Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
File: 7ix0WZPMS28UcK6rRhTwhdSuQKk.mft (raw, json)
Hash identifier: 14JWb34FOSl6jaSmhT2RQTPTMBgPiBh7LCcSAH3kSMA=
Subject key identifier: 1A:FB:E6:D9:49:17:AE:CD:01:48:71:D1:B6:02:33:05:BF:0A:79:E8
Authority key identifier: EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
Certificate issuer: /CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Certificate serial: 019D27E05C549153DCFC0B550368A7E1ACCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
Manifest number: 1519
Signing time: Thu 26 Mar 2026 02:01:48 +0000
Manifest this update: Thu 26 Mar 2026 02:01:48 +0000
Manifest next update: Fri 27 Mar 2026 02:01:48 +0000
Files and hashes: 1: 7ix0WZPMS28UcK6rRhTwhdSuQKk.crl (hash: jVuCClfyC70/iCKJ6ixi3TZP+BEssrWtvXaxYVrV9X4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:5c:54:91:53:dc:fc:0b:55:03:68:a7:e1:ac:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Validity
Not Before: Mar 26 02:01:48 2026 GMT
Not After : Mar 27 02:01:48 2026 GMT
Subject: CN=1afbe6d94917aecd014871d1b6023305bf0a79e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:6d:39:d1:62:c1:80:e3:8e:bf:48:d1:e4:
e2:ff:b1:f7:ba:3c:d6:7f:5a:eb:02:5c:ab:6b:6d:
03:a9:97:1e:11:ab:9e:ee:c9:3c:64:07:50:5d:b0:
1f:f3:8d:de:2c:43:4d:05:52:49:de:8d:ec:d1:8e:
f3:70:47:fa:2b:bd:91:f8:a7:cd:87:7d:49:62:58:
0c:17:71:4e:20:ca:9f:8c:d0:23:46:3c:d4:01:48:
d0:ec:6a:c1:b2:d9:de:0d:73:e9:54:40:14:2f:04:
04:88:92:c6:07:e4:e9:2b:32:e2:84:6f:9d:28:19:
02:55:a7:b7:4a:46:e7:cf:bd:83:ac:51:da:8f:ea:
53:4c:c4:a6:a8:9a:78:33:23:d2:16:a7:e1:3c:bb:
45:d5:bc:84:ca:d6:c2:00:7a:1f:ec:13:4c:ec:ef:
98:79:bd:9c:d2:9f:0d:28:56:a4:92:90:cc:00:5a:
33:d6:6f:1f:16:dc:4e:15:7a:07:3a:12:d7:36:1d:
44:7e:03:0e:c3:2e:8f:cc:af:13:d6:2f:b1:e3:47:
79:6d:ee:ae:00:da:3f:0e:d7:f0:26:cb:25:e2:28:
ad:eb:81:cf:23:b8:96:6b:7e:bd:a1:ee:3e:86:dd:
10:dc:eb:bd:13:e5:d4:04:5b:55:c2:77:d1:3e:92:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FB:E6:D9:49:17:AE:CD:01:48:71:D1:B6:02:33:05:BF:0A:79:E8
X509v3 Authority Key Identifier:
keyid:EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ad:ec:77:17:8f:98:91:67:f5:6a:fa:4e:02:45:11:06:e7:
c9:6d:08:9d:0e:e2:92:c4:92:fd:6b:3b:4c:7e:67:cb:bb:a0:
74:36:b9:1a:fa:6d:88:d8:ff:03:c9:f4:9f:05:5a:8d:31:cc:
ac:3b:8f:5a:28:69:4b:10:ab:74:53:dd:35:2c:30:a2:05:40:
48:ee:55:c1:10:e4:06:c9:38:b5:09:bf:ea:5d:f1:9c:60:88:
a2:75:f2:e5:1a:75:94:0e:1f:29:13:03:25:53:3e:ec:fc:3f:
d5:08:80:76:50:62:58:0c:f9:a0:f5:e6:d6:04:ae:d9:2d:df:
e0:2c:62:7c:82:28:8a:c2:b1:e8:23:09:84:68:3b:0e:d7:7d:
f9:73:cb:e2:df:84:b7:6c:80:42:dc:84:14:8e:8e:f2:a7:40:
7f:bc:d4:a3:ac:18:1c:f2:4e:43:c2:fc:52:d2:af:84:22:26:
f9:f0:25:28:90:2d:ba:77:ac:d4:5f:e9:d1:30:31:5e:b2:5d:
5e:69:3f:a8:6b:31:22:07:85:cb:c8:ab:8e:6c:19:ba:87:85:
7c:b6:31:cf:89:28:0e:39:09:b9:8d:87:da:3f:0f:9d:ab:84:
e9:21:9b:e3:f0:ce:92:01:3d:f1:1d:77:9b:51:7b:c8:77:49:
78:21:d8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:17 2026 by rpki-client