Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3ac2c2-c1fc-4352-8106-8faf4e4d7f7b/1/7D6JWnysF_dfnXXvbjhhTDLWnlU.mft
File: 7D6JWnysF_dfnXXvbjhhTDLWnlU.mft (raw, json)
Hash identifier: sigi7tOSGxAf/oMnV0GyehBeZV3MeNXNkYoU/3FPQgs=
Subject key identifier: 0C:A3:7C:93:43:42:3F:50:F0:BB:5E:13:2E:CC:FF:90:B2:0B:73:46
Authority key identifier: EC:3E:89:5A:7C:AC:17:F7:5F:9D:75:EF:6E:38:61:4C:32:D6:9E:55
Certificate issuer: /CN=ec3e895a7cac17f75f9d75ef6e38614c32d69e55
Certificate serial: 019F8FEC63FBF1D1A280D3AA6E38A84C6BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7D6JWnysF_dfnXXvbjhhTDLWnlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3ac2c2-c1fc-4352-8106-8faf4e4d7f7b/1/7D6JWnysF_dfnXXvbjhhTDLWnlU.mft
Manifest number: 96
Signing time: Thu 23 Jul 2026 17:01:01 +0000
Manifest this update: Thu 23 Jul 2026 17:01:01 +0000
Manifest next update: Fri 24 Jul 2026 17:01:01 +0000
Files and hashes: 1: 7D6JWnysF_dfnXXvbjhhTDLWnlU.crl (hash: tBsdwe0ILWjCttvpQRFtVkEQv2ax37SyO41gxsOBJUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3ac2c2-c1fc-4352-8106-8faf4e4d7f7b/1/7D6JWnysF_dfnXXvbjhhTDLWnlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3ac2c2-c1fc-4352-8106-8faf4e4d7f7b/1/7D6JWnysF_dfnXXvbjhhTDLWnlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7D6JWnysF_dfnXXvbjhhTDLWnlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:63:fb:f1:d1:a2:80:d3:aa:6e:38:a8:4c:6b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3e895a7cac17f75f9d75ef6e38614c32d69e55
Validity
Not Before: Jul 23 17:01:01 2026 GMT
Not After : Jul 24 17:01:01 2026 GMT
Subject: CN=0ca37c9343423f50f0bb5e132eccff90b20b7346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:c3:42:f2:73:91:c5:bd:4b:52:e1:91:29:
90:50:0e:71:1e:ff:23:14:a7:94:c0:02:79:a0:85:
c6:bf:4c:0b:29:43:f2:9d:b1:d8:80:d6:97:73:d8:
08:33:72:8d:75:ac:59:3f:23:f6:8f:59:7a:cb:0d:
6c:e2:84:b4:9a:71:0e:65:33:f0:1a:46:f0:3a:54:
7d:f2:71:d9:26:8a:c4:50:e0:3a:51:cd:55:a1:54:
51:e6:fe:ca:26:aa:26:84:ba:35:8b:9c:e4:68:7e:
31:ed:fd:40:39:22:d4:44:9d:d2:d7:78:09:b8:6c:
39:99:b4:3b:4b:81:2f:a7:c2:67:43:d2:aa:0c:f5:
8e:85:95:9b:b4:18:f6:8c:4b:a2:4d:f0:84:f0:bc:
0c:a1:78:8c:7a:07:aa:18:df:53:1e:5d:f9:5f:58:
60:50:a7:5b:77:14:75:23:c9:3d:9f:46:3b:e9:38:
87:f7:c8:96:92:8e:b5:e9:56:96:33:6f:d0:06:81:
2c:9a:dc:70:86:f9:89:da:8e:b3:49:40:0c:80:33:
b6:69:e0:f0:34:37:d5:81:0f:aa:f5:18:c9:86:c7:
2b:41:0e:c8:9c:48:02:f3:a6:fe:f7:f6:1d:a3:2d:
62:98:3e:a4:dc:cb:1f:a9:85:4b:9d:26:f7:d6:c2:
09:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A3:7C:93:43:42:3F:50:F0:BB:5E:13:2E:CC:FF:90:B2:0B:73:46
X509v3 Authority Key Identifier:
keyid:EC:3E:89:5A:7C:AC:17:F7:5F:9D:75:EF:6E:38:61:4C:32:D6:9E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D6JWnysF_dfnXXvbjhhTDLWnlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3ac2c2-c1fc-4352-8106-8faf4e4d7f7b/1/7D6JWnysF_dfnXXvbjhhTDLWnlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3ac2c2-c1fc-4352-8106-8faf4e4d7f7b/1/7D6JWnysF_dfnXXvbjhhTDLWnlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f9:f8:0b:c5:cd:83:46:b7:a2:5f:a7:c8:ef:83:37:81:24:
da:c6:e7:e4:a8:c3:7e:b0:90:72:d2:24:68:fa:86:80:ce:2f:
1f:a0:c0:43:50:53:51:03:91:6e:67:53:0d:d1:ae:d8:6a:6c:
74:a9:ee:4f:cb:3f:f7:e0:2a:75:b8:04:17:31:41:da:56:1f:
dd:83:1b:4e:70:11:b6:e1:bc:56:8d:9c:cb:61:90:3c:e4:18:
12:f1:54:a3:57:d5:07:91:ac:96:87:c5:cd:ae:fa:84:27:80:
25:2e:bc:2a:2f:6c:cb:5e:68:b8:ab:2e:82:f0:26:fb:58:47:
c0:6c:57:e1:65:80:f8:36:0b:0c:47:c4:09:4a:8e:79:52:fb:
15:95:db:36:14:cb:8e:4d:62:6a:1a:fc:08:05:95:43:63:00:
be:6c:71:96:43:5d:2c:87:86:e1:90:0d:d3:db:f5:1d:44:3f:
ba:dc:a4:3e:94:6e:c2:32:c3:e4:43:18:82:42:7a:6d:d1:98:
27:d7:05:0e:8d:d8:7f:14:0c:39:d6:da:9f:a7:8f:1e:1f:9c:
2d:9d:68:d2:9f:a1:97:9c:66:49:7e:c9:d5:51:2e:f1:05:77:
17:1a:ed:2c:f3:e5:75:5b:9c:e7:a7:18:1a:b2:db:33:8f:aa:
cc:63:d7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:16 2026 by rpki-client