Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
File: 7O2DGd7RXV8LarRBAJ3hmxnRUps.mft (raw, json)
Hash identifier: iOWpvbgIqtpBZdk5p/6Eb4KRsSEWSpU04naqJbwfDQ4=
Subject key identifier: 6D:7C:7A:9F:97:C4:8E:B1:F2:6F:FC:65:A6:77:C4:9E:79:EB:A0:FF
Authority key identifier: EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
Certificate issuer: /CN=eced8319ded15d5f0b6ab441009de19b19d1529b
Certificate serial: 019D2996DC1E83E945819A9BA1D2D8C1874F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
Manifest number: 088C
Signing time: Thu 26 Mar 2026 10:00:45 +0000
Manifest this update: Thu 26 Mar 2026 10:00:45 +0000
Manifest next update: Fri 27 Mar 2026 10:00:45 +0000
Files and hashes: 1: 7O2DGd7RXV8LarRBAJ3hmxnRUps.crl (hash: IN/D4CuVSFUgWvuuMVSVQD6mXNy+dN+XHwi6mpA66+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:dc:1e:83:e9:45:81:9a:9b:a1:d2:d8:c1:87:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eced8319ded15d5f0b6ab441009de19b19d1529b
Validity
Not Before: Mar 26 10:00:45 2026 GMT
Not After : Mar 27 10:00:45 2026 GMT
Subject: CN=6d7c7a9f97c48eb1f26ffc65a677c49e79eba0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ef:49:b6:c9:14:67:b9:a3:c8:e8:b3:0f:9b:
8f:78:e6:14:80:e8:50:26:43:6c:52:3e:62:db:91:
96:9b:7e:37:6d:3c:7e:6b:7c:d3:73:79:ee:f1:50:
b2:cd:66:1a:a0:e1:d9:63:da:2a:dc:eb:71:27:90:
98:a5:9d:e3:8c:1a:81:6b:9e:25:95:16:d5:7a:b0:
ae:34:f1:44:09:7a:f7:fc:fb:18:68:45:dd:ce:2c:
22:14:34:42:41:a2:a2:49:9c:74:60:88:be:dc:e8:
65:8c:54:4d:a9:22:2f:20:15:9b:45:2d:28:0d:53:
68:23:0e:e4:13:fa:64:5f:96:96:4c:2e:76:a9:58:
18:39:67:ed:bc:17:4a:4d:95:29:37:14:e0:9b:f5:
22:6f:e5:0d:66:a2:57:76:94:af:15:8d:3c:7b:d1:
4f:74:1c:12:01:fa:44:ed:aa:82:e7:15:4f:dd:8f:
5a:42:4a:9a:d7:dc:ce:ad:7f:70:38:e4:85:d6:7f:
20:8d:09:ca:af:e7:1b:25:80:ef:e8:25:fe:d9:cc:
19:ba:42:aa:f9:7a:d5:b0:d7:86:74:de:5e:56:59:
7f:e5:21:39:bc:68:07:9c:3c:0f:f8:e4:90:b8:8a:
67:65:bb:b4:6a:db:b7:f1:5d:9d:60:89:e3:bc:aa:
36:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7C:7A:9F:97:C4:8E:B1:F2:6F:FC:65:A6:77:C4:9E:79:EB:A0:FF
X509v3 Authority Key Identifier:
keyid:EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:18:db:70:4a:2c:fc:14:0f:cf:e8:5c:47:b1:e6:fd:af:ba:
42:a4:89:1d:57:cf:73:5e:f6:f2:c1:19:0c:ea:25:ed:bb:b1:
a0:46:d1:a1:eb:74:aa:bf:df:d5:93:01:75:5a:b9:a7:cd:bb:
29:75:d3:44:43:bb:f2:6e:ff:ce:55:45:b4:bc:cb:29:20:44:
6a:c7:6c:36:49:72:c7:eb:df:ac:38:f0:2a:4f:f0:05:73:58:
d4:5c:51:72:35:3a:43:81:1e:0b:f4:64:3d:5a:51:39:f0:5d:
be:c8:53:88:ea:66:29:b1:f9:0a:66:a4:ad:6d:18:4c:9e:c8:
d5:04:9b:c7:67:de:1f:f0:d8:95:a3:35:95:bf:b9:20:b6:65:
80:d0:07:15:6d:78:aa:f2:75:b8:96:f2:93:a1:24:70:9e:b4:
49:cd:38:de:c3:3f:d2:c1:83:e5:d8:71:24:b0:14:01:77:a4:
a5:03:d4:0e:df:7b:5b:b7:84:90:98:d2:99:81:82:7d:c4:84:
dd:d1:91:00:ff:64:6a:ca:71:ba:48:54:a8:cd:e4:78:d3:5f:
72:7d:42:22:42:3d:c1:24:34:2d:5e:a0:cb:9c:8c:b4:95:0c:
03:41:84:f1:a0:1b:14:62:c7:9a:d1:3b:3b:a9:e3:4f:60:46:
c3:e4:7a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:50:20 2026 by rpki-client