Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
File: 7crL2itLMjHQi1HxbxsqfAgjetE.mft (raw, json)
Hash identifier: uOaJwm4I1v52J9w8R0/6VZWkcfftS2xsayDQwQZNANU=
Subject key identifier: 28:0E:DB:6D:22:C4:AE:59:3A:D6:EA:49:35:5F:E7:EB:28:9D:E4:33
Authority key identifier: ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1
Certificate issuer: /CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
Certificate serial: 019D27728CB3784C2F75F34DEC9089CD4061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
Manifest number: 04F2
Signing time: Thu 26 Mar 2026 00:01:51 +0000
Manifest this update: Thu 26 Mar 2026 00:01:51 +0000
Manifest next update: Fri 27 Mar 2026 00:01:51 +0000
Files and hashes: 1: 7crL2itLMjHQi1HxbxsqfAgjetE.crl (hash: 3p6rJIp0Lil37kfvAkUIckadaseiuvkSlkuSciWR/KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:8c:b3:78:4c:2f:75:f3:4d:ec:90:89:cd:40:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
Validity
Not Before: Mar 26 00:01:51 2026 GMT
Not After : Mar 27 00:01:51 2026 GMT
Subject: CN=280edb6d22c4ae593ad6ea49355fe7eb289de433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f2:fe:f3:33:a0:51:ca:bd:0e:f7:6d:2e:d3:
44:db:54:9b:75:f9:13:b2:7f:ae:e8:91:d9:2c:79:
00:57:d7:d0:0a:32:8c:a0:0d:a1:cd:86:f0:67:a0:
63:b7:11:0b:00:be:bf:79:e8:8f:3a:4f:d4:d1:ec:
06:17:b8:39:1a:99:f8:cf:6a:0b:1b:61:54:77:7f:
e2:c6:bf:e2:41:19:c6:f6:64:a3:45:5b:c7:84:af:
2c:5e:7a:bf:f4:e2:ba:84:fe:8d:a8:ca:65:fa:0f:
dd:7d:5c:1e:99:4b:40:98:2b:4d:75:a5:73:d4:2d:
6a:9f:7b:a3:6b:2e:3c:6a:4f:08:46:97:43:41:1f:
bf:41:b9:eb:b9:73:90:e8:75:bf:08:97:f7:82:50:
6f:c3:07:75:c0:ef:40:8a:36:9d:60:f4:dc:ac:17:
cb:18:a8:bc:1b:01:22:06:77:5a:73:f9:69:83:3f:
8c:b4:99:aa:9f:c7:ca:62:71:03:65:93:b1:e6:f8:
65:8d:3b:54:b5:33:78:ac:4d:8e:8a:f1:e9:f6:1d:
da:0c:12:77:a2:a2:5c:ad:74:b0:aa:a4:16:41:94:
cc:2c:24:ba:09:3a:df:be:68:11:67:f2:e9:2d:a3:
27:3d:60:31:08:86:16:c0:0c:c7:6b:fb:7b:d2:d8:
f0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0E:DB:6D:22:C4:AE:59:3A:D6:EA:49:35:5F:E7:EB:28:9D:E4:33
X509v3 Authority Key Identifier:
keyid:ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f9:b4:03:d8:75:cc:0f:92:67:39:c0:54:2d:1e:14:5b:0c:
80:4e:4b:96:d3:2e:62:36:96:de:80:81:16:17:e2:31:aa:fa:
c1:58:c7:f6:31:7f:c6:7d:4c:09:30:7f:21:68:2e:16:94:75:
d1:cd:2a:60:e7:9c:85:56:89:59:5e:71:ac:55:9e:b2:2b:0f:
d0:d9:d2:ef:8c:c1:14:54:52:de:fd:e0:50:ea:24:88:ea:15:
3f:a2:08:3d:48:bb:25:f7:68:b1:d7:45:dd:a6:84:27:52:e3:
c8:3a:81:8c:8b:49:2d:10:90:59:d0:0d:2b:fe:85:17:f5:b0:
c3:6d:1a:dc:15:64:de:e9:32:41:8a:0a:9e:0c:74:48:31:9c:
38:12:8b:73:72:67:1a:dc:bb:0b:40:c8:5c:52:7e:b3:dd:52:
2c:48:cb:7a:37:c2:42:19:94:64:bd:3f:9d:f7:23:0b:5c:80:
bc:d8:0d:90:cf:b4:3b:44:61:6f:54:f2:05:6e:5c:6f:50:ce:
ae:0f:bd:b0:49:03:c4:46:8c:f9:68:fc:fd:b9:2e:0c:4e:63:
49:64:0b:ce:b3:f2:f1:d5:5b:e8:77:a4:9e:c7:1e:cc:29:72:
aa:d6:c9:f9:74:eb:e5:8f:01:1a:01:75:9a:36:a5:c0:60:a8:
6b:8d:0e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:03 2026 by rpki-client