Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
File: 7fBEw2PXiOdDNOE24DzH_R5JohY.mft (raw, json)
Hash identifier: nbqo6t14dj5LhL6AtwqotBVubB97QcpIzvZ3WYY7DF4=
Subject key identifier: 7D:23:CE:F1:E2:02:79:C0:84:24:A6:A2:BD:98:10:BE:E2:BB:0C:95
Authority key identifier: ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
Certificate issuer: /CN=edf044c363d788e74334e136e03cc7fd1e49a216
Certificate serial: 019F90FF91CC3BCC6C146F68C5E52CD11EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
Manifest number: 0C3C
Signing time: Thu 23 Jul 2026 22:01:35 +0000
Manifest this update: Thu 23 Jul 2026 22:01:35 +0000
Manifest next update: Fri 24 Jul 2026 22:01:35 +0000
Files and hashes: 1: 7fBEw2PXiOdDNOE24DzH_R5JohY.crl (hash: CKaleO/tgk476MQTuAcJCdX0gCqUH5n050egZeq0+lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:91:cc:3b:cc:6c:14:6f:68:c5:e5:2c:d1:1e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf044c363d788e74334e136e03cc7fd1e49a216
Validity
Not Before: Jul 23 22:01:35 2026 GMT
Not After : Jul 24 22:01:35 2026 GMT
Subject: CN=7d23cef1e20279c08424a6a2bd9810bee2bb0c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:45:a5:f8:ae:3b:0e:59:63:cd:e8:b8:9f:08:
85:2d:2c:14:70:fa:c4:12:6d:60:ee:21:27:b1:53:
f8:7f:4c:b9:ef:96:b0:73:da:3b:eb:51:ea:06:6b:
f2:bc:36:59:b1:fd:1b:cd:db:21:b5:73:77:b0:02:
37:28:b8:78:f9:8a:39:70:f9:b5:85:49:6c:57:5c:
f7:5e:29:8d:d2:e0:0e:4f:ae:9d:b6:ba:2c:16:28:
b2:7e:73:51:ea:68:d3:fa:c4:24:95:f9:5d:ec:46:
2c:d9:42:1d:c7:de:be:4f:da:02:ce:65:8c:29:c1:
70:ff:d9:ee:e0:ce:e4:5b:68:3b:e6:13:ab:e2:76:
28:86:93:37:6c:eb:1f:4e:c7:60:e3:7a:ac:c2:b6:
0b:b5:39:6c:4f:69:2e:71:16:e8:00:a5:96:7e:00:
8d:25:ff:59:b6:62:38:74:9f:5a:16:ed:0d:d1:dd:
ba:6d:f2:0b:04:2d:1f:7d:78:66:f2:9d:db:a6:d1:
08:7f:61:23:85:4d:ba:33:5f:10:e2:72:01:d0:b9:
b4:43:72:c3:29:94:cc:7a:b5:6c:ee:88:d5:77:27:
8b:57:e7:42:3d:b0:ff:4c:64:c5:62:1c:15:c5:bd:
ce:dd:31:35:49:c6:46:e3:e3:b0:d0:e1:81:9b:8e:
95:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:23:CE:F1:E2:02:79:C0:84:24:A6:A2:BD:98:10:BE:E2:BB:0C:95
X509v3 Authority Key Identifier:
keyid:ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:40:a5:da:6e:e9:16:58:80:67:f1:55:32:10:bd:81:33:45:
08:6a:58:e9:63:b0:a6:13:dc:de:c8:0a:ba:bd:72:52:1d:56:
b6:7d:bb:25:74:ef:ea:2e:55:1d:c1:4f:d0:92:59:95:15:fa:
bb:d9:cc:aa:6c:ae:d9:d2:4a:e9:f6:d1:e2:d7:a9:9c:b0:44:
27:1b:82:2b:59:5e:71:72:c8:00:ee:15:e1:83:fc:e3:a3:42:
e7:42:86:a3:17:28:65:45:57:f2:fb:04:48:48:c0:8b:16:f5:
33:77:60:11:c4:5f:29:65:0d:e7:51:4b:74:f3:8f:18:47:65:
93:ec:b2:b8:d0:08:2f:6a:80:5e:e8:ee:0f:f9:ec:96:41:03:
0f:aa:3f:ff:75:87:01:5c:2e:d4:bb:b0:47:32:a0:19:bc:14:
2b:9f:ec:5c:71:67:cf:92:0c:89:6c:e7:5d:01:43:a4:84:57:
36:63:be:7d:16:a8:ce:98:83:25:be:6d:9c:ab:53:a1:61:63:
58:a8:8a:18:23:a9:f9:d1:f7:2a:1e:4d:15:e7:94:4b:8e:a6:
25:22:de:dd:43:c5:c1:de:3a:20:83:d8:55:a5:b5:ab:ef:c2:
20:74:64:f1:8c:f4:20:ab:e9:f2:48:25:68:0f:07:39:90:55:
b6:c5:d9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:38 2026 by rpki-client