
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/fcaa05-ecf6-4de2-80d7-76a69f529569/1/7o0oOpWoOJP6adsiOkatoLXS-YE.mft
File: 7o0oOpWoOJP6adsiOkatoLXS-YE.mft (raw, json)
Hash identifier: 4ZYKvOLHKQ/WaRsOiWYT8G2qMScdhOOG04Sm92a0OoQ=
Subject key identifier: 08:0B:F7:BF:19:0A:A6:E7:F5:78:3C:6C:F0:99:BF:88:68:88:BA:39
Authority key identifier: EE:8D:28:3A:95:A8:38:93:FA:69:DB:22:3A:46:AD:A0:B5:D2:F9:81
Certificate issuer: /CN=ee8d283a95a83893fa69db223a46ada0b5d2f981
Certificate serial: 01A0DB3ADCB8F12044215BF6EA135B89DF27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7o0oOpWoOJP6adsiOkatoLXS-YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/fcaa05-ecf6-4de2-80d7-76a69f529569/1/7o0oOpWoOJP6adsiOkatoLXS-YE.mft
Manifest number: 0144
Signing time: Sat 26 Sep 2026 01:01:02 +0000
Manifest this update: Sat 26 Sep 2026 01:01:02 +0000
Manifest next update: Sun 27 Sep 2026 01:01:02 +0000
Files and hashes: 1: 7o0oOpWoOJP6adsiOkatoLXS-YE.crl (hash: 4pWj34rwc5/92KRw6FNxGKNd4zgjUWnD6o0Hh4P4vHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/fcaa05-ecf6-4de2-80d7-76a69f529569/1/7o0oOpWoOJP6adsiOkatoLXS-YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/fcaa05-ecf6-4de2-80d7-76a69f529569/1/7o0oOpWoOJP6adsiOkatoLXS-YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7o0oOpWoOJP6adsiOkatoLXS-YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3a:dc:b8:f1:20:44:21:5b:f6:ea:13:5b:89:df:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8d283a95a83893fa69db223a46ada0b5d2f981
Validity
Not Before: Sep 26 01:01:02 2026 GMT
Not After : Sep 27 01:01:02 2026 GMT
Subject: CN=080bf7bf190aa6e7f5783c6cf099bf886888ba39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e9:d5:a3:66:26:4a:3a:53:71:fb:cd:6e:55:
7c:81:90:b8:1b:bb:97:23:63:b9:39:32:1b:7f:18:
ee:79:d4:5e:bf:12:20:b4:31:5a:53:b2:39:c1:13:
56:4b:96:6a:9c:c4:7c:ff:c9:ad:5b:ea:ca:81:21:
76:70:04:d6:c3:ee:33:9e:fc:1b:d6:10:0b:50:0a:
11:bf:3d:df:92:c7:1d:5d:68:54:db:1f:f7:45:a9:
3a:95:1a:50:79:91:8b:da:24:c5:21:ad:9b:6f:ed:
c7:1b:e4:c6:3c:55:c0:bc:b5:ab:40:6a:67:6b:f1:
49:be:bb:9f:74:16:7d:44:9f:b1:d5:1b:89:e6:89:
d9:49:d0:99:ce:3f:72:9b:33:68:c3:b7:1c:2f:d5:
cd:4f:e0:6b:a3:fb:5e:47:66:05:f5:63:0c:c0:b9:
1a:f2:8c:6a:e2:43:ea:88:6c:42:f5:5e:ff:a5:61:
2e:09:dc:51:a8:6f:e0:9a:ec:4b:84:2a:1e:2b:79:
40:2b:aa:a4:31:c1:7e:cc:c3:43:9a:ad:74:0b:ef:
db:47:39:8d:2b:13:bd:15:b0:cf:0a:68:72:98:c0:
c0:69:3e:7b:7c:0b:01:56:5f:43:62:f9:75:77:35:
08:f5:c6:ad:b1:f7:c3:14:d9:3a:d7:34:8e:72:17:
4a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0B:F7:BF:19:0A:A6:E7:F5:78:3C:6C:F0:99:BF:88:68:88:BA:39
X509v3 Authority Key Identifier:
keyid:EE:8D:28:3A:95:A8:38:93:FA:69:DB:22:3A:46:AD:A0:B5:D2:F9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7o0oOpWoOJP6adsiOkatoLXS-YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/fcaa05-ecf6-4de2-80d7-76a69f529569/1/7o0oOpWoOJP6adsiOkatoLXS-YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/fcaa05-ecf6-4de2-80d7-76a69f529569/1/7o0oOpWoOJP6adsiOkatoLXS-YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:72:c4:53:1f:d9:76:00:53:d1:f9:3e:e6:f5:bd:79:07:aa:
ce:e3:89:ec:4b:c8:33:67:18:a6:20:4b:d9:f5:88:10:51:f3:
c0:52:48:4a:a0:cc:e3:3a:c8:59:95:ac:6a:98:a7:bc:72:d8:
64:69:f3:e9:1d:22:ea:66:c4:80:2c:df:85:5a:23:96:1a:e0:
dd:af:e6:12:48:6e:b8:d8:0c:75:f8:a2:54:8f:14:f3:4c:b8:
cc:5e:cb:a5:ee:51:53:80:6e:b1:34:4b:28:61:00:a6:fa:6e:
d8:80:ae:da:6d:1c:96:f2:4d:bc:d1:8c:46:8c:3c:ea:ae:d5:
00:01:49:4f:51:24:ef:80:0c:8d:eb:d5:0d:6b:13:77:94:43:
f1:36:ba:ca:c1:ed:3d:de:5b:30:10:1f:e9:8a:c1:fa:b3:df:
ea:2b:4d:7a:6c:30:28:c9:84:92:cf:0e:0e:8e:4a:8c:a4:0b:
53:bc:89:8c:e1:4a:a5:b2:02:a3:87:87:50:1f:b7:1c:e8:1e:
8d:19:d1:7c:ac:f6:1c:e5:9c:24:e2:19:64:ae:9c:68:0e:ae:
d8:e1:03:b1:8b:e1:9f:f5:5e:a2:6c:7c:02:52:9a:bd:2f:ff:
c3:70:59:e4:cf:05:16:dd:41:65:04:4f:1f:ea:4c:12:72:00:
4d:c8:ae:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:01:56 2026 by rpki-client