Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
File: 7HDF2GfeIA8BSGsaiAqUuEldciA.mft (raw, json)
Hash identifier: XVp7o6lTNjYzaOl4p9d/JT+E3AGk2EvPouLgHTgWbgc=
Subject key identifier: 34:37:39:CC:59:4A:00:C7:16:98:1E:37:C1:C4:29:42:2C:A3:43:41
Authority key identifier: EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
Certificate issuer: /CN=ec70c5d867de200f01486b1a880a94b8495d7220
Certificate serial: 019F90FF8A6F6142167205DC9063EEC1116E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
Manifest number: 1288
Signing time: Thu 23 Jul 2026 22:01:33 +0000
Manifest this update: Thu 23 Jul 2026 22:01:33 +0000
Manifest next update: Fri 24 Jul 2026 22:01:33 +0000
Files and hashes: 1: 7HDF2GfeIA8BSGsaiAqUuEldciA.crl (hash: 50IEqwv82CC1qLwTqsO1cXigsl6qw6VTAAXoalsjw/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:8a:6f:61:42:16:72:05:dc:90:63:ee:c1:11:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec70c5d867de200f01486b1a880a94b8495d7220
Validity
Not Before: Jul 23 22:01:33 2026 GMT
Not After : Jul 24 22:01:33 2026 GMT
Subject: CN=343739cc594a00c716981e37c1c429422ca34341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0e:aa:8b:68:b9:da:7b:a0:e5:36:82:51:72:
16:8e:9f:58:3f:dd:f9:f0:83:f8:70:b6:7e:80:07:
78:de:fd:cc:04:5a:ad:b3:02:f5:c7:82:14:9d:c6:
6a:37:8f:6c:05:b4:d9:17:e0:24:55:9a:a3:22:da:
1d:05:28:6d:71:66:e5:e6:00:06:dd:b8:5d:f9:94:
d9:27:35:c3:aa:31:a3:db:a4:5e:94:bc:e4:7b:fb:
76:e1:c6:d7:38:13:51:c1:8b:32:64:c7:7a:a7:3a:
a4:0e:87:d3:78:44:b5:1e:7c:47:48:e7:1a:e2:ce:
4e:55:45:0c:75:e9:ff:f4:16:bf:f1:e4:c9:e0:dc:
7a:54:fd:78:4c:fd:6e:99:c7:0a:12:06:5f:f6:3f:
55:6a:fd:ea:42:3b:84:04:95:67:2c:60:c6:8f:b4:
7b:6e:40:75:bb:36:35:53:97:f6:bc:31:b9:67:45:
3e:90:1b:79:35:ed:1b:c9:20:1b:6f:37:d6:f3:69:
ce:6a:5b:24:aa:5f:94:3b:92:b6:99:d8:2f:e8:2e:
b5:11:76:27:49:87:f7:4c:f8:c9:ae:df:07:b4:f1:
9d:c8:ef:19:49:a5:90:c9:8f:1d:7e:8d:52:03:94:
94:50:87:b7:5e:64:d3:55:53:a3:ba:32:fb:b4:c9:
6c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:37:39:CC:59:4A:00:C7:16:98:1E:37:C1:C4:29:42:2C:A3:43:41
X509v3 Authority Key Identifier:
keyid:EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b8:08:63:a7:39:da:19:3e:f1:82:76:6e:04:4c:4b:b3:75:
d6:d9:24:d4:17:f8:80:94:af:34:02:e7:65:73:a0:a7:9c:f5:
78:4f:2a:a8:7a:e0:f7:fc:1e:49:1c:6b:22:17:13:b2:e6:f8:
14:8f:5d:fd:29:0d:17:e5:f3:ff:05:ef:74:11:91:a5:b8:fe:
98:aa:af:42:21:5a:02:36:12:e2:9c:85:61:9c:03:f4:ff:78:
18:c7:8e:0b:b2:15:af:98:a2:07:a8:d5:a8:a1:0d:43:25:ef:
3e:79:2d:73:33:d9:45:f9:86:35:31:bb:1e:7f:4a:39:07:df:
99:00:b6:e1:8d:43:df:fa:b3:55:4d:24:80:77:ae:40:48:56:
64:80:1a:ac:e7:d7:57:34:7b:83:99:bc:88:31:ea:68:4e:b6:
72:77:97:ce:24:68:66:16:1b:46:d3:72:d1:19:4f:44:b8:8e:
0b:b1:2a:00:31:14:24:c9:9c:4d:f3:dd:b0:7a:30:19:63:3d:
32:26:25:9b:b9:8e:64:6f:ab:31:2f:37:6e:1f:57:79:e7:45:
a7:f6:38:fc:b4:95:8a:f0:af:8f:da:52:de:84:3e:1c:1f:87:
2d:f8:9f:e0:9d:9a:27:a4:c0:c4:9f:ae:64:62:83:6b:15:c5:
c0:c4:25:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:26 2026 by rpki-client