
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/fcaa05-ecf6-4de2-80d7-76a69f529569/1/7o0oOpWoOJP6adsiOkatoLXS-YE.mft
File: 7o0oOpWoOJP6adsiOkatoLXS-YE.mft (raw, json)
Hash identifier: ojr+uO2j+SfMtFZBfdOD2YeHLYPfV+wzLXgGS5SUnqo=
Subject key identifier: D7:E5:56:79:35:E8:79:CE:91:04:42:C8:2F:EA:52:70:C6:67:B2:55
Authority key identifier: EE:8D:28:3A:95:A8:38:93:FA:69:DB:22:3A:46:AD:A0:B5:D2:F9:81
Certificate issuer: /CN=ee8d283a95a83893fa69db223a46ada0b5d2f981
Certificate serial: 019F8F10887C673DF31D22EC3F19CAF36D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7o0oOpWoOJP6adsiOkatoLXS-YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/fcaa05-ecf6-4de2-80d7-76a69f529569/1/7o0oOpWoOJP6adsiOkatoLXS-YE.mft
Manifest number: 98
Signing time: Thu 23 Jul 2026 13:00:53 +0000
Manifest this update: Thu 23 Jul 2026 13:00:53 +0000
Manifest next update: Fri 24 Jul 2026 13:00:53 +0000
Files and hashes: 1: 7o0oOpWoOJP6adsiOkatoLXS-YE.crl (hash: rXCwQKxrcB1btCYq5YtKVSVJvNrdEVjQJTxf0ju54d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/fcaa05-ecf6-4de2-80d7-76a69f529569/1/7o0oOpWoOJP6adsiOkatoLXS-YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/fcaa05-ecf6-4de2-80d7-76a69f529569/1/7o0oOpWoOJP6adsiOkatoLXS-YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7o0oOpWoOJP6adsiOkatoLXS-YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:88:7c:67:3d:f3:1d:22:ec:3f:19:ca:f3:6d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8d283a95a83893fa69db223a46ada0b5d2f981
Validity
Not Before: Jul 23 13:00:53 2026 GMT
Not After : Jul 24 13:00:53 2026 GMT
Subject: CN=d7e5567935e879ce910442c82fea5270c667b255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:df:e8:8b:a5:fa:69:5b:19:ba:33:f7:ee:14:
2c:fe:74:24:cd:1d:54:18:d5:df:9b:73:13:5a:49:
f2:f8:39:2e:db:20:60:76:46:8a:0d:01:16:70:8e:
27:f9:49:3e:7f:a2:c0:a4:e1:47:2e:b1:39:60:00:
48:26:25:7a:b1:dd:d1:af:e7:fb:98:dd:ab:df:ff:
ad:29:84:db:fe:da:2e:b6:63:f0:76:20:f4:30:62:
7c:f9:b1:d4:e7:a3:39:f9:8f:0c:c0:e2:5e:d4:9d:
8b:b5:ec:be:bb:6a:1a:9f:22:f3:95:ee:56:2e:d7:
9d:8a:05:f0:ae:cb:d1:f1:9e:2d:90:05:d5:0f:4f:
50:10:44:1e:d3:cd:d8:53:cf:04:91:64:d4:95:d3:
7d:a1:6b:3e:ec:70:82:45:34:20:2b:5f:1c:cd:d3:
96:cc:87:7d:9c:8d:f5:48:37:4f:27:ef:36:b8:6c:
6e:c5:02:93:2c:3b:1e:ec:0b:bd:d6:13:95:a6:3e:
9d:dd:e1:27:36:73:f8:99:ad:13:f5:8e:48:27:a2:
1a:6a:d7:c1:67:61:7f:75:7f:73:65:15:1c:8d:d0:
91:31:5d:45:de:1c:72:46:94:d2:f8:68:7d:52:cc:
8c:fd:58:b2:26:02:48:48:0a:18:82:5d:45:03:38:
b0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E5:56:79:35:E8:79:CE:91:04:42:C8:2F:EA:52:70:C6:67:B2:55
X509v3 Authority Key Identifier:
keyid:EE:8D:28:3A:95:A8:38:93:FA:69:DB:22:3A:46:AD:A0:B5:D2:F9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7o0oOpWoOJP6adsiOkatoLXS-YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/fcaa05-ecf6-4de2-80d7-76a69f529569/1/7o0oOpWoOJP6adsiOkatoLXS-YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/fcaa05-ecf6-4de2-80d7-76a69f529569/1/7o0oOpWoOJP6adsiOkatoLXS-YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0e:06:80:ed:10:a1:48:ae:e1:1e:56:01:88:08:06:f7:88:
48:5a:3b:75:f1:a2:1c:fc:10:82:45:59:8c:56:0a:dd:47:21:
d3:21:31:7c:d3:0c:4c:03:44:39:85:de:34:9d:ab:06:dc:6e:
b3:b7:59:37:31:ac:a9:70:b3:70:53:ec:87:e5:3e:27:3f:c5:
45:53:46:2f:10:b7:81:14:4c:41:28:dc:07:f0:c0:d6:f7:f4:
af:09:79:19:cf:02:6f:01:07:a4:81:e3:12:2b:79:b3:d6:c6:
8c:dc:20:0b:76:a5:16:0f:2e:c3:c0:18:02:ec:6e:27:8b:2b:
ce:c3:b4:01:a4:de:39:5e:47:21:47:8c:2e:b2:15:c5:d3:3b:
ed:27:ed:76:39:54:ea:2f:5a:35:aa:6d:01:52:d3:a7:1a:0e:
85:af:1f:bd:86:33:da:f3:c0:3e:a6:45:e0:81:e6:2e:4d:73:
e8:2f:c4:f3:67:17:f4:77:e6:7e:b9:e4:18:30:68:e4:a5:79:
44:26:31:f6:a5:9c:a8:94:3e:fe:8f:4d:c5:1e:fc:21:26:82:
1b:a8:ed:b0:39:dd:2b:69:b2:12:30:f8:dd:8e:d4:05:57:62:
07:2f:80:ba:09:04:d1:53:18:71:55:c9:00:a7:8f:83:1d:20:
9c:68:e0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:47 2026 by rpki-client