Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
File: 7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft (raw, json)
Hash identifier: Q5AGyv4poUMh75rbawbgfJ81PsabiOwzY7b3VTSyJ6Q=
Subject key identifier: 24:DF:3E:31:4E:B5:6A:61:82:AD:30:02:B3:34:6A:B1:E2:D3:D4:04
Authority key identifier: ED:A8:52:91:60:58:53:81:F0:78:01:65:6F:FC:4C:55:12:98:44:9F
Certificate issuer: /CN=eda8529160585381f07801656ffc4c551298449f
Certificate serial: 019D27048A41C65D779A29A4C866B69C387A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ahSkWBYU4HweAFlb_xMVRKYRJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
Manifest number: 020C
Signing time: Wed 25 Mar 2026 22:01:42 +0000
Manifest this update: Wed 25 Mar 2026 22:01:42 +0000
Manifest next update: Thu 26 Mar 2026 22:01:42 +0000
Files and hashes: 1: 7ahSkWBYU4HweAFlb_xMVRKYRJ8.crl (hash: Z+oe/V8h59QReEPeOUvKwPKxd9VEPn+HaIFBOjMBEbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ahSkWBYU4HweAFlb_xMVRKYRJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:8a:41:c6:5d:77:9a:29:a4:c8:66:b6:9c:38:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eda8529160585381f07801656ffc4c551298449f
Validity
Not Before: Mar 25 22:01:42 2026 GMT
Not After : Mar 26 22:01:42 2026 GMT
Subject: CN=24df3e314eb56a6182ad3002b3346ab1e2d3d404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:12:18:2d:7d:ce:cd:fe:c4:bf:7c:3a:02:
27:62:56:e4:0e:98:8f:f6:94:70:7d:f7:19:3d:55:
af:7c:52:20:72:19:4f:81:f8:07:ef:7c:78:5e:2f:
18:ec:cd:50:10:d6:aa:a7:06:f0:12:7d:fd:86:ca:
9a:ce:c0:2f:2f:6f:98:2d:0f:cb:ad:e9:38:c4:1e:
0c:f5:17:cb:7a:24:d3:9f:9a:36:12:75:ac:89:35:
fe:fa:6f:c5:f2:53:78:a9:0b:0c:9e:a8:6c:e2:f1:
17:7b:d6:dd:16:59:72:03:92:9d:d3:ec:99:2a:7c:
c3:e3:6f:91:9b:ef:d4:29:2f:6a:71:2f:38:c5:e0:
36:d8:92:62:9a:a7:29:a6:b9:23:f7:5f:e1:00:ca:
4a:bd:45:bd:0a:ef:c8:e9:94:e4:f9:25:9a:4e:70:
3a:cc:bc:47:d8:35:9b:d3:dd:2e:f5:26:ea:46:d6:
dc:bc:cb:a1:ab:95:c3:2f:79:e7:ca:15:e7:f4:62:
f3:3d:5f:44:d7:15:db:17:56:2e:0d:71:cd:a9:9e:
dc:7c:38:ce:f2:80:3c:77:e2:40:8c:cf:38:8d:63:
f5:49:11:37:6e:18:90:9b:67:37:df:ea:a8:4f:ae:
f4:61:16:39:51:6e:4e:25:a7:24:fe:77:26:d4:56:
cb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DF:3E:31:4E:B5:6A:61:82:AD:30:02:B3:34:6A:B1:E2:D3:D4:04
X509v3 Authority Key Identifier:
keyid:ED:A8:52:91:60:58:53:81:F0:78:01:65:6F:FC:4C:55:12:98:44:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ahSkWBYU4HweAFlb_xMVRKYRJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a5:f2:d4:ef:86:ce:98:05:8a:57:fa:e3:21:cf:10:95:42:
d1:cb:f7:ff:fc:32:7b:42:bb:7a:00:e6:c8:01:43:0e:98:9d:
16:94:c8:32:b1:8a:14:c4:65:ea:69:4a:c9:8c:a8:3a:02:16:
20:af:21:2e:79:35:a3:cd:45:7e:6c:d5:b2:79:05:0e:b6:c9:
bc:5b:db:07:fb:ff:be:a6:81:8a:f4:27:24:52:f3:04:a7:6f:
63:9d:92:90:69:4d:bb:34:07:a2:ab:25:a9:66:e1:28:3f:c3:
61:ba:a6:1a:06:82:17:05:47:ab:d3:01:d4:43:e8:4d:b2:0e:
9a:01:33:3a:60:0a:80:56:c6:8f:9b:f7:a0:8e:f3:ac:cb:5f:
c1:8d:ce:f1:f8:a1:76:c2:33:76:35:4a:f8:49:f0:bb:bd:47:
9e:f2:16:e2:45:f2:73:2a:6c:d2:ed:2c:d1:4c:b3:1d:0c:a1:
e6:ed:68:58:a4:54:59:7f:19:ca:1a:21:16:47:b7:00:ee:fb:
9d:f1:72:f8:ea:6c:ed:e4:a0:da:37:6e:5e:81:fd:25:40:9b:
ca:c6:79:91:79:38:c9:53:39:e4:11:44:85:9f:3b:20:c8:24:
bc:14:8b:de:a0:a5:56:32:f9:6c:c0:34:bd:df:53:e7:03:38:
22:e1:e4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:06 2026 by rpki-client