
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/31c3dc-4842-4cff-a0a1-6ceea51e07c5/1/7rv5EjKoEhLjtEz74e4pjGKaZk8.mft
File: 7rv5EjKoEhLjtEz74e4pjGKaZk8.mft (raw, json)
Hash identifier: EGJBZghxtvRFd9FGrc0apJ61z2X1ucHboR3LR2JGMUY=
Subject key identifier: 1D:E5:DB:B3:81:CD:EE:77:7B:8D:0D:E9:92:4F:1A:72:A0:00:03:82
Authority key identifier: EE:BB:F9:12:32:A8:12:12:E3:B4:4C:FB:E1:EE:29:8C:62:9A:66:4F
Certificate issuer: /CN=eebbf91232a81212e3b44cfbe1ee298c629a664f
Certificate serial: 019D28F20953F1B6705EEAC01A2F37ABFC78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rv5EjKoEhLjtEz74e4pjGKaZk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/31c3dc-4842-4cff-a0a1-6ceea51e07c5/1/7rv5EjKoEhLjtEz74e4pjGKaZk8.mft
Manifest number: B1
Signing time: Thu 26 Mar 2026 07:00:43 +0000
Manifest this update: Thu 26 Mar 2026 07:00:43 +0000
Manifest next update: Fri 27 Mar 2026 07:00:43 +0000
Files and hashes: 1: 7rv5EjKoEhLjtEz74e4pjGKaZk8.crl (hash: q67Lt8oEoU6+Xej+SDQP3iG78wc8515bPftM1Tkmgho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/31c3dc-4842-4cff-a0a1-6ceea51e07c5/1/7rv5EjKoEhLjtEz74e4pjGKaZk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/31c3dc-4842-4cff-a0a1-6ceea51e07c5/1/7rv5EjKoEhLjtEz74e4pjGKaZk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rv5EjKoEhLjtEz74e4pjGKaZk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:09:53:f1:b6:70:5e:ea:c0:1a:2f:37:ab:fc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf91232a81212e3b44cfbe1ee298c629a664f
Validity
Not Before: Mar 26 07:00:43 2026 GMT
Not After : Mar 27 07:00:43 2026 GMT
Subject: CN=1de5dbb381cdee777b8d0de9924f1a72a0000382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:16:05:9d:c2:1d:b5:49:f6:7a:24:ab:3a:56:
73:72:8e:0e:2e:c0:13:f3:e2:5e:1c:ff:23:53:bc:
60:fc:e8:e1:05:7e:17:b4:c1:e4:26:77:43:c6:80:
7d:6f:75:e7:ed:85:ce:51:3a:b1:5a:60:d4:d2:f7:
b1:d3:2c:6e:2d:30:8a:08:8a:c2:ba:cc:ee:93:b0:
49:13:f6:c2:8d:8b:01:58:a0:14:2e:c6:a7:ba:c0:
b5:ad:59:e5:14:94:3d:95:bc:3f:73:ab:3e:f0:42:
8a:ea:13:8f:2b:6e:50:91:83:95:1a:c8:10:a0:09:
df:ad:f1:5c:65:19:b8:71:90:8a:79:cf:23:7d:69:
72:84:32:b8:c6:f4:5b:9b:bf:d0:d5:a9:00:b3:3a:
2b:69:9b:2b:65:27:7f:e6:8c:07:ed:f7:18:55:2d:
44:3b:f3:95:e3:3b:82:24:b7:d4:7b:69:30:8b:a2:
10:e7:87:48:cc:0b:56:93:9c:9c:d9:de:df:a0:27:
e6:e7:14:ad:6d:e7:34:d6:6f:31:d8:58:e3:67:0b:
19:2a:09:e1:b7:c9:28:43:a5:4b:b3:4d:e5:3c:74:
80:aa:ed:54:2e:18:4a:9c:34:45:41:bf:a3:04:1b:
f7:97:44:94:b0:e5:75:15:b8:81:d5:1b:66:82:b3:
6e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E5:DB:B3:81:CD:EE:77:7B:8D:0D:E9:92:4F:1A:72:A0:00:03:82
X509v3 Authority Key Identifier:
keyid:EE:BB:F9:12:32:A8:12:12:E3:B4:4C:FB:E1:EE:29:8C:62:9A:66:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rv5EjKoEhLjtEz74e4pjGKaZk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/31c3dc-4842-4cff-a0a1-6ceea51e07c5/1/7rv5EjKoEhLjtEz74e4pjGKaZk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/31c3dc-4842-4cff-a0a1-6ceea51e07c5/1/7rv5EjKoEhLjtEz74e4pjGKaZk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:89:d6:40:b2:da:47:7f:6c:5e:54:4e:15:11:3e:79:56:33:
6f:67:7a:7b:b8:63:cd:ff:a9:b4:75:07:28:81:cb:c7:ec:69:
4b:c2:74:c8:d6:ee:1f:d8:70:48:c4:03:20:e7:b4:c2:8c:0a:
a5:70:ae:24:b9:03:45:a1:5e:e3:4e:10:69:65:3a:e4:93:a1:
61:cc:f6:73:86:a6:bb:51:7f:03:6a:3a:33:24:e7:5f:c8:e7:
c3:53:33:fb:77:3e:47:5c:9b:b8:e4:b1:a4:a2:21:07:e5:28:
ca:7f:cd:28:a6:15:91:b6:a8:ed:e9:f7:92:b0:a2:8d:28:de:
de:f9:f9:cc:0e:61:62:c2:14:ba:3b:2b:05:ae:2e:3e:1b:c8:
cb:1d:16:f8:d3:7d:fb:72:f2:3c:53:60:a6:4b:24:11:79:51:
a8:ca:0f:f1:a6:27:ec:77:f3:20:52:09:33:c9:fc:e2:e8:c0:
1f:19:f3:c8:29:89:77:c3:f8:44:14:f1:7e:4d:70:4d:e3:31:
79:c3:df:14:22:29:10:f8:a5:e5:25:ed:22:45:fe:71:a5:3e:
59:b3:9a:c2:49:fc:3a:0f:53:fb:3e:be:b6:ab:95:cd:d2:f8:
e6:1e:14:b4:83:3e:34:e1:52:a5:39:dd:d4:91:b5:26:56:38:
5c:ef:9e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:41:38 2026 by rpki-client