Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
File: 7HDF2GfeIA8BSGsaiAqUuEldciA.mft (raw, json)
Hash identifier: De+BD+mAR6RATVpom/6E+DNNPek4Z5BtDMkwifFSI0o=
Subject key identifier: 7A:F3:7F:99:82:9C:F6:6C:D0:FC:05:3B:8A:BD:BA:08:A2:71:C3:95
Authority key identifier: EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
Certificate issuer: /CN=ec70c5d867de200f01486b1a880a94b8495d7220
Certificate serial: 019D2703AF5852ACC46F29B548AA503C9C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
Manifest number: 1148
Signing time: Wed 25 Mar 2026 22:00:46 +0000
Manifest this update: Wed 25 Mar 2026 22:00:46 +0000
Manifest next update: Thu 26 Mar 2026 22:00:46 +0000
Files and hashes: 1: 7HDF2GfeIA8BSGsaiAqUuEldciA.crl (hash: 6s40F0rmZXbQjnsnw+x8hmdncI+lI4kzGndWLRi5d1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:af:58:52:ac:c4:6f:29:b5:48:aa:50:3c:9c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec70c5d867de200f01486b1a880a94b8495d7220
Validity
Not Before: Mar 25 22:00:46 2026 GMT
Not After : Mar 26 22:00:46 2026 GMT
Subject: CN=7af37f99829cf66cd0fc053b8abdba08a271c395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:72:44:74:bb:fb:bc:66:85:91:0f:ee:5c:90:
0e:ab:eb:c0:08:ea:85:3f:b6:25:e8:95:0c:dc:40:
b5:e8:9f:30:58:6c:21:65:73:64:1f:63:e6:32:85:
3c:e0:fe:74:57:00:d9:01:9f:39:1a:1c:d2:4b:4a:
5a:9f:19:17:fd:ea:9a:ab:e0:2b:63:5c:e3:fc:b3:
b8:c3:c7:88:27:24:4a:d3:1e:39:ed:51:52:e7:7d:
c8:3e:94:26:a3:c4:d0:7f:49:33:5b:53:e2:8b:55:
cb:d6:1f:d8:27:c8:73:3a:8c:8e:9a:bf:59:6d:37:
49:50:86:d0:25:11:0b:a7:b0:55:5a:67:4c:da:b0:
aa:5c:50:ec:97:ac:c9:61:2d:99:ad:6b:20:37:fa:
a1:97:78:f4:9a:ed:63:f4:ed:5e:c3:a2:09:41:74:
48:62:68:94:61:83:ff:73:ef:b7:99:fd:91:b5:e6:
ba:f3:f6:58:fe:91:b9:4c:e4:b0:ae:ce:c1:2e:d9:
59:69:24:16:55:69:30:db:9b:3a:a9:b9:3d:ae:f9:
e6:90:6d:66:95:62:c2:7f:30:82:51:3c:dd:d6:00:
77:29:cf:0a:89:d7:1d:f7:2d:81:64:0e:eb:29:10:
05:7c:53:1e:1e:46:db:1f:55:5a:cf:1c:bb:ea:3b:
2b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F3:7F:99:82:9C:F6:6C:D0:FC:05:3B:8A:BD:BA:08:A2:71:C3:95
X509v3 Authority Key Identifier:
keyid:EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:29:0d:72:7d:be:f8:2a:c9:d3:b2:20:21:c5:fa:4d:58:f5:
7d:c6:80:2b:a0:9b:46:20:a5:26:f0:f8:ec:59:38:ba:17:64:
ae:c7:42:b0:72:b1:42:5b:6e:75:98:22:e0:51:3d:2c:d0:90:
19:81:b7:ec:b0:4c:cd:4d:95:02:6a:3f:51:8c:c1:46:61:be:
0f:86:1a:5b:3f:0d:10:9d:f3:e7:e7:35:f6:49:27:d0:1c:4a:
26:e6:bd:67:fd:fb:37:84:15:a9:2d:8d:2f:8f:a0:46:96:5e:
80:af:93:f8:e4:d1:28:11:c2:ab:00:27:ca:72:ee:21:82:b7:
d5:c5:1d:73:01:ab:dd:7d:52:a4:ff:15:79:46:05:e6:3b:c7:
d5:b4:47:3f:c4:be:cd:a7:e4:19:52:b6:aa:cf:46:37:f4:02:
5e:3d:d5:12:03:31:da:9e:2d:96:de:6a:91:37:c0:52:76:c8:
a7:e7:2a:eb:18:e0:2d:97:31:91:7f:59:95:28:0a:c0:1b:03:
9b:2a:00:03:89:a7:70:d6:f8:87:c6:af:f7:b9:a0:ca:f1:67:
f2:08:19:89:45:a9:9a:25:29:ef:b9:97:db:4d:f1:9e:9b:63:
d7:9d:16:b1:32:ca:11:4f:dc:6e:57:1c:b8:ad:be:af:36:9e:
55:34:83:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:15 2026 by rpki-client