3c:7d:9e:ca:4d:d9:da:bc:38:d2:
83:5a:4f:fc:2a:52:de:05:fa:d0:d4:a1:d3:fa:70:
ac:ca:98:ab:f1:a5:2a:d4:cd:d9:93:9c:73:bf:71:
19:46:b8:88:3f:8c:03:28:ba:61:da:7e:d9:bb:6a:
39:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:69:69:0E:CA:1E:E5:A6:17:5A:22:E4:57:EC:7E:0B:1F:25:63:54
X509v3 Authority Key Identifier:
keyid:ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:09:ef:34:4a:9f:37:37:3a:89:f9:4c:7d:5b:81:d5:57:10:
26:58:6a:79:db:8a:64:74:22:3a:66:93:51:aa:24:49:8c:aa:
2e:61:12:d4:31:ab:25:ae:c6:be:fa:3e:ec:ab:e9:9b:ef:14:
b9:bb:2b:73:4e:ff:c6:ef:a7:e9:a5:6f:fd:03:c6:03:94:03:
5e:5e:1f:96:71:e8:57:4d:6b:dc:00:78:22:02:63:84:0c:be:
4e:54:e3:7d:e1:b4:eb:eb:f6:61:eb:d0:f8:40:ed:71:ca:81:
88:63:7c:20:81:5b:ca:2f:aa:78:ce:8a:50:28:f2:68:f0:33:
8b:25:0a:17:fd:5c:04:b6:f6:88:84:bc:bc:ec:f1:68:ca:18:
bd:b5:0d:ad:86:30:ba:19:a2:ac:72:8a:64:16:09:fd:82:1b:
66:e5:7f:bd:22:59:12:9a:3f:0d:3f:3a:32:7f:58:e3:25:08:
17:b7:ff:24:0b:b6:4d:0b:ff:10:d2:8a:44:d2:9a:87:52:76:
cb:fa:d7:37:f6:82:d0:d8:b8:0d:ad:aa:2d:aa:ef:4a:59:fc:
79:c1:46:0a:3b:91:c7:66:ea:0e:43:3a:db:23:67:0b:b7:7e:
ce:e2:b1:90:76:e8:2f:dc:ba:ab:02:3e:8a:6f:76:5f:35:b4:
eb:4f:b3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:05 2026 by rpki-client