Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
File: p7ZLX1AsUfocwRSIHLpStansHsg.mft (raw, json)
Hash identifier: SrTWtcLF8MYIfVgpNyDQ9x8k8CIze0P1OBhmoBtAqo0=
Subject key identifier: 47:16:DB:E8:73:73:7F:81:C3:A8:36:5D:8B:03:C4:31:D2:B3:FF:2A
Authority key identifier: A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
Certificate issuer: /CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Certificate serial: 019D284DFA6434E677B4224BA3C7A593983A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
Manifest number: 0BF7
Signing time: Thu 26 Mar 2026 04:01:32 +0000
Manifest this update: Thu 26 Mar 2026 04:01:32 +0000
Manifest next update: Fri 27 Mar 2026 04:01:32 +0000
Files and hashes: 1: p7ZLX1AsUfocwRSIHLpStansHsg.crl (hash: oRR+UECAQeDbcKrpr5iP1MRW4xQi1AFYr3ZHwzMe1yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:fa:64:34:e6:77:b4:22:4b:a3:c7:a5:93:98:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Validity
Not Before: Mar 26 04:01:32 2026 GMT
Not After : Mar 27 04:01:32 2026 GMT
Subject: CN=4716dbe873737f81c3a8365d8b03c431d2b3ff2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:29:3b:0c:ad:9c:f6:14:33:f9:bb:6c:d1:10:
cb:7c:6a:8d:16:8e:be:d6:b8:32:a5:c8:a5:e3:0e:
1e:80:cf:3c:9c:9f:c6:2e:b2:44:07:18:74:da:55:
6d:ab:39:2e:fa:31:8e:c9:e1:74:37:cb:20:6e:bc:
4f:81:8b:97:7a:47:95:a2:61:15:6d:93:80:ce:01:
7d:c4:74:86:c0:d3:90:a8:19:c6:d3:da:a5:7c:8c:
cf:39:01:a9:d3:2b:7f:7f:77:45:dc:e9:8d:1a:af:
ad:e1:ee:f3:e6:5c:20:b8:32:cd:63:10:c4:6e:e0:
24:04:fd:fa:3e:c5:fd:3b:f9:a0:1c:3b:13:a7:4c:
5c:84:0e:f2:bd:ee:8d:8d:35:39:ab:7d:ab:f0:1f:
fb:d0:ab:06:7d:74:71:3e:78:86:42:2d:31:af:3d:
8e:ac:8d:0f:87:cc:9f:2c:00:4b:92:44:70:22:09:
14:eb:54:4d:c3:e2:9b:b5:8f:fb:8e:27:5e:ce:29:
38:86:45:61:33:81:f2:e3:89:fd:07:61:1d:64:cf:
8a:af:e0:38:82:d8:ac:79:77:84:aa:ee:0a:30:2c:
fb:3e:36:c6:11:5c:11:57:2d:33:70:a0:65:e4:4e:
9e:a2:f9:7c:ac:93:d7:de:be:51:a3:41:a6:0d:99:
7d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:16:DB:E8:73:73:7F:81:C3:A8:36:5D:8B:03:C4:31:D2:B3:FF:2A
X509v3 Authority Key Identifier:
keyid:A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ad:37:be:d9:7f:73:59:00:93:20:19:d8:29:51:3b:c6:a5:
01:7a:e3:2c:79:96:7f:e8:37:ae:6a:2d:56:a2:4f:15:62:04:
a7:30:1b:e9:02:cc:0c:29:4f:5e:af:c9:c3:43:54:7a:01:4b:
0b:c1:fc:42:09:35:d7:49:e3:b9:a5:72:80:1b:88:78:44:96:
97:d4:cc:f7:1d:8c:06:80:31:fd:9f:2d:05:01:6e:b1:f1:18:
31:9e:af:a8:61:cf:1c:6a:bf:97:6b:77:29:df:ec:be:0c:3b:
49:96:c8:b5:db:bb:74:6f:63:b1:6f:b3:ac:7f:a1:0d:ba:cc:
4b:8a:93:6f:de:d4:1c:46:84:51:fc:b3:32:e9:7c:51:25:b1:
a2:80:a7:40:36:2d:e7:8f:8f:68:86:5b:dc:c7:0c:a1:21:0d:
33:cb:ea:78:35:f4:ad:3a:b2:42:2b:e4:32:8e:36:f6:49:41:
df:a6:ff:a7:08:82:b4:a6:10:a1:90:49:0a:81:7a:a6:2c:fb:
c5:ca:d7:c5:f9:f6:e7:22:45:6c:18:11:96:40:d9:32:f2:3f:
11:a1:6f:40:5d:24:58:fa:0f:4c:35:45:4a:43:3e:9f:05:95:
d6:89:78:7d:f0:9e:c5:d1:11:c7:56:85:96:a7:1a:43:32:9b:
99:2a:6a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:27:16 2026 by rpki-client