Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
File: 7pl3APBqqbf8Ia67FWIpnVpiXdw.mft (raw, json)
Hash identifier: uu8jgjaNB+SsWjjyBzWnjdbEG/w32UhuCvRvvVKZXGo=
Subject key identifier: 54:84:65:16:43:4F:D4:04:D7:82:ED:0A:38:37:8C:C6:B7:33:08:B1
Authority key identifier: EE:99:77:00:F0:6A:A9:B7:FC:21:AE:BB:15:62:29:9D:5A:62:5D:DC
Certificate issuer: /CN=ee997700f06aa9b7fc21aebb1562299d5a625ddc
Certificate serial: 019D2996F4CA493DE8A5A292FC5DD35A151B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7pl3APBqqbf8Ia67FWIpnVpiXdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
Manifest number: 01B6
Signing time: Thu 26 Mar 2026 10:00:52 +0000
Manifest this update: Thu 26 Mar 2026 10:00:52 +0000
Manifest next update: Fri 27 Mar 2026 10:00:52 +0000
Files and hashes: 1: 7pl3APBqqbf8Ia67FWIpnVpiXdw.crl (hash: ntUlinQFyCEE4Y4UWxnKYROX8Cwe+vPayHmITOWty/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7pl3APBqqbf8Ia67FWIpnVpiXdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:f4:ca:49:3d:e8:a5:a2:92:fc:5d:d3:5a:15:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee997700f06aa9b7fc21aebb1562299d5a625ddc
Validity
Not Before: Mar 26 10:00:52 2026 GMT
Not After : Mar 27 10:00:52 2026 GMT
Subject: CN=54846516434fd404d782ed0a38378cc6b73308b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a0:8f:a2:ba:3f:93:d3:bc:4f:21:e0:21:a3:
c3:b5:9d:6b:cb:92:ec:49:56:16:be:3d:f4:e2:c4:
96:ad:a5:c0:4a:b9:c1:7e:af:78:6f:5b:c0:d7:84:
a8:b7:17:e5:a7:89:7a:de:bc:e4:11:66:16:b0:03:
73:3a:5d:91:41:81:e8:b2:d1:dc:10:8e:3f:77:7b:
86:48:a6:bb:bb:bd:7c:d9:ac:de:c1:78:e2:26:89:
90:c7:f7:42:bc:af:7d:c0:9e:f4:e3:a3:6a:8d:84:
66:0f:1b:f0:bf:7a:68:c2:99:3c:3e:c3:58:23:16:
6c:e8:6d:76:5d:fa:64:4f:fd:50:a0:fb:be:15:cc:
ac:ed:db:ba:5f:ba:24:ce:08:0d:c3:cb:d9:0f:6b:
bf:65:35:90:43:75:99:46:6f:90:7d:b3:35:21:79:
1e:6f:c4:1a:db:6e:2f:f4:a4:50:e1:3a:32:a7:de:
45:84:e9:3a:83:c0:dd:f2:7d:5a:d9:91:ab:ea:39:
83:3a:6f:f6:40:7e:9a:64:4a:c7:54:7d:cc:7d:5d:
52:d7:13:5b:fe:8e:c4:7e:c7:10:9e:48:dd:2f:73:
e5:af:1d:a0:a5:7f:c7:f6:89:38:47:6a:62:cc:63:
bd:e3:75:dc:57:1c:6c:35:87:47:4f:f4:ef:1e:47:
48:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:84:65:16:43:4F:D4:04:D7:82:ED:0A:38:37:8C:C6:B7:33:08:B1
X509v3 Authority Key Identifier:
keyid:EE:99:77:00:F0:6A:A9:B7:FC:21:AE:BB:15:62:29:9D:5A:62:5D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7pl3APBqqbf8Ia67FWIpnVpiXdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:55:97:ae:b6:e4:af:91:f8:c7:ec:ba:2d:81:5d:de:56:31:
94:9c:c4:8b:c9:c9:23:21:0b:5d:68:2a:90:12:e7:4d:b7:d5:
98:b3:21:c4:37:96:d6:ab:6a:ac:63:f8:11:59:48:bb:1e:75:
40:60:fa:0c:18:40:44:1c:85:3c:50:1e:18:6d:f6:3c:2e:cf:
22:09:54:3b:01:37:46:b0:ea:00:78:47:84:45:00:e0:c4:ba:
cb:b7:9d:93:b3:06:9d:3e:55:90:4c:27:30:74:54:2b:89:46:
29:27:b4:58:d0:07:3d:a2:d4:e0:21:40:63:ed:7b:09:c2:e0:
f4:e6:73:f7:ad:3c:c0:5c:88:16:28:43:cb:b0:d1:88:69:b5:
1c:24:98:2a:7b:e9:51:c6:bc:2d:37:89:11:7e:dd:21:9f:97:
92:ba:22:54:be:1c:a3:e4:4d:5c:63:7f:06:55:5c:0a:94:a3:
c7:88:df:60:fb:73:e3:03:9c:c1:50:20:c2:e0:55:52:45:27:
53:ad:8a:54:c0:64:22:55:73:e2:e0:10:4b:47:58:21:42:73:
0e:37:76:2f:03:36:ae:ee:a6:fa:7e:07:b0:a3:48:f8:af:69:
52:69:50:39:6c:2a:5e:ea:56:02:be:68:fe:b1:2c:50:60:9f:
ff:fe:bc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:12 2026 by rpki-client