Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
File: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft (raw, json)
Hash identifier: aa0IHB6X8hGtkrNWXA/tjpFHt9bW02HmI4u0adrfbyA=
Subject key identifier: C8:81:BB:8E:87:60:8E:DD:CA:A6:E2:92:71:55:36:4C:59:20:73:93
Authority key identifier: EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
Certificate issuer: /CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Certificate serial: 019D2B4E305E5E19ACB8902CD8F4C50B530C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
Manifest number: 0D0A
Signing time: Thu 26 Mar 2026 18:00:37 +0000
Manifest this update: Thu 26 Mar 2026 18:00:37 +0000
Manifest next update: Fri 27 Mar 2026 18:00:37 +0000
Files and hashes: 1: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl (hash: 05zurbyB+8C+c0WgQkPvOepw2IL58QFA5SNX7XsIgZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:30:5e:5e:19:ac:b8:90:2c:d8:f4:c5:0b:53:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Validity
Not Before: Mar 26 18:00:37 2026 GMT
Not After : Mar 27 18:00:37 2026 GMT
Subject: CN=c881bb8e87608eddcaa6e2927155364c59207393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:4d:bf:1c:4a:3d:4d:65:52:a8:d9:63:28:
9a:13:f8:98:c5:85:7d:2b:ec:d2:0f:68:b1:2a:73:
7c:f7:2a:09:59:b5:9d:d9:3f:db:7d:24:17:59:fc:
e0:b1:a4:7a:1c:f1:b2:52:5f:f7:61:80:1b:a9:c1:
b6:d6:03:b4:c9:70:57:97:51:ec:44:84:20:b7:c1:
05:b4:33:7e:a8:1e:c9:ef:86:09:71:fa:57:08:6d:
83:8a:3a:aa:e2:81:12:6c:21:4a:63:40:41:27:10:
cf:0f:7f:74:67:96:fe:83:97:d2:48:02:d6:48:46:
c6:bc:b1:e3:47:9b:ef:7f:99:ca:77:3c:35:e3:b6:
7f:db:8c:50:ce:46:3f:be:f8:b5:b8:c1:73:43:37:
45:a9:50:75:0c:b6:55:5d:dc:22:fa:10:5a:93:c2:
9f:c2:cd:c7:82:17:36:74:8d:8b:f0:19:7e:f0:f8:
4b:24:79:c7:b3:8e:67:35:c5:e0:8c:48:a6:58:80:
ab:28:7e:5b:f2:0e:ce:30:f9:c6:fe:20:d5:47:ec:
45:52:c0:df:74:6a:20:5e:83:1b:72:b2:b1:e2:88:
42:80:af:0f:2f:a4:a1:ed:e2:db:39:13:27:5f:2a:
3e:d5:3f:ab:30:cf:06:be:1c:31:6a:66:5c:60:a4:
28:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:81:BB:8E:87:60:8E:DD:CA:A6:E2:92:71:55:36:4C:59:20:73:93
X509v3 Authority Key Identifier:
keyid:EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a4:ff:cd:cb:28:8a:e4:95:48:51:47:c2:3b:b8:8c:30:66:
69:33:24:7d:82:90:2c:cf:29:fc:6b:70:72:04:a5:85:cd:ed:
a2:e1:c5:63:a6:6b:75:95:9d:9b:75:2b:53:0d:db:c4:f8:7b:
e3:86:bd:b8:d8:4f:e7:b6:c6:41:bc:b0:0f:c7:49:35:17:1e:
6b:10:f0:aa:f5:b3:b3:72:5a:76:32:31:20:0e:91:ca:70:c8:
2c:8d:32:14:29:5b:69:25:9c:53:1b:0e:23:b9:2d:fd:9c:95:
a4:d2:6e:d1:2d:4f:3d:e5:1f:ae:51:4a:ce:a1:16:02:f9:46:
df:d0:57:79:cc:c5:94:53:2a:e0:25:3a:92:62:34:aa:a5:47:
50:62:b3:75:79:7d:a7:3e:30:69:b8:ec:fe:1d:c7:1f:f1:07:
95:39:de:0e:f8:ed:7b:67:c6:f2:a3:d4:10:08:0b:cf:e1:67:
5a:e4:7f:a3:64:d1:a3:37:4a:55:49:81:e9:cf:49:ba:d6:93:
c0:34:bd:6f:ca:c7:a7:75:5f:d7:d8:8a:4b:fc:3f:49:0f:c2:
b5:19:cb:c8:00:56:66:76:7b:64:db:04:2a:de:67:70:4e:c2:
9e:a8:0d:b6:c8:a3:91:1e:f5:9f:20:cd:04:45:78:c8:8c:23:
77:fc:37:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:34 2026 by rpki-client