Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/7faT5RwdXUqyFH9yNDIP9k9Rg1Q.mft
File: 7faT5RwdXUqyFH9yNDIP9k9Rg1Q.mft (raw, json)
Hash identifier: OLlGgG3qZNg+WhF/CCg5nCvArdLwZzsuo2cRhY0zn2M=
Subject key identifier: 86:EC:F6:7D:FC:54:A5:04:94:08:09:E1:37:0E:E7:59:E7:00:98:52
Authority key identifier: ED:F6:93:E5:1C:1D:5D:4A:B2:14:7F:72:34:32:0F:F6:4F:51:83:54
Certificate issuer: /CN=edf693e51c1d5d4ab2147f7234320ff64f518354
Certificate serial: 019F8EA2C1B3CB602C47F93134546C48A5D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7faT5RwdXUqyFH9yNDIP9k9Rg1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/7faT5RwdXUqyFH9yNDIP9k9Rg1Q.mft
Manifest number: 3E
Signing time: Thu 23 Jul 2026 11:00:58 +0000
Manifest this update: Thu 23 Jul 2026 11:00:58 +0000
Manifest next update: Fri 24 Jul 2026 11:00:58 +0000
Files and hashes: 1: 7faT5RwdXUqyFH9yNDIP9k9Rg1Q.crl (hash: oyZlyt+zDajLA8XlaBBQMKN7Ip7f4ZhU3EEBOPxSQGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/7faT5RwdXUqyFH9yNDIP9k9Rg1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/7faT5RwdXUqyFH9yNDIP9k9Rg1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7faT5RwdXUqyFH9yNDIP9k9Rg1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:c1:b3:cb:60:2c:47:f9:31:34:54:6c:48:a5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf693e51c1d5d4ab2147f7234320ff64f518354
Validity
Not Before: Jul 23 11:00:58 2026 GMT
Not After : Jul 24 11:00:58 2026 GMT
Subject: CN=86ecf67dfc54a504940809e1370ee759e7009852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e8:44:2e:28:1b:60:5b:05:c9:ba:ac:f0:22:
92:65:28:ec:c4:6c:cb:0e:40:0d:49:a5:55:b0:d5:
16:e3:11:c7:13:62:b7:63:9d:e8:69:3e:30:27:78:
cb:45:fc:e1:4f:66:df:df:97:39:ef:b0:61:ac:ad:
4e:20:07:60:9d:13:08:67:08:57:f3:09:8d:26:1e:
09:0b:4d:f6:a1:41:71:b6:78:34:c6:a7:3f:27:5a:
40:b2:20:36:dd:07:b9:85:20:09:97:f9:cc:12:69:
55:17:94:e8:4a:49:4b:49:22:39:35:55:29:2f:f9:
d2:31:cf:51:08:a8:32:18:78:fc:0e:98:49:f6:e9:
b4:35:81:86:28:2a:80:58:74:74:2e:19:2d:52:36:
20:3e:ea:c6:d5:77:c3:2d:16:ab:b0:fe:99:e3:78:
e9:75:6d:61:34:6b:26:33:e3:1e:f5:58:f7:98:c8:
b9:34:f7:ca:ef:6b:e1:5f:d2:f2:34:d0:46:ad:1c:
68:7b:e2:69:68:1d:58:76:39:7a:d8:4d:de:bf:62:
16:1d:eb:e2:27:51:7f:96:33:e3:7d:bc:25:60:1b:
02:7b:35:3d:87:55:e6:36:64:42:ec:89:96:e5:7c:
ce:dd:c6:d7:bc:55:63:02:ea:02:da:77:b1:ab:13:
7a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EC:F6:7D:FC:54:A5:04:94:08:09:E1:37:0E:E7:59:E7:00:98:52
X509v3 Authority Key Identifier:
keyid:ED:F6:93:E5:1C:1D:5D:4A:B2:14:7F:72:34:32:0F:F6:4F:51:83:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7faT5RwdXUqyFH9yNDIP9k9Rg1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/7faT5RwdXUqyFH9yNDIP9k9Rg1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/7faT5RwdXUqyFH9yNDIP9k9Rg1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d5:ef:e0:ed:02:89:06:80:ba:09:2d:96:d7:fd:95:81:51:
d2:d3:d9:40:59:8c:34:50:28:16:49:59:d1:fb:17:7f:e9:ad:
5e:ea:b2:50:be:e5:f6:f9:28:db:6e:a9:1e:50:56:fe:4a:f9:
b9:2b:be:d4:c0:40:3d:4b:0c:78:3c:85:59:14:7b:e0:24:c6:
9a:34:d4:e0:b3:6f:0a:ff:50:4f:7c:c4:01:64:3b:7e:e5:7b:
08:ef:a8:fc:ca:4a:b9:ae:27:10:df:d3:0c:a8:c0:9a:32:7f:
9b:02:2f:8b:8d:4e:cd:eb:54:3d:c6:07:27:48:89:be:26:c5:
c6:55:5f:80:f7:00:9d:2b:8a:ca:f7:0c:7e:44:2e:9d:e5:9b:
d2:95:5c:b9:79:27:1e:e6:ad:2d:9f:1c:e0:08:d4:1f:26:c0:
10:d1:1a:cd:ad:93:ad:70:c7:2c:d1:12:ff:fe:31:b4:82:6e:
a5:0c:0d:05:29:0b:ba:fa:26:12:bd:08:27:c8:66:b2:a2:d2:
94:af:25:9e:e2:eb:a5:d9:7b:50:b4:e7:eb:dc:83:5d:30:8c:
3a:39:6e:23:36:e6:4c:40:12:f0:4b:60:f5:d6:fe:61:f1:f6:
6b:df:3e:43:9d:a8:e0:19:63:d8:42:36:db:3b:b7:31:b5:c2:
0f:bf:0d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:25 2026 by rpki-client