Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
File: 7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft (raw, json)
Hash identifier: 4BDEOf3iZu79ROopMYrTFT828EoCCXkamMwZdeZ0SHg=
Subject key identifier: BD:68:21:37:DB:BE:03:D0:A2:10:EE:85:A4:D3:EB:90:B6:64:1D:FD
Authority key identifier: ED:2F:A6:86:D1:8C:80:20:AF:C6:AD:F5:5A:FD:BE:66:0D:BA:AC:15
Certificate issuer: /CN=ed2fa686d18c8020afc6adf55afdbe660dbaac15
Certificate serial: 019E1C7D571DA933BAA7A54A8750DE0C1231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
Manifest number: 1608
Signing time: Tue 12 May 2026 14:00:36 +0000
Manifest this update: Tue 12 May 2026 14:00:36 +0000
Manifest next update: Wed 13 May 2026 14:00:36 +0000
Files and hashes: 1: 7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl (hash: 0LogyzYasZqECGihQdUSwWui/VswlvAN3EDe9gqL5Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:57:1d:a9:33:ba:a7:a5:4a:87:50:de:0c:12:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed2fa686d18c8020afc6adf55afdbe660dbaac15
Validity
Not Before: May 12 14:00:36 2026 GMT
Not After : May 13 14:00:36 2026 GMT
Subject: CN=bd682137dbbe03d0a210ee85a4d3eb90b6641dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e3:1e:4f:d9:65:95:bf:66:76:ec:52:2c:1b:
19:4a:74:3d:5f:8b:ad:ca:64:af:75:2d:10:69:16:
ef:29:b2:f6:41:e5:f1:c1:e5:43:ac:c2:97:cc:33:
7b:cc:50:51:65:7c:85:5b:9e:59:d1:83:7e:44:2d:
e0:d7:a6:86:6b:30:6c:3e:ec:ba:96:53:76:ab:3a:
d9:66:7e:0b:1f:a0:d8:0a:25:c2:c3:d2:10:48:45:
87:b0:1c:8d:a1:10:aa:82:8b:6a:b7:8a:28:b0:f7:
95:63:13:1a:93:ef:c3:47:a0:6a:f4:60:fa:af:6d:
73:c0:ae:fc:e6:4e:5a:cb:f2:b0:05:0b:0b:de:57:
ac:dc:22:bb:e1:5e:e6:8c:85:72:f1:25:b0:ca:db:
ae:32:0e:32:14:fa:ce:9a:80:9d:61:5b:3a:31:e3:
0e:f2:c4:51:ae:73:bf:ba:8c:97:5b:17:92:93:8c:
f7:f4:ed:80:00:6f:ba:67:62:f2:f0:91:85:7c:79:
3c:b1:4e:43:77:8c:d8:e8:d3:69:76:d5:a4:f5:c9:
a5:54:8b:f1:77:d5:14:6e:31:72:8c:3b:4d:56:ee:
42:4c:d0:a5:41:37:cd:12:3c:9c:5f:95:eb:0e:91:
c1:f2:2f:ae:7d:31:88:a6:fe:72:ff:41:76:42:e4:
c2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:68:21:37:DB:BE:03:D0:A2:10:EE:85:A4:D3:EB:90:B6:64:1D:FD
X509v3 Authority Key Identifier:
keyid:ED:2F:A6:86:D1:8C:80:20:AF:C6:AD:F5:5A:FD:BE:66:0D:BA:AC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c4:60:26:ab:6f:58:d5:ea:3d:49:ee:50:bf:90:d1:f3:23:
56:39:f1:df:5a:cc:cb:1f:79:33:f2:ef:5d:ef:6d:f3:c2:14:
0b:b3:51:f6:57:3d:f0:ca:4e:32:a4:d6:c8:1b:ea:41:76:bd:
65:75:13:d7:98:b1:ad:16:0c:77:fc:74:93:51:3c:90:c4:c8:
d4:23:97:90:81:bb:84:77:26:99:dd:d3:ac:3d:21:54:9a:72:
ef:7b:e8:6e:a5:99:9f:d4:b0:51:c7:31:ce:44:d7:84:e5:20:
19:f5:37:c5:ce:19:ac:39:51:75:9c:7b:03:45:05:54:59:1f:
63:09:bc:0d:78:63:3d:68:b5:df:1f:3a:63:0b:b8:9d:d2:79:
0e:d5:f0:6d:6d:85:a0:84:e2:18:0d:f4:3b:a0:3b:bb:ad:7a:
4a:73:7f:05:67:6d:3f:13:e4:6b:45:f4:48:56:54:7f:54:fa:
8a:cd:1c:43:43:bf:a8:aa:71:47:bb:d8:bc:d0:9e:7d:60:d5:
22:49:a9:66:8d:58:13:a5:6f:ae:c4:56:21:26:03:3d:2b:fa:
1a:b7:c8:e5:3f:9d:6d:7a:53:e1:99:b8:4e:80:7c:0c:6b:e8:
0a:8c:cb:ce:43:cb:08:40:60:1a:2d:82:ea:f1:00:a7:e4:78:
29:ac:ef:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:03:51 2026 by rpki-client