Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier: vXGsWtBDcIkEqTtJjA/Nwz0OgbjVeqZVRuioNtwejec=
Subject key identifier: 3C:32:F1:5A:BD:84:F5:18:EF:2C:80:59:35:55:45:0A:82:6D:7F:F3
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer: /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial: 019F92ECBE3916656BFEDF2FAB48C6BFDCB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number: 0EF7
Signing time: Fri 24 Jul 2026 07:00:16 +0000
Manifest this update: Fri 24 Jul 2026 07:00:16 +0000
Manifest next update: Sat 25 Jul 2026 07:00:16 +0000
Files and hashes: 1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: 8TiKZ/M/hC3v6JEsHw6rWSzTPLcaDb+1kBiExERrquQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:be:39:16:65:6b:fe:df:2f:ab:48:c6:bf:dc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Validity
Not Before: Jul 24 07:00:16 2026 GMT
Not After : Jul 25 07:00:16 2026 GMT
Subject: CN=3c32f15abd84f518ef2c80593555450a826d7ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f5:7b:74:a1:ce:79:38:75:87:84:ed:58:18:
3e:76:a0:d3:13:a7:a5:31:f4:89:c6:05:53:03:94:
ba:60:5d:e6:b2:7b:85:9b:fc:1d:06:8d:ad:e1:83:
03:5c:9a:01:0b:b4:ff:ab:dc:09:5d:bc:79:0c:02:
18:46:a3:fd:02:52:8f:02:cc:6f:81:aa:18:92:7e:
77:67:4d:e1:df:5f:ec:ce:b5:76:83:19:d2:75:e0:
fa:59:d6:94:af:90:aa:f6:1c:78:56:03:dd:cb:38:
7f:a6:5d:66:30:3b:2e:38:1d:f3:77:b5:18:62:7a:
4b:75:28:3c:eb:77:f6:8b:77:f0:dc:e5:d4:0d:df:
30:4f:37:ba:03:0e:8b:4b:56:6f:63:c0:f0:74:77:
ed:6b:c7:89:6d:8a:f0:c2:24:97:61:b3:b6:33:6c:
e5:07:a0:e5:b2:cb:ce:00:58:dd:35:f1:69:8c:7a:
93:e3:2d:66:50:62:96:d0:b5:e6:30:c9:b5:2b:fc:
ff:7c:68:77:44:67:42:16:cf:cf:8d:54:fa:ba:e0:
83:30:3f:aa:7f:3b:7b:4c:65:4c:02:63:84:cb:8f:
21:a2:ad:77:0f:48:36:25:b7:31:fb:e9:89:30:64:
94:1c:52:3b:57:50:22:d7:d7:41:3e:d8:c4:9d:c2:
66:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:32:F1:5A:BD:84:F5:18:EF:2C:80:59:35:55:45:0A:82:6D:7F:F3
X509v3 Authority Key Identifier:
keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4f:20:96:18:b5:43:e7:6c:46:58:36:9a:18:8f:33:5f:8b:
ea:6a:f6:30:9b:0e:34:64:da:c1:75:c2:c3:58:bd:e9:60:c9:
33:7b:de:4a:7d:d6:0b:e0:86:58:38:88:b6:36:d2:ef:fa:0f:
cf:aa:b4:41:55:7b:ac:6e:12:9c:bc:eb:a5:04:60:14:65:3a:
de:88:97:13:ca:88:67:e9:85:9b:44:18:fe:e2:57:96:6f:3d:
5d:a2:f6:23:13:81:38:bf:14:6e:b4:0e:cd:ff:9e:dd:09:ea:
60:68:23:3f:b0:0b:56:54:52:a6:9c:90:81:03:13:1d:33:e7:
7b:c2:18:ae:bf:2f:ad:4f:aa:0b:f0:b2:be:5c:ba:07:04:6d:
89:42:07:d1:b2:ac:f6:69:42:6d:0f:7e:1c:98:44:7e:98:69:
70:ff:89:6f:b5:88:c7:27:69:db:89:fa:a9:b1:a0:6c:52:d5:
0e:f1:aa:13:69:91:94:53:87:53:3b:cd:a8:03:ce:5c:2a:d6:
6a:eb:93:f0:b9:5b:8b:c6:85:55:b3:db:d8:d9:b1:83:35:13:
de:53:8c:a2:9e:75:22:c1:b0:e4:61:11:cb:37:ae:68:96:53:
c8:8b:66:2e:8a:84:94:23:f2:b2:66:62:0d:6d:40:66:f6:0f:
2b:0b:a8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:29:01 2026 by rpki-client