Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
File: 7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft (raw, json)
Hash identifier: t1wlwu+pdej6SnYcEM+rdaynQ/3Ri0ma0naVRpUkoRI=
Subject key identifier: 64:EE:48:48:01:53:DE:3C:C6:D7:60:04:AB:F9:5B:D4:0E:3D:C3:16
Authority key identifier: ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16
Certificate issuer: /CN=edd97f6078d22e82fd3d04aec5d6721715256f16
Certificate serial: 019D2703CC6C7A3FB1A943F7E6953C122F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
Manifest number: 0C0E
Signing time: Wed 25 Mar 2026 22:00:53 +0000
Manifest this update: Wed 25 Mar 2026 22:00:53 +0000
Manifest next update: Thu 26 Mar 2026 22:00:53 +0000
Files and hashes: 1: 7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl (hash: 0QzSsQLSNR8V2lDf/2Xc0klN+g98fetrIzD3eStJ35k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:cc:6c:7a:3f:b1:a9:43:f7:e6:95:3c:12:2f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd97f6078d22e82fd3d04aec5d6721715256f16
Validity
Not Before: Mar 25 22:00:53 2026 GMT
Not After : Mar 26 22:00:53 2026 GMT
Subject: CN=64ee48480153de3cc6d76004abf95bd40e3dc316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:f2:de:d7:42:3b:3d:e1:28:cf:ed:9f:18:
d7:6b:60:f1:5b:6e:a3:21:37:97:07:fc:8f:aa:bf:
d1:c9:09:5a:85:de:4c:10:ca:70:ac:8d:15:b4:de:
26:b8:6d:1d:0a:06:9c:ee:34:0c:e9:84:e1:00:d6:
c6:4b:60:cd:32:cb:25:f8:e0:b0:93:c0:e5:5d:74:
18:7e:75:48:59:1b:60:c8:e6:70:9e:be:9b:3d:a3:
a4:71:54:6a:8a:de:94:1b:c1:e3:36:43:68:dc:a9:
7d:41:9e:d8:f5:ca:01:16:f6:c2:99:24:0e:8b:5c:
41:c6:90:f6:20:36:8e:08:ab:99:30:19:f5:e3:cd:
cc:ea:32:6f:2b:e7:57:95:7a:c0:d6:32:2e:b7:02:
93:23:78:c6:32:83:d7:a6:a0:0f:86:51:48:08:c3:
e9:35:4e:71:81:f2:95:7c:00:80:9f:2f:a9:a7:26:
3a:0d:ff:3f:6a:42:0e:76:dc:9b:35:04:f1:6b:f7:
ff:28:37:07:16:c1:22:24:6d:32:be:e6:ff:24:e2:
85:8a:2d:73:16:14:a9:ab:79:c1:d1:b4:9f:12:fe:
bf:12:95:02:e3:e8:47:2a:da:a7:88:94:75:fd:e0:
62:ee:25:c9:7d:2c:00:3d:eb:30:3a:16:33:dc:37:
6c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EE:48:48:01:53:DE:3C:C6:D7:60:04:AB:F9:5B:D4:0E:3D:C3:16
X509v3 Authority Key Identifier:
keyid:ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:91:d7:07:e8:bd:3a:9b:eb:ae:72:69:90:d3:81:09:92:93:
bf:0e:9b:8c:d8:68:17:bf:8e:7c:fa:4b:cc:92:28:55:be:45:
f6:b2:c9:0e:b4:39:64:35:b7:ae:4a:02:d8:f3:6c:ff:e8:b6:
a7:7c:2c:e1:d5:0f:87:14:13:e3:5e:41:97:be:a4:df:49:14:
2a:42:cd:56:d0:27:73:02:b5:4f:77:2a:04:be:8e:b9:28:ae:
58:ae:82:c3:69:7c:26:64:f9:51:43:86:5a:bd:df:b7:d6:85:
89:6e:29:8d:5c:79:51:78:2a:3c:dc:fa:9f:e0:1e:26:8c:4b:
34:88:ac:4d:7b:6a:86:5f:31:60:28:a4:15:36:ca:b8:be:ac:
26:0d:5a:06:07:25:db:18:d5:a4:c2:b3:e3:32:fe:50:1f:e4:
8d:c0:c0:e1:e7:f9:97:80:9b:a5:cf:19:0f:80:18:18:ea:57:
a3:fa:a5:91:e7:b6:74:ed:8e:c7:15:e9:bf:99:1b:0e:93:fe:
9f:7a:89:23:75:6e:99:3e:5b:2f:db:7b:d2:48:ec:15:31:38:
9a:05:f8:ef:ed:60:c0:c3:43:48:62:c8:ed:b9:52:83:39:8b:
95:42:4c:30:13:32:c2:83:2d:81:cf:82:78:25:58:d8:f0:7d:
74:d9:ba:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:47 2026 by rpki-client