Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
File: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft (raw, json)
Hash identifier: QF1ubCyAlhE8PI7R8fldRfHWjOtQkL19UJCRBfPqnwU=
Subject key identifier: 38:B4:0B:BB:9A:25:42:68:62:90:7F:50:E7:4B:77:B7:75:92:AA:A7
Authority key identifier: EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
Certificate issuer: /CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Certificate serial: 019D2703CE9AE4BA47234A9F3CEE76E3C8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
Manifest number: 1538
Signing time: Wed 25 Mar 2026 22:00:53 +0000
Manifest this update: Wed 25 Mar 2026 22:00:53 +0000
Manifest next update: Thu 26 Mar 2026 22:00:53 +0000
Files and hashes: 1: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl (hash: s7HzMs9B/eMtxZwxWCbegU09UyC4sgqgdCcgFgOXrRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ce:9a:e4:ba:47:23:4a:9f:3c:ee:76:e3:c8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Validity
Not Before: Mar 25 22:00:53 2026 GMT
Not After : Mar 26 22:00:53 2026 GMT
Subject: CN=38b40bbb9a25426862907f50e74b77b77592aaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a6:45:27:05:05:a4:fb:2d:16:57:8c:76:7b:
ce:5e:cb:d8:27:7d:f5:5c:10:3e:a3:61:1f:8d:e4:
d0:70:bc:96:07:f3:af:c3:18:c2:f3:71:7d:ef:fe:
43:9e:2a:37:51:a3:7b:10:98:e1:6c:25:b6:91:26:
4e:3a:20:67:5e:37:81:6b:d3:b8:13:1a:84:70:7c:
5b:0c:26:80:07:6f:07:7a:e5:a6:70:e3:ac:2e:f1:
09:bf:c0:b9:da:c2:58:be:99:07:56:88:e2:1d:23:
3d:1f:b8:c1:7e:5a:f7:15:22:5f:99:48:02:50:da:
26:57:e2:dc:bb:1e:05:4d:c8:c9:6a:98:42:a1:f5:
91:eb:4a:4d:c1:c7:9a:0f:ad:0c:84:a2:3a:60:bf:
53:db:48:50:71:05:fe:84:e8:b5:6e:36:21:bf:e2:
5d:fc:7b:85:e3:64:84:79:bf:15:1d:36:a2:b2:94:
0b:0f:9f:15:c0:95:1a:6c:93:64:ec:16:ad:b5:58:
ea:6f:c4:a9:52:95:fc:b6:7f:66:a1:35:9d:93:a0:
21:b7:62:55:61:ad:30:4b:07:05:c0:07:41:a7:12:
1a:65:77:6a:46:79:03:ec:cc:06:c6:51:88:1f:a5:
07:cb:85:21:0c:a3:dc:87:2d:65:e8:b3:ee:b8:2a:
86:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B4:0B:BB:9A:25:42:68:62:90:7F:50:E7:4B:77:B7:75:92:AA:A7
X509v3 Authority Key Identifier:
keyid:EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:99:61:81:af:a5:64:86:8a:a6:e2:ce:b2:2a:cd:23:58:c0:
58:4d:4d:88:2d:75:f0:de:63:7b:bc:e1:76:f9:3e:0c:56:e2:
28:94:87:07:b8:6f:74:ca:3a:08:be:fe:60:15:a2:cc:37:a7:
23:fe:0d:3b:4a:3b:0b:78:fc:90:7b:b9:89:7c:04:93:40:d4:
43:ba:83:16:f3:27:c3:3e:03:77:1f:f9:9e:4a:25:1f:4a:9a:
84:77:31:d6:b8:86:1a:b0:e9:24:c0:10:18:16:37:2a:84:db:
fa:81:22:53:c3:48:f0:fb:27:14:a7:28:16:85:6c:c0:03:8b:
f8:40:ef:b0:93:df:5e:f1:71:05:64:93:8a:76:b5:58:7f:42:
29:b5:f6:ba:ae:6d:c8:4a:bd:f7:42:6f:f8:82:1e:69:c9:c1:
85:de:be:37:e1:c6:16:57:55:5a:c8:df:4a:e8:35:2b:f9:b6:
cc:f2:da:46:0a:5a:59:8e:f6:62:67:ae:27:5f:56:a5:6f:28:
3d:83:67:ce:ab:8c:f0:c7:03:df:c5:aa:f3:a6:9b:cc:8b:b3:
40:c5:f4:50:2f:19:f4:ee:f2:10:66:9c:99:46:42:d7:38:0e:
66:03:00:5a:d5:14:0a:47:93:cd:b3:49:8d:e4:82:bf:9b:79:
63:79:ef:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:35:29 2026 by rpki-client