Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft
File: 7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft (raw, json)
Hash identifier: AXJ8kMmuQOkENEmCF/av1f+uRdioXqqt13vjCWRwvpI=
Subject key identifier: D4:74:64:A0:6F:D1:1A:F6:7E:3B:19:0B:56:18:B3:A5:62:B9:24:AD
Authority key identifier: EE:A7:09:FE:AA:0A:9F:A0:88:6D:7A:B1:20:68:AA:7F:DA:97:9F:88
Certificate issuer: /CN=eea709feaa0a9fa0886d7ab12068aa7fda979f88
Certificate serial: 019F9549D9BD2108707C0B92E99B4D27C1D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft
Manifest number: 01A1
Signing time: Fri 24 Jul 2026 18:01:12 +0000
Manifest this update: Fri 24 Jul 2026 18:01:12 +0000
Manifest next update: Sat 25 Jul 2026 18:01:12 +0000
Files and hashes: 1: 7qcJ_qoKn6CIbXqxIGiqf9qXn4g.crl (hash: K9SdzxMELy5kYHY94ZASTECweSQOEVNYSVPMZwYbu90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:d9:bd:21:08:70:7c:0b:92:e9:9b:4d:27:c1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea709feaa0a9fa0886d7ab12068aa7fda979f88
Validity
Not Before: Jul 24 18:01:12 2026 GMT
Not After : Jul 25 18:01:12 2026 GMT
Subject: CN=d47464a06fd11af67e3b190b5618b3a562b924ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f3:37:60:c3:58:b5:66:e8:5d:a2:4b:68:1c:
ea:51:49:9d:0d:2d:7b:31:32:a6:c6:32:cc:b9:d2:
a0:99:83:44:e2:95:1c:08:03:00:7d:71:b2:3f:cd:
7b:96:6b:c7:81:d3:de:a8:d9:b8:a5:60:25:6c:d0:
66:5f:20:0a:f7:6c:22:d2:14:96:71:1a:9b:80:38:
51:ce:a6:67:b0:7b:97:a9:1c:3e:61:7a:b7:c1:bf:
80:23:e6:a9:59:9a:4b:44:4c:09:06:9b:3c:ef:4d:
91:1c:61:47:02:fe:bf:40:7b:e3:bb:70:94:6e:26:
db:15:45:08:3e:80:42:0f:82:a4:4e:49:db:79:b2:
55:9f:a7:ff:ca:d8:c5:aa:53:b6:3c:95:63:a1:29:
37:cc:7c:2f:2b:8c:6c:d4:cb:c7:7f:71:6b:c9:83:
be:73:4e:1d:96:9a:49:ae:3f:e6:40:c3:00:97:23:
44:25:1c:2f:63:66:74:91:04:d9:7b:47:d3:b6:b2:
0e:2a:1a:bd:db:b1:1e:0c:29:da:05:8c:e5:86:ef:
27:63:42:9e:f7:07:b2:df:be:0c:fa:54:71:ec:6a:
c6:4a:68:3e:74:e2:4b:a4:81:92:fd:50:82:7b:4a:
ba:f7:66:c1:bb:e6:07:a5:db:38:56:76:10:15:32:
56:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:74:64:A0:6F:D1:1A:F6:7E:3B:19:0B:56:18:B3:A5:62:B9:24:AD
X509v3 Authority Key Identifier:
keyid:EE:A7:09:FE:AA:0A:9F:A0:88:6D:7A:B1:20:68:AA:7F:DA:97:9F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a0:b0:f3:2e:b7:b8:fa:69:17:cd:e0:2e:f9:6d:e7:31:36:
79:48:9a:13:c3:e6:ae:33:b0:7d:c1:17:91:56:2e:aa:04:ae:
e5:12:0c:1a:fa:52:46:bc:18:2c:36:8f:07:93:ac:f8:15:00:
87:f2:40:ac:17:df:3d:05:d4:3d:ec:b7:b7:f2:b6:9e:20:bd:
7f:b1:00:0f:d1:14:26:f8:1e:38:b9:55:b0:9f:75:3f:a8:31:
c0:58:b2:91:6a:bf:2a:17:bd:19:4b:f7:4b:d1:5f:39:bb:0c:
76:59:0c:f9:f3:be:c4:29:d3:d4:f1:31:6e:40:ba:f5:4a:75:
fa:ce:e7:66:45:b7:c1:b1:ed:07:00:bf:2b:4e:6a:5b:3a:72:
f4:c3:91:1b:22:4e:4e:e1:51:5d:03:e8:21:f8:0e:bc:3f:35:
48:11:3d:12:6c:2f:19:94:3a:d1:ca:c9:99:e6:80:83:39:01:
f3:b4:aa:18:e1:a6:5f:60:5f:a6:ce:6b:7c:20:88:e4:7b:a3:
40:74:e1:93:01:0e:9f:4f:44:b0:78:48:1b:a8:5b:a5:fd:43:
4d:ae:9d:9f:d9:68:32:27:f7:30:e0:70:5b:13:22:77:05:37:
98:59:6a:ee:d7:3c:e1:c3:9a:65:d1:55:fb:ad:1d:60:5c:83:
b3:0e:80:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:50:40 2026 by rpki-client