Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
File: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft (raw, json)
Hash identifier: Q8+gurPS8tL2ChWxO+c5mSERdQtCMT0j/XuSg/2jYqM=
Subject key identifier: A3:7F:64:80:5B:B6:7F:C2:30:9A:7C:75:24:68:6A:55:24:41:72:69
Authority key identifier: EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
Certificate issuer: /CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Certificate serial: 019E1CB47EF63A88D6B25238F6B8F7FDBBF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
Manifest number: 0D87
Signing time: Tue 12 May 2026 15:00:51 +0000
Manifest this update: Tue 12 May 2026 15:00:51 +0000
Manifest next update: Wed 13 May 2026 15:00:51 +0000
Files and hashes: 1: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl (hash: ywuMWg+GOxNiv3GPtVOGfgTjzkKKO+/OzHz65w7W49c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:7e:f6:3a:88:d6:b2:52:38:f6:b8:f7:fd:bb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Validity
Not Before: May 12 15:00:51 2026 GMT
Not After : May 13 15:00:51 2026 GMT
Subject: CN=a37f64805bb67fc2309a7c7524686a5524417269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9a:a0:ed:f2:85:a0:34:01:e0:81:49:ff:92:
c1:be:13:d8:f6:f8:c5:19:52:ea:1d:54:21:19:6e:
a8:a2:90:95:47:d6:94:8d:59:59:cc:aa:42:58:54:
85:86:8b:2b:c4:c2:b6:88:0c:dd:55:bf:6c:f1:3e:
d9:75:66:88:73:25:83:85:ba:0f:59:06:34:08:ed:
7a:30:0c:f0:a2:65:49:fa:41:dc:95:d7:1a:ba:ea:
0e:f8:18:81:fc:8a:df:48:55:1b:12:b2:06:4b:a7:
91:c0:00:6b:78:92:07:bc:ee:dc:bf:09:c4:63:70:
f2:58:fa:eb:f2:f9:94:46:71:6e:1e:fc:63:1e:10:
3a:80:a6:f8:77:b0:e8:ee:e8:45:0f:c7:1e:c9:77:
9b:80:43:84:2a:08:8a:72:70:69:bd:37:dc:58:4a:
92:6d:15:f2:49:d3:f1:bb:c0:0b:ec:77:48:7d:fe:
6d:32:f8:a4:24:16:9d:e0:a1:86:8a:ab:5c:d1:fb:
a7:68:5b:79:26:e0:59:0c:b3:b7:ac:5c:0e:75:14:
e1:66:73:99:1a:20:ff:9b:cc:cd:88:60:36:e3:3a:
69:ae:18:fd:0a:45:24:ab:f6:12:00:16:b6:d8:37:
30:45:08:9a:4a:d4:bb:b1:cf:25:0c:5a:49:85:59:
59:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7F:64:80:5B:B6:7F:C2:30:9A:7C:75:24:68:6A:55:24:41:72:69
X509v3 Authority Key Identifier:
keyid:EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f0:d3:66:e1:3e:d1:c2:9b:02:bf:f2:62:f4:7b:24:78:71:
e1:79:62:b3:85:39:8b:a2:54:16:38:84:51:1e:20:b9:ea:9c:
72:8d:27:11:7d:40:65:9a:54:61:16:73:ec:ec:b6:04:43:fb:
55:38:5e:0e:f6:6b:ef:b5:05:ac:26:2c:29:75:6a:10:df:a4:
d1:b3:fa:5d:c2:99:cb:f6:76:3b:09:6d:8c:6a:dc:0a:d1:7c:
13:a6:b5:b0:7b:ed:a0:3c:5e:69:6a:7a:f1:7f:b2:72:42:6b:
2f:1d:30:0d:d9:a0:30:ea:f1:9d:45:74:fe:4b:4b:e6:cd:5c:
7c:b8:82:2f:82:f1:07:6e:02:ba:d1:69:ff:d1:4e:9c:04:5e:
07:3e:bb:8a:dc:71:ce:09:0f:11:0c:ce:06:fe:fd:f9:fd:29:
d5:45:41:d1:5b:35:2b:36:54:f3:a3:6b:5e:9d:49:dd:b0:3d:
89:7c:40:ea:65:e2:45:3f:33:0d:8f:e0:6f:6d:a1:fe:6e:d0:
19:f4:a5:10:0a:7e:77:7e:e4:2b:7a:5c:c7:6b:dc:08:01:2b:
df:6b:e0:34:23:22:e9:44:e6:35:ed:07:0b:29:00:63:2e:c9:
85:16:f4:b0:59:58:4f:ca:7a:33:35:4e:d4:73:2e:cf:19:aa:
fe:1f:93:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:19:51 2026 by rpki-client