Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
File: 7LLMRABmS6sLCRvDmYwN4f73FZs.mft (raw, json)
Hash identifier: TJHwCaw8pMVEG6GqR1N0UbIwek1NbfSQ9ttoF06eLoA=
Subject key identifier: F3:6A:8F:2A:8B:B4:CA:69:6C:A2:22:AC:F0:20:99:B7:9E:BB:7A:04
Authority key identifier: EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
Certificate issuer: /CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Certificate serial: 019F90FEBCC8A5055C74C40311DC51D45C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
Manifest number: 138E
Signing time: Thu 23 Jul 2026 22:00:41 +0000
Manifest this update: Thu 23 Jul 2026 22:00:41 +0000
Manifest next update: Fri 24 Jul 2026 22:00:41 +0000
Files and hashes: 1: 7LLMRABmS6sLCRvDmYwN4f73FZs.crl (hash: JWvxzQmrzAwT/5acnsmOnEimJKW8urLzc4SVNjcJjK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:bc:c8:a5:05:5c:74:c4:03:11:dc:51:d4:5c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Validity
Not Before: Jul 23 22:00:41 2026 GMT
Not After : Jul 24 22:00:41 2026 GMT
Subject: CN=f36a8f2a8bb4ca696ca222acf02099b79ebb7a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8a:50:33:ac:52:33:57:cf:f6:d0:27:cc:a4:
5c:d7:37:6a:78:e7:4c:57:46:26:06:c5:f2:5c:eb:
c1:5d:45:a8:ef:76:f4:4a:11:a2:14:19:5f:6d:67:
80:b3:48:e2:71:c6:0e:d7:2e:ad:0b:04:b7:68:ff:
92:35:0d:4e:ff:98:04:9a:8f:0b:98:99:ec:b3:b9:
89:6a:e2:8d:a6:4e:2b:a0:54:94:85:77:01:97:54:
db:ad:60:cd:5d:5c:aa:5c:04:e4:bb:ae:de:a8:0c:
b8:06:72:b1:d9:c7:65:28:93:58:4b:85:9f:58:4c:
06:ef:6f:1a:c7:8e:53:67:78:f2:ae:e6:b6:7a:97:
8f:72:ce:11:be:78:c8:1b:60:7d:90:11:b8:60:79:
63:e5:97:2e:91:67:30:3c:24:6d:b7:e2:94:03:e0:
cc:a6:d3:0b:1f:29:f0:41:0e:80:96:16:18:64:33:
51:1b:ea:29:c0:d9:4e:2c:fd:92:63:11:24:d8:b1:
a5:fc:12:af:4b:09:d0:e4:29:51:95:2e:4b:52:ef:
ce:7d:0e:ec:e5:dd:12:94:4a:19:27:c5:2f:34:97:
3c:e8:70:77:8a:c9:f0:be:64:30:f7:58:83:28:b9:
72:78:e7:8e:9d:0c:98:2d:fc:27:6a:45:a8:08:74:
9a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6A:8F:2A:8B:B4:CA:69:6C:A2:22:AC:F0:20:99:B7:9E:BB:7A:04
X509v3 Authority Key Identifier:
keyid:EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:fb:84:7a:3c:23:56:d2:c7:f5:a9:27:e0:eb:79:88:ee:38:
90:bc:24:5f:5c:db:c1:bf:66:df:1d:b4:51:9e:64:87:ad:ff:
1e:3f:4b:db:97:7b:46:ec:10:1c:44:3c:23:46:89:e8:fd:3e:
3b:c2:c8:7d:19:d5:c8:c3:3d:a4:c5:14:61:74:a0:ee:9d:fe:
b5:cc:09:e6:f2:5f:56:57:81:b6:8a:9b:da:dd:96:ef:18:28:
04:3d:f4:72:72:dc:b4:2e:99:82:fb:13:26:56:70:88:a0:9e:
b9:42:42:79:d4:1d:7f:fd:6d:3b:90:c4:db:79:f9:09:1b:4c:
a6:cf:4f:70:b9:8c:a6:3e:90:a4:df:a5:ed:e2:f5:cf:ed:4c:
e9:1c:fe:17:bb:4d:d8:cc:29:86:cf:a7:89:88:05:6e:b7:33:
c7:61:9e:6a:67:f8:02:80:7f:a2:78:03:48:f1:f1:c2:34:a4:
8c:40:39:d4:ad:49:b5:51:34:bc:2d:ac:bf:cf:b7:bf:07:73:
d9:a7:b3:4c:69:3d:63:39:60:0e:5d:e2:58:36:35:a3:cc:32:
41:e9:e1:df:cf:8e:be:09:ff:89:f6:e3:79:25:27:5c:33:a1:
9f:95:97:69:2b:ce:7f:74:f0:8f:bb:19:9f:0c:e0:63:9e:99:
e1:75:c9:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/rzIpQVcdMQDEdxR1FxHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYjJjYzQ0MDA2NjRiYWIwYjA5MWJjMzk5OGMwZGUxZmVm
NzE1OWIwHhcNMjYwNzIzMjIwMDQxWhcNMjYwNzI0MjIwMDQxWjAzMTEwLwYDVQQD
EyhmMzZhOGYyYThiYjRjYTY5NmNhMjIyYWNmMDIwOTliNzllYmI3YTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIpQM6xSM1fP9tAnzKRc1zdqeOdM
V0YmBsXyXOvBXUWo73b0ShGiFBlfbWeAs0jiccYO1y6tCwS3aP+SNQ1O/5gEmo8L
mJnss7mJauKNpk4roFSUhXcBl1TbrWDNXVyqXATku67eqAy4BnKx2cdlKJNYS4Wf
WEwG728ax45TZ3jyrua2epePcs4RvnjIG2B9kBG4YHlj5ZcukWcwPCRtt+KUA+DM
ptMLHynwQQ6AlhYYZDNRG+opwNlOLP2SYxEk2LGl/BKvSwnQ5ClRlS5LUu/OfQ7s
5d0SlEoZJ8UvNJc86HB3isnwvmQw91iDKLlyeOeOnQyYLfwnakWoCHSaLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNqjyqLtMppbKIirPAgmbeeu3oEMB8GA1UdIwQY
MBaAFOyyzEQAZkurCwkbw5mMDeH+9xWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0xMTVJBQm1TNnNMQ1J2RG1Zd040ZjczRlpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jY2MzODUtMjBlMS00YzY4LTliYTEt
ODk4NDZkZGQ5NDFjLzEvN0xMTVJBQm1TNnNMQ1J2RG1Zd040ZjczRlpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jY2MzODUtMjBlMS00YzY4LTliYTEtODk4NDZkZGQ5NDFj
LzEvN0xMTVJBQm1TNnNMQ1J2RG1Zd040ZjczRlpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbPuEejwj
VtLH9akn4Ot5iO44kLwkX1zbwb9m3x20UZ5kh63/Hj9L25d7RuwQHEQ8I0aJ6P0+
O8LIfRnVyMM9pMUUYXSg7p3+tcwJ5vJfVleBtoqb2t2W7xgoBD30cnLctC6ZgvsT
JlZwiKCeuUJCedQdf/1tO5DE23n5CRtMps9PcLmMpj6QpN+l7eL1z+1M6Rz+F7tN
2Mwphs+niYgFbrczx2Geamf4AoB/ongDSPHxwjSkjEA51K1JtVE0vC2sv8+3vwdz
2aezTGk9YzlgDl3iWDY1o8wyQenh38+Ovgn/ifbjeSUnXDOhn5WXaSvOf3Twj7sZ
nwzgY56Z4XXJkw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:21 2026 by rpki-client