Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
File: 7N0ioeDFuwAoDxkz7uz4HNig5rI.mft (raw, json)
Hash identifier: Cz4qmK2BF0CApOACTdwDqXfQ6INlJw+gLu5j3KEu9Dw=
Subject key identifier: 0A:EA:02:F7:97:52:06:4D:7B:28:67:10:89:E8:5F:E6:49:01:BE:D3
Authority key identifier: EC:DD:22:A1:E0:C5:BB:00:28:0F:19:33:EE:EC:F8:1C:D8:A0:E6:B2
Certificate issuer: /CN=ecdd22a1e0c5bb00280f1933eeecf81cd8a0e6b2
Certificate serial: 019D28F2FFD60CABFAA03AA7E5C810AA3FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
Manifest number: 1817
Signing time: Thu 26 Mar 2026 07:01:47 +0000
Manifest this update: Thu 26 Mar 2026 07:01:47 +0000
Manifest next update: Fri 27 Mar 2026 07:01:47 +0000
Files and hashes: 1: 7N0ioeDFuwAoDxkz7uz4HNig5rI.crl (hash: S8Jd5nzAraSSV95GDC/EeXmZskTks3iyGkneZ+Eb0aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:ff:d6:0c:ab:fa:a0:3a:a7:e5:c8:10:aa:3f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdd22a1e0c5bb00280f1933eeecf81cd8a0e6b2
Validity
Not Before: Mar 26 07:01:47 2026 GMT
Not After : Mar 27 07:01:47 2026 GMT
Subject: CN=0aea02f79752064d7b28671089e85fe64901bed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3d:ee:cb:9f:aa:06:34:52:05:15:91:4c:5d:
44:97:04:3c:2a:bb:1f:ad:4c:99:9e:8e:18:90:5d:
ee:e7:94:c7:32:85:76:90:c7:1e:cf:af:3f:ec:b9:
83:e8:9b:00:02:1b:9b:64:43:7f:dd:c3:ec:6c:74:
58:e8:23:61:59:e7:8e:01:6b:e3:d9:3b:61:c5:ca:
d6:31:8f:85:84:07:11:ee:a0:b6:d9:64:2a:09:d4:
c1:4f:69:7e:40:b2:70:6e:fd:49:8f:a4:f6:fc:8b:
51:a9:63:6d:37:32:38:77:e7:d6:d5:dd:3c:36:a6:
23:ea:05:73:76:a4:61:17:ef:05:45:43:97:84:5e:
01:db:a4:31:75:43:1d:c6:fa:06:bf:4a:0b:f0:c4:
16:25:f1:c2:41:8d:e9:4b:49:4d:f7:a3:e1:bb:1a:
f4:e6:37:51:6d:35:de:51:81:d2:41:10:22:4f:11:
cc:b7:e8:30:0b:82:a6:c8:30:75:a9:5d:0e:06:a0:
ec:71:c3:fd:86:93:b2:d6:7e:17:01:64:fe:a0:03:
6b:42:a5:e2:8e:20:6d:c7:e7:32:da:70:61:70:f0:
8c:cf:11:b8:6b:ff:2d:92:8d:c6:4a:88:37:52:08:
9f:49:f8:ad:bd:6a:11:51:6b:12:74:31:93:51:d6:
c6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EA:02:F7:97:52:06:4D:7B:28:67:10:89:E8:5F:E6:49:01:BE:D3
X509v3 Authority Key Identifier:
keyid:EC:DD:22:A1:E0:C5:BB:00:28:0F:19:33:EE:EC:F8:1C:D8:A0:E6:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e2:53:66:08:0a:de:fd:44:09:ac:65:e1:0c:4c:e1:c2:a9:
a2:6d:ec:55:ce:42:f9:26:84:cb:a4:88:64:ef:48:d8:12:95:
ea:3c:fa:9f:9f:6b:9f:f4:9b:bc:b6:65:76:1f:5c:f6:c0:55:
b6:9d:e3:05:a5:74:0a:0b:35:ce:bf:cf:36:a6:e0:61:f5:ad:
06:f2:b9:2d:76:a8:d1:1d:c0:f5:07:ac:1a:86:92:53:e1:ce:
32:0f:a8:89:a5:1a:d0:5e:73:83:72:8b:ac:8b:dd:d3:0c:81:
6d:5a:df:ca:85:b8:dc:29:15:3e:59:94:a1:8d:02:92:f4:e9:
15:ec:d5:05:83:3b:d8:d4:bd:aa:c6:a2:f3:68:a1:f7:91:e6:
b8:16:ff:8b:b7:db:b3:06:6b:55:0a:32:bf:cb:a8:97:33:68:
f7:9f:03:3e:44:6e:75:ad:cc:94:4a:f9:53:f0:b5:19:32:cb:
7e:51:02:80:a0:61:16:f5:2e:56:d0:a1:bd:bf:82:a0:72:97:
d8:b0:62:01:0d:7c:97:dd:38:e1:b8:23:fb:d0:8a:93:99:d5:
7f:ff:41:4f:76:8a:ec:27:35:21:18:32:01:74:99:a1:bd:74:
a0:8c:78:81:23:6c:dd:a3:12:5a:74:12:ee:69:f8:99:ca:78:
79:85:e2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:10:33 2026 by rpki-client