Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
File: 7pl3APBqqbf8Ia67FWIpnVpiXdw.mft (raw, json)
Hash identifier: oRlWWcFp/7HBQ+E8EXYejo9uSMuLh4T+7NZt4zJ4Ok4=
Subject key identifier: 91:2A:03:B2:40:89:8C:36:6C:33:0B:4E:60:FD:E9:AC:C6:01:EC:32
Authority key identifier: EE:99:77:00:F0:6A:A9:B7:FC:21:AE:BB:15:62:29:9D:5A:62:5D:DC
Certificate issuer: /CN=ee997700f06aa9b7fc21aebb1562299d5a625ddc
Certificate serial: 01A0CC6C148065AC18F234B44A50642CD35F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7pl3APBqqbf8Ia67FWIpnVpiXdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
Manifest number: 0398
Signing time: Wed 23 Sep 2026 04:00:30 +0000
Manifest this update: Wed 23 Sep 2026 04:00:30 +0000
Manifest next update: Thu 24 Sep 2026 04:00:30 +0000
Files and hashes: 1: 7pl3APBqqbf8Ia67FWIpnVpiXdw.crl (hash: wuKqHxa+zokLtLf/NkHoEqbWFGvH0tZXSwE0qxTNuto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7pl3APBqqbf8Ia67FWIpnVpiXdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:14:80:65:ac:18:f2:34:b4:4a:50:64:2c:d3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee997700f06aa9b7fc21aebb1562299d5a625ddc
Validity
Not Before: Sep 23 04:00:30 2026 GMT
Not After : Sep 24 04:00:30 2026 GMT
Subject: CN=912a03b240898c366c330b4e60fde9acc601ec32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c7:7c:5e:5a:af:0d:ab:b7:1f:a9:53:b8:3c:
53:d7:d0:bc:34:8e:36:44:76:f8:fb:57:2d:b2:23:
82:a9:67:0a:d6:6f:7a:4c:e7:3c:68:74:66:79:8c:
14:4d:38:e9:e3:c7:fc:cf:c4:02:56:52:d7:0b:8c:
1b:b7:fb:53:3f:c2:e4:93:f7:d1:97:e6:f2:f8:d7:
bc:10:4e:f6:30:7f:e5:12:02:83:4d:f1:78:aa:5c:
f2:83:2b:33:00:0b:14:46:a4:21:f9:f2:77:fa:96:
5d:b4:7c:82:7d:0e:40:11:e9:c1:dd:32:7e:78:25:
ff:dc:ad:76:96:7f:9d:75:35:bb:ad:56:ed:55:f0:
38:33:06:d9:83:8d:b9:42:a0:65:0d:a7:9f:4c:ea:
82:15:67:98:47:db:75:60:77:39:ba:18:19:24:7c:
97:17:8e:70:87:e9:fd:a3:d0:c7:e6:2f:44:92:3d:
fb:ee:8c:30:f5:84:33:e5:b2:74:85:fc:64:4b:47:
9f:25:6f:3b:23:a2:74:cf:2b:be:17:82:f8:51:f1:
f2:6d:18:8f:02:93:3e:13:23:c7:1b:29:72:1b:fe:
b2:85:ab:2b:0a:5c:5f:bc:a1:bb:7d:a7:0b:64:74:
55:95:aa:19:e7:d8:9d:bb:8e:ca:16:0a:85:2a:bc:
56:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2A:03:B2:40:89:8C:36:6C:33:0B:4E:60:FD:E9:AC:C6:01:EC:32
X509v3 Authority Key Identifier:
keyid:EE:99:77:00:F0:6A:A9:B7:FC:21:AE:BB:15:62:29:9D:5A:62:5D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7pl3APBqqbf8Ia67FWIpnVpiXdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:48:87:16:16:97:69:65:bf:02:0d:d3:14:53:03:da:b5:ab:
4b:18:1b:2e:24:f5:08:86:55:ff:bc:9d:0f:bc:91:30:ea:a4:
a0:10:1e:34:7b:fb:0c:b6:b4:37:da:cd:a2:d6:fc:cc:05:0e:
ab:e6:4d:21:96:db:d7:27:31:41:4e:2a:29:56:bb:12:47:2b:
e6:e3:e1:dd:c5:23:20:2a:cb:2d:39:83:c1:d6:7a:b8:68:4d:
62:74:30:49:91:5a:26:4c:21:26:31:55:66:6d:f1:a8:1d:aa:
42:34:62:8a:64:08:c4:2f:e6:af:44:ab:ac:53:8b:17:1f:7a:
dd:f9:c9:22:8c:36:a6:12:08:56:b0:2c:88:49:f4:5c:44:16:
dd:6c:ad:9f:c2:96:02:82:bb:8a:51:16:ae:84:12:58:6f:4f:
1a:71:bb:9d:45:a1:53:cb:1c:f5:f1:97:b5:82:df:27:b8:1e:
23:81:9b:97:73:a7:7c:14:59:a4:17:f7:0e:db:bd:34:6a:c0:
aa:74:6a:79:5d:16:5d:3e:a7:fc:2b:ba:63:d8:50:44:d2:a0:
09:43:b8:da:84:f3:e9:16:27:8d:34:d5:39:b6:23:44:16:7c:
8b:6a:60:9f:a1:8b:2b:60:ef:9d:91:e4:9a:cf:23:50:d5:5a:
1d:50:12:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:35:39 2026 by rpki-client