Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json)
Hash identifier: 4mwZTp41Pzz/o5jyodQyAWD9Jr+Q6x78F8cSwVPolj4=
Subject key identifier: 85:99:DC:9C:8A:5D:8B:A1:99:1A:2F:EA:E7:83:30:99:E1:D1:1C:55
Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
Certificate issuer: /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Certificate serial: 019D27042A343B6AD6C93F3351DFD1AE5A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
Manifest number: 0AF9
Signing time: Wed 25 Mar 2026 22:01:17 +0000
Manifest this update: Wed 25 Mar 2026 22:01:17 +0000
Manifest next update: Thu 26 Mar 2026 22:01:17 +0000
Files and hashes: 1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: doxFg11bvR+IT5Rvg5C2neh1iWnz7cCrtsdvm1KFCag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:2a:34:3b:6a:d6:c9:3f:33:51:df:d1:ae:5a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Validity
Not Before: Mar 25 22:01:17 2026 GMT
Not After : Mar 26 22:01:17 2026 GMT
Subject: CN=8599dc9c8a5d8ba1991a2feae7833099e1d11c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ba:34:ed:91:77:76:92:59:b5:cb:ca:99:d4:
2a:4c:79:27:c5:b1:26:67:f8:f1:d6:7f:ab:c2:ee:
4e:95:07:c0:f8:dc:ab:fa:ee:7f:96:ae:13:cd:f5:
6f:05:67:67:30:04:d8:d9:92:18:16:35:fd:62:14:
54:e2:ad:be:95:1a:fc:10:6a:fe:51:36:b8:10:00:
4c:05:cb:c1:c7:6e:12:13:da:08:7a:73:62:84:45:
4d:7a:f8:05:8c:e5:bf:fb:c0:87:e3:f3:29:3e:2b:
4e:fe:0e:aa:06:1c:9e:6d:37:31:14:88:9b:a9:23:
8d:34:c2:71:2b:0d:a9:72:5d:db:ff:6e:99:aa:20:
29:42:9c:a2:24:75:d6:3c:cb:98:ec:d1:f6:4c:3d:
c3:81:63:0b:96:b8:08:8e:aa:eb:a8:76:af:63:66:
49:18:f9:a9:3c:c8:bd:35:8e:4b:69:74:76:f4:79:
a8:f8:da:9c:09:ea:0c:9f:1f:53:1f:90:71:4c:bf:
65:0b:5d:df:b7:77:1b:fd:78:12:78:ee:6a:36:3c:
41:0e:b9:50:ba:b5:0c:76:41:48:ba:3e:c9:27:b5:
8f:ee:77:5e:2a:d4:87:c1:b5:18:2a:e0:30:ef:0b:
94:93:5b:c1:35:f7:bb:ab:4c:a4:51:a8:c2:96:bd:
ff:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:99:DC:9C:8A:5D:8B:A1:99:1A:2F:EA:E7:83:30:99:E1:D1:1C:55
X509v3 Authority Key Identifier:
keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:36:76:5e:1a:ca:ae:11:e8:38:bf:24:ab:99:b7:c8:cf:97:
d8:5b:d4:6b:7b:36:d7:ea:bb:65:3c:0d:18:8d:74:3e:a9:a8:
f5:23:5d:63:c5:3e:35:e3:cb:4c:9e:f7:d1:16:ba:9e:77:bc:
cc:1a:89:da:00:73:67:03:15:5a:77:3e:80:3b:b1:cb:a6:87:
2f:64:4f:d7:5a:1d:64:04:1f:e9:dd:36:71:bc:a4:6b:cb:cd:
e0:d5:ca:bd:e2:4a:7b:14:a0:ef:53:12:52:d4:29:0a:43:ed:
94:83:3b:eb:5f:bb:1a:bd:f4:72:0e:e6:9a:f6:20:74:05:e8:
08:74:bd:47:57:f6:4d:26:9d:ba:4f:6d:8a:e0:5c:d2:55:e6:
ba:ee:8b:db:63:4f:fc:2f:02:1f:91:ab:ba:74:d9:f3:e9:d1:
4e:b0:b3:55:c5:10:63:0f:21:30:1e:8e:29:38:a7:e1:3f:b4:
c0:24:ae:a9:c5:fb:a2:d9:e5:6b:99:d3:8d:8c:17:f5:d1:8c:
c0:de:91:76:42:ce:41:d6:68:5b:fd:cb:41:4d:6d:ce:34:d4:
73:c3:de:bf:9c:de:d6:78:6b:bb:98:6d:50:6b:dd:b4:7f:fd:
7d:55:55:87:99:7b:99:ea:ec:86:98:f6:0b:8f:a7:d5:6c:0a:
5d:ee:6a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:51:19 2026 by rpki-client