Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
File: 2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft (raw, json)
Hash identifier: gaGPLnj2D867JLSZrzaWHJVBjc+LkYXHWNr6GTks0fU=
Subject key identifier: 95:39:37:22:F9:32:90:BE:8F:5B:0B:F7:99:B9:38:33:63:41:15:96
Authority key identifier: DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD
Certificate issuer: /CN=dbfef0d0e3f3a11343bb917fcb7933f4e9dae4ad
Certificate serial: 019F90FFBFF3B1C5CAD226302C25AAADEDF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
Manifest number: 0CA7
Signing time: Thu 23 Jul 2026 22:01:47 +0000
Manifest this update: Thu 23 Jul 2026 22:01:47 +0000
Manifest next update: Fri 24 Jul 2026 22:01:47 +0000
Files and hashes: 1: 2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl (hash: /yFzqbfmdo11qN3adkeZtXvYMMffYfIgLzl1plUCrAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:bf:f3:b1:c5:ca:d2:26:30:2c:25:aa:ad:ed:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbfef0d0e3f3a11343bb917fcb7933f4e9dae4ad
Validity
Not Before: Jul 23 22:01:47 2026 GMT
Not After : Jul 24 22:01:47 2026 GMT
Subject: CN=95393722f93290be8f5b0bf799b9383363411596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:de:75:5f:fd:88:ec:44:4c:a5:e0:6c:e7:
fd:6e:67:76:f8:e1:cd:29:bc:95:11:9d:06:43:b1:
5f:9f:f2:e2:c3:24:24:e1:90:bc:20:86:22:5c:e8:
15:cf:2e:05:ce:e9:a6:0c:6e:de:98:dd:6f:34:7a:
27:5e:6f:de:3a:af:6c:5f:40:b3:81:35:84:11:a1:
5e:de:4f:aa:d5:25:5a:08:c0:9e:75:c8:77:33:20:
7b:18:1b:ee:4a:31:70:e8:12:71:97:3c:9c:c9:34:
39:46:8a:0b:eb:80:79:04:31:97:d3:a4:53:65:b7:
74:95:1c:77:b1:5f:53:30:69:ed:45:5e:50:7b:0d:
e8:4b:ba:04:53:4f:c3:ce:5c:46:bd:0d:fe:90:da:
71:c4:ae:2b:00:56:29:51:30:3d:0b:86:de:d8:6c:
89:5f:25:d4:e7:5d:65:68:c1:e4:1e:fa:5c:6c:f2:
e3:96:fb:79:37:f8:51:98:c8:fc:7d:c6:6c:8f:18:
a6:f0:08:20:2a:fa:69:93:42:fd:6d:0d:1f:9b:5a:
0c:3f:73:2e:8e:eb:e6:7b:4f:2b:de:5c:5d:84:4f:
79:bb:fa:52:13:38:24:ac:d6:72:af:ef:87:dc:e3:
ca:e8:5a:3c:f6:99:6f:12:bc:60:c1:0a:d0:7a:04:
b0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:39:37:22:F9:32:90:BE:8F:5B:0B:F7:99:B9:38:33:63:41:15:96
X509v3 Authority Key Identifier:
keyid:DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:45:96:08:8e:3c:7f:1e:76:c7:4d:f8:66:a2:ab:4d:eb:a3:
6d:c2:99:41:a1:cd:6b:e7:9e:5e:d5:43:b5:8a:4e:b3:23:69:
34:f3:90:99:25:f5:76:30:92:86:7e:4c:96:82:87:c3:e8:c4:
82:9c:43:b2:87:f0:4a:61:98:08:4b:e7:41:16:63:95:e2:02:
b9:df:f9:bc:33:3a:97:fa:3f:3b:e1:fb:a8:2c:13:e3:c8:26:
82:7d:f1:a4:3b:70:4f:a8:af:d6:b0:ab:1d:ea:79:c2:3e:99:
9c:01:c1:88:59:39:ad:91:a9:8f:fb:a5:3e:4a:fb:82:33:aa:
61:d5:37:77:c1:45:e9:90:f3:64:25:98:56:a3:c6:ec:b1:9a:
b5:eb:b9:1a:88:67:a5:6f:dc:74:85:25:a5:cb:a5:33:95:89:
06:0d:d6:af:4b:aa:8f:97:e0:cf:a3:b7:f4:f7:8e:c8:a0:55:
18:af:19:d3:03:f9:e7:e7:64:90:6c:55:d8:cb:bd:4c:6a:8b:
29:1a:93:15:f5:a7:3e:f0:d2:f6:05:a0:3e:3f:25:39:4e:13:
66:57:60:29:f0:1b:b3:d1:c9:7a:36:95:8c:4b:a3:87:46:a0:
2e:47:49:41:76:b7:4b:68:e2:1f:0a:88:2c:21:86:20:4d:ec:
a3:dd:f0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:53 2026 by rpki-client