Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
File: 7JjcJavXq2PjW2KOqsKlTZSan0Y.mft (raw, json)
Hash identifier: ARJPJkvmfFPmnnSc0fD/JJTki2Htj/5sbs4/a5KpxjM=
Subject key identifier: 84:D3:A5:C3:33:87:82:E1:29:7E:3E:2D:27:41:6D:D5:6E:19:A0:AE
Authority key identifier: EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
Certificate issuer: /CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Certificate serial: 019E1C4711852E86FE73EDC96B0556B70115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
Manifest number: 0C89
Signing time: Tue 12 May 2026 13:01:20 +0000
Manifest this update: Tue 12 May 2026 13:01:20 +0000
Manifest next update: Wed 13 May 2026 13:01:20 +0000
Files and hashes: 1: 7JjcJavXq2PjW2KOqsKlTZSan0Y.crl (hash: OhcEJrgZVlxs6U1urg0gpybxnYVruVLGIaPcYh+iltE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:11:85:2e:86:fe:73:ed:c9:6b:05:56:b7:01:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Validity
Not Before: May 12 13:01:20 2026 GMT
Not After : May 13 13:01:20 2026 GMT
Subject: CN=84d3a5c3338782e1297e3e2d27416dd56e19a0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a6:7e:ab:81:bd:35:0f:4d:0f:ba:12:d7:de:
59:dd:68:2a:e9:9b:79:6c:4e:39:b9:15:23:60:47:
68:dd:eb:13:e4:e3:f6:75:cd:96:bc:a9:7f:51:b5:
c8:00:12:11:b5:ce:e1:16:7e:8a:7d:ea:2e:33:3f:
8d:a5:58:f3:ad:65:0c:06:b9:15:68:69:3d:72:8c:
a7:00:a6:92:af:15:50:4e:6d:f5:1e:d3:14:9d:9a:
de:ce:5e:a2:3c:8e:7b:8f:ba:30:58:ac:67:6a:a2:
ea:7f:0d:90:21:89:a6:51:b3:80:f8:95:f2:f2:91:
1f:41:53:96:57:29:6d:c9:0b:f6:ad:36:71:b9:9d:
6b:91:9b:dd:f5:4a:8c:ba:bc:d7:97:02:29:50:24:
75:ca:c6:d0:00:18:3a:1e:a8:52:68:cc:e1:27:35:
ab:ca:34:e3:45:fc:58:aa:81:92:2e:49:dc:4e:0d:
b5:e3:0c:e4:6c:04:b4:ff:66:54:49:10:a3:0c:26:
fb:a0:55:3d:7c:26:04:e1:e6:1f:6a:3e:67:07:dd:
69:07:44:54:90:9f:88:c0:c5:bd:88:14:99:4d:ee:
64:68:d2:02:50:87:70:2e:5f:d1:05:7d:54:5d:21:
c0:32:fb:1f:0e:87:9a:e2:36:1c:f8:64:8a:41:1c:
ed:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D3:A5:C3:33:87:82:E1:29:7E:3E:2D:27:41:6D:D5:6E:19:A0:AE
X509v3 Authority Key Identifier:
keyid:EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:16:e5:f0:15:eb:69:64:3e:b3:c0:a8:bc:72:62:52:ba:56:
c3:54:7b:c7:85:9a:b1:8a:c6:ae:7c:6e:47:7e:32:f5:25:a9:
8c:c7:18:46:cf:20:77:1b:b5:a8:00:bc:9d:7b:b8:e0:07:66:
3b:78:5f:6c:6a:7a:8b:81:7a:7c:7e:b2:7b:98:17:a1:56:10:
c0:37:7b:08:74:b5:77:30:06:82:8a:fd:12:80:82:a0:b2:92:
ab:c3:6e:5d:44:d2:d9:67:8b:06:44:f2:cf:2d:1f:d4:5b:b0:
a1:fe:55:18:dd:a1:36:44:15:90:3a:e9:bd:a6:93:2e:7d:3d:
ca:db:13:4f:55:7a:c2:56:67:cc:0b:85:84:89:b9:bb:10:17:
56:8e:6f:a7:ac:6e:35:f9:c2:ba:7a:45:85:fe:0c:58:78:22:
8b:41:64:de:b1:64:46:be:94:0b:56:3b:7b:9f:1c:cd:22:82:
1c:0e:fd:62:30:e5:65:f7:33:f6:6b:47:4a:52:7c:da:13:5b:
85:40:5c:ad:f1:63:49:12:6e:9c:9f:36:01:4f:00:a4:d2:a0:
a7:ad:10:b3:b1:cc:03:27:39:47:9c:c9:52:76:63:18:2d:ba:
40:be:48:4e:99:f1:f8:b7:16:80:c9:40:52:e7:24:ae:ad:bc:
54:98:a3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:13 2026 by rpki-client