Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.mft
File: 17ISLEzzCqZTnsnH5ojbh1BqqV0.mft (raw, json)
Hash identifier: b0AbddnE1MMbtAKMkXWBFSkJlYdrYiSNg9zC+Z4oyg8=
Subject key identifier: 8B:04:2E:99:BE:8D:B9:6B:2F:DB:2F:89:D8:25:DB:2A:A9:57:04:B9
Authority key identifier: D7:B2:12:2C:4C:F3:0A:A6:53:9E:C9:C7:E6:88:DB:87:50:6A:A9:5D
Certificate issuer: /CN=d7b2122c4cf30aa6539ec9c7e688db87506aa95d
Certificate serial: 019D337549DFBFAF89182BC6E7853F763F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/17ISLEzzCqZTnsnH5ojbh1BqqV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.mft
Manifest number: D7
Signing time: Sat 28 Mar 2026 08:00:17 +0000
Manifest this update: Sat 28 Mar 2026 08:00:17 +0000
Manifest next update: Sun 29 Mar 2026 08:00:17 +0000
Files and hashes: 1: 17ISLEzzCqZTnsnH5ojbh1BqqV0.crl (hash: 2RavPilybSWgvlxPC1Tj9gWn29ZYUE9gpc0e/c8qE3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/17ISLEzzCqZTnsnH5ojbh1BqqV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:49:df:bf:af:89:18:2b:c6:e7:85:3f:76:3f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7b2122c4cf30aa6539ec9c7e688db87506aa95d
Validity
Not Before: Mar 28 08:00:17 2026 GMT
Not After : Mar 29 08:00:17 2026 GMT
Subject: CN=8b042e99be8db96b2fdb2f89d825db2aa95704b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d0:45:66:d7:5f:4d:fb:7a:1c:f0:33:be:5d:
1c:31:85:ea:a3:79:e3:f7:cd:5f:64:f6:41:b0:77:
28:84:2a:ab:f5:05:b1:67:3c:c7:a4:23:b0:59:3a:
f9:8b:4c:65:f3:76:02:fa:38:b7:0f:6c:c5:3c:a6:
81:53:a2:3d:09:ca:86:44:80:a7:01:43:79:71:94:
70:c4:f6:dc:68:86:53:d0:63:33:d6:c8:b7:1b:70:
75:6e:4a:23:29:d7:cb:6f:33:cf:14:82:83:91:c1:
7a:6b:f8:21:a4:9f:31:f4:9d:30:cd:ba:7d:ff:c2:
f6:91:db:87:0a:77:21:5e:b5:32:91:c2:eb:29:fc:
6a:4a:4a:b2:40:e2:c7:01:9c:64:e2:d6:e5:5d:94:
8a:c8:e5:d5:05:06:61:05:0e:6c:60:91:0c:f4:08:
4b:ec:aa:0a:e1:7d:e6:b5:e7:fc:4e:c2:2d:79:b3:
5e:89:3e:15:45:93:12:bf:8b:d0:96:78:cd:c0:d0:
1a:24:63:1b:7c:39:99:14:b9:d9:41:aa:17:a7:6f:
4d:a1:37:ff:d2:c7:fb:06:c8:e2:94:e9:58:60:4a:
ff:f4:31:54:00:55:12:43:da:5a:bc:5f:fe:e7:4e:
94:2c:90:80:03:89:1a:7e:35:55:ee:eb:2c:63:16:
07:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:04:2E:99:BE:8D:B9:6B:2F:DB:2F:89:D8:25:DB:2A:A9:57:04:B9
X509v3 Authority Key Identifier:
keyid:D7:B2:12:2C:4C:F3:0A:A6:53:9E:C9:C7:E6:88:DB:87:50:6A:A9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17ISLEzzCqZTnsnH5ojbh1BqqV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:71:32:10:11:bf:d7:c8:d1:5b:76:fd:3b:9a:2d:10:33:75:
0d:93:96:bf:80:06:f8:90:58:b3:e5:ff:53:bf:66:a8:d3:cf:
97:8e:b5:1a:49:3f:a8:9e:3f:83:a0:2c:7f:53:ac:3d:8d:b4:
31:30:94:bd:ec:21:f4:5d:dc:43:8b:ff:e9:fc:07:45:b1:31:
fd:a8:00:c2:bb:14:a4:dc:72:04:aa:82:95:3c:d7:87:7b:bd:
00:e2:aa:0d:d5:8f:af:34:7c:da:96:67:0c:74:33:12:91:80:
b0:b5:57:df:3e:40:59:86:bf:2e:22:4c:16:dd:1a:6e:52:09:
7c:cb:37:a0:9d:96:53:b2:4b:35:f4:db:6d:c8:6c:05:b9:d1:
e7:94:9d:c0:91:2b:f0:23:de:a9:f8:91:d2:1a:ac:76:f8:b7:
f1:1e:f4:30:84:85:6b:a7:17:0b:d3:a8:c7:b4:97:10:4d:93:
a5:27:5d:5e:80:6f:63:0a:4d:41:90:e8:41:d6:1d:78:9a:8c:
08:b1:95:3b:0c:3c:cf:f2:c4:dd:ce:a3:9d:8d:d3:72:84:dc:
e4:56:10:34:51:e9:d6:f3:03:c3:d0:16:9e:4f:1d:87:39:84:
f5:60:d2:3c:3b:8c:f3:96:1f:c5:db:65:fb:ad:9c:51:f4:9d:
bb:85:84:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:38 2026 by rpki-client