Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
File: fp2uVBo7fD77bdZkadCH6F9179o.mft (raw, json)
Hash identifier: yB9DpCIDp5EESR31OSBiUkw3cZV7uLadZ7ucgb3wR2Q=
Subject key identifier: 06:C4:38:9A:7C:B4:87:EA:A2:2A:E0:F9:20:FE:00:C9:33:24:0A:C4
Authority key identifier: 7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
Certificate issuer: /CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Certificate serial: 019D27045CE8C1EF034CCAA239A7625C0CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
Manifest number: 04E7
Signing time: Wed 25 Mar 2026 22:01:30 +0000
Manifest this update: Wed 25 Mar 2026 22:01:30 +0000
Manifest next update: Thu 26 Mar 2026 22:01:30 +0000
Files and hashes: 1: fp2uVBo7fD77bdZkadCH6F9179o.crl (hash: wWr6+CGKpJrMwGhx2Xe2eKcWX60kKz0JsXVZjt0XIpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:5c:e8:c1:ef:03:4c:ca:a2:39:a7:62:5c:0c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Validity
Not Before: Mar 25 22:01:30 2026 GMT
Not After : Mar 26 22:01:30 2026 GMT
Subject: CN=06c4389a7cb487eaa22ae0f920fe00c933240ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:14:83:61:d2:74:49:c4:a4:8d:34:08:55:7e:
90:f1:16:b4:39:37:31:7d:94:3e:4f:77:b9:1d:63:
96:54:3a:ef:e4:a7:8d:51:3a:45:1d:6d:cb:09:13:
25:79:49:fa:94:63:2f:f4:09:38:8e:2b:91:a8:03:
8c:9e:f4:91:56:4b:d2:13:c6:62:ae:aa:87:3a:b2:
59:2b:6d:d1:9f:c8:6d:13:c0:dc:a7:aa:d0:ab:ac:
39:18:a8:74:7a:7b:93:66:4f:a1:d8:67:a6:81:83:
7f:01:2c:76:d8:0c:29:1a:6c:e7:bd:34:e8:d7:19:
50:d7:57:e6:cc:3f:23:6c:d6:68:2c:36:a2:06:f5:
d6:3b:c8:4c:13:2a:19:4c:fc:21:c8:87:44:fc:58:
c8:d7:02:b6:17:42:af:6a:56:cf:bc:c9:2c:3b:7e:
9d:d7:2d:63:a9:2a:b0:2e:0c:cc:a2:0d:22:44:d2:
62:22:11:73:5d:8d:4a:52:93:13:fe:2d:ec:d6:6e:
74:3b:4d:25:b5:8c:1e:28:a9:27:77:83:d9:65:8b:
2f:ec:cc:7b:c9:e3:e8:57:35:2a:8a:a3:a7:e7:93:
15:7c:49:0c:77:1d:87:e4:73:d5:a3:3d:fc:26:02:
41:56:fd:78:ea:1c:c6:09:5e:78:d1:ba:0a:e2:8f:
f0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C4:38:9A:7C:B4:87:EA:A2:2A:E0:F9:20:FE:00:C9:33:24:0A:C4
X509v3 Authority Key Identifier:
keyid:7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e4:39:35:6a:bf:47:6e:24:54:9d:9d:d0:74:9c:40:24:5d:
5d:7e:d8:db:8a:b3:e8:e0:8f:4e:d3:c1:06:db:b2:d3:87:31:
36:d0:17:66:bf:e7:b2:eb:ce:7e:30:f1:49:20:3e:d0:f0:0b:
33:d0:2d:b9:19:e2:03:31:5f:1f:a5:a9:3b:a7:a6:b0:e4:b4:
32:01:cb:a1:0b:07:ab:b2:c3:64:d5:9a:f1:8b:01:65:8d:2d:
6b:88:36:96:ea:29:59:1b:93:bc:bd:6e:a6:48:1e:ca:44:77:
6b:14:47:e1:77:33:29:fc:6a:77:0a:62:eb:af:fd:1a:87:93:
11:75:6f:f4:48:98:98:ae:f6:de:cb:52:2e:cb:20:4d:a6:7d:
ca:d7:0f:2d:9f:4a:35:8b:bd:69:3d:65:26:2b:71:d0:80:d0:
bd:a2:e4:cc:e1:47:10:98:83:e6:e6:75:f6:52:41:d1:29:e2:
b7:c0:83:1a:68:97:04:02:2a:17:1f:25:2e:42:57:66:75:50:
28:e1:61:e6:27:e6:e9:f6:9c:de:96:9c:b0:df:9b:55:f0:b2:
d0:1d:86:6c:ab:56:c4:8d:52:17:cd:d0:e5:1a:62:7a:5d:f1:
62:19:b8:d5:5b:07:4a:6a:36:3c:ac:d7:c1:bd:81:ed:24:44:
92:cd:6f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:05 2026 by rpki-client