Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
File: 7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft (raw, json)
Hash identifier: IsCPhu5PMpK/RPKeqU6OwPF3sCaOLAF3gkHQfEX4RFU=
Subject key identifier: 64:1D:E7:18:46:01:E7:87:E3:17:11:2F:F8:EF:7B:63:F7:DD:5E:D9
Authority key identifier: ED:6F:9C:79:06:94:0E:3D:44:37:C6:BD:CD:E1:64:D0:65:A8:0E:A5
Certificate issuer: /CN=ed6f9c7906940e3d4437c6bdcde164d065a80ea5
Certificate serial: 019E1D2227AE4A45A3E14B08D124793D0BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
Manifest number: 08AF
Signing time: Tue 12 May 2026 17:00:38 +0000
Manifest this update: Tue 12 May 2026 17:00:38 +0000
Manifest next update: Wed 13 May 2026 17:00:38 +0000
Files and hashes: 1: 7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl (hash: PBcS1z9uOi1q53xFmyam/CqZge0XbekNRFQrq9bjZyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:27:ae:4a:45:a3:e1:4b:08:d1:24:79:3d:0b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6f9c7906940e3d4437c6bdcde164d065a80ea5
Validity
Not Before: May 12 17:00:38 2026 GMT
Not After : May 13 17:00:38 2026 GMT
Subject: CN=641de7184601e787e317112ff8ef7b63f7dd5ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:95:7c:bc:ec:c1:ca:a1:3d:fd:25:5e:eb:
eb:bf:c7:4b:f7:75:ca:a7:b8:54:34:c3:48:6a:aa:
1c:bc:98:de:6c:bb:99:92:36:11:6f:5f:be:16:d6:
54:bf:43:5a:ce:5e:81:56:a6:a2:2a:b6:6d:7c:28:
05:cc:28:e9:9d:df:5b:76:09:dc:ac:81:80:fb:0d:
a7:4a:2e:71:9c:34:8e:e5:e2:07:4b:eb:66:4f:e8:
e9:bc:e2:64:74:0d:a0:20:fe:e4:ff:10:32:7b:2c:
5e:aa:19:e3:6f:70:59:9d:cb:a9:b6:38:7f:21:ad:
12:f7:53:24:68:20:78:26:99:24:84:68:00:51:aa:
42:d5:3d:8d:af:35:67:6d:ce:38:f4:ea:35:31:69:
b2:ba:a4:2c:dc:37:42:8b:ae:cd:24:ed:ec:8d:4b:
79:6f:b0:0a:9a:3d:32:68:53:a9:d8:dc:4b:f9:5f:
f6:4f:09:11:00:cb:54:83:df:e6:d5:e1:e4:74:27:
97:bd:3f:83:1b:ff:9d:b3:08:b9:ab:1f:27:32:68:
64:50:e4:0d:e0:9a:0a:d7:49:19:70:97:39:85:40:
33:71:b2:01:5c:51:f8:5a:25:15:6d:d2:51:4c:0a:
8d:08:b8:01:a3:40:0d:54:8d:76:f5:1d:95:c8:0e:
37:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1D:E7:18:46:01:E7:87:E3:17:11:2F:F8:EF:7B:63:F7:DD:5E:D9
X509v3 Authority Key Identifier:
keyid:ED:6F:9C:79:06:94:0E:3D:44:37:C6:BD:CD:E1:64:D0:65:A8:0E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:bd:ea:b5:81:ff:ed:7c:15:ed:eb:2d:a8:37:8e:bf:c3:ce:
dc:26:98:bc:41:63:4e:6f:b1:14:4b:67:9c:f8:d3:c7:2b:93:
e1:85:f0:71:67:dd:9e:72:b4:3b:77:65:7f:6c:d7:70:1f:c6:
bb:f9:35:05:8c:7c:bc:8d:36:f4:20:ff:b7:f9:8c:53:c5:6b:
a4:c2:fb:a3:3d:26:bb:28:ba:a8:ab:f6:a2:d2:cb:7c:db:08:
ea:d9:a1:f5:01:fa:a1:1c:3d:3a:23:06:b8:54:54:01:f8:4f:
79:2a:4c:e1:24:4f:77:3f:d1:f6:23:7e:14:ff:2a:e0:64:94:
60:30:3e:fe:b7:68:ea:7b:9c:2e:c9:c2:00:d7:2f:28:01:3b:
c0:ab:8c:fa:cf:f7:8e:8e:7d:51:bd:af:8e:a0:23:86:0f:3d:
21:a2:68:23:d5:6c:74:ae:96:ee:5a:7c:9e:92:52:c9:08:51:
86:b0:d5:fb:2a:d1:b9:47:28:43:c6:11:27:e2:30:32:18:3a:
85:2f:05:31:06:e7:46:e4:8c:99:4b:44:cb:ba:b6:55:81:0b:
74:26:85:b4:12:06:a2:7c:86:29:ef:48:05:4a:ce:62:34:0e:
50:f8:ee:32:4f:b8:a9:06:19:fb:86:a7:51:9b:02:07:b7:1b:
8c:1a:b0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:06 2026 by rpki-client