Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
File: 7dnow7XdvumM1_7qDf-MdiW4Wp0.mft (raw, json)
Hash identifier: Ce1Lo08GWwg9zi+Bm9hYpyv7ENDDkdlXek2x31x/H98=
Subject key identifier: 99:32:A7:70:A5:07:AE:AD:1F:C4:DC:91:A1:1D:81:47:3F:B4:78:4E
Authority key identifier: ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D
Certificate issuer: /CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
Certificate serial: 019D25F1710FB3670ADBC66DD8AC023E74C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
Manifest number: 0DF5
Signing time: Wed 25 Mar 2026 17:01:13 +0000
Manifest this update: Wed 25 Mar 2026 17:01:13 +0000
Manifest next update: Thu 26 Mar 2026 17:01:13 +0000
Files and hashes: 1: 7dnow7XdvumM1_7qDf-MdiW4Wp0.crl (hash: W52paYukT1IzBXh4lQ/xN28UF0xPNZysps03cVODQXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:71:0f:b3:67:0a:db:c6:6d:d8:ac:02:3e:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
Validity
Not Before: Mar 25 17:01:13 2026 GMT
Not After : Mar 26 17:01:13 2026 GMT
Subject: CN=9932a770a507aead1fc4dc91a11d81473fb4784e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3d:82:10:42:0e:2a:e5:b4:9c:32:90:d2:d2:
cc:d1:1a:c9:fa:70:d2:c0:4a:b0:05:c0:7e:d1:fd:
77:7d:b9:82:0a:a0:f7:3f:0a:9b:3a:d9:32:cc:5d:
3e:bf:e8:26:54:0f:ba:d7:db:49:38:79:de:f7:33:
1d:4a:a3:9c:59:32:c8:d0:9a:77:fd:1b:94:01:86:
b5:2c:95:85:8d:85:59:a9:3c:d9:de:2c:0a:64:5c:
09:0e:ee:03:6e:15:2b:91:f8:14:e5:88:ad:e2:3e:
f7:70:ef:1a:da:91:c3:49:44:95:76:7e:f5:71:b1:
5a:a6:7c:a4:c5:44:25:80:2e:e3:e5:e4:77:25:ee:
24:f3:c9:a5:00:6e:07:df:e9:fe:68:46:ca:ae:7c:
24:8e:85:64:6f:79:d0:34:3b:fa:ba:11:11:84:d1:
8c:e6:77:5c:b5:18:b7:24:22:ba:84:a7:6b:37:74:
c2:45:6d:c9:b8:a3:d1:38:83:37:d3:7e:78:e4:bb:
66:8d:46:62:38:ee:14:ff:24:2f:ee:7a:dc:94:2c:
49:a6:aa:24:ff:b2:fa:38:40:c6:bd:2c:a3:dc:f0:
34:ad:29:ea:6d:03:84:fd:2e:cb:4a:6d:0f:f6:31:
c0:50:27:10:ac:30:21:d6:e4:87:85:dd:eb:b2:67:
8a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:32:A7:70:A5:07:AE:AD:1F:C4:DC:91:A1:1D:81:47:3F:B4:78:4E
X509v3 Authority Key Identifier:
keyid:ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e3:07:92:d3:b8:09:60:85:5e:f0:99:b6:9a:08:80:6b:24:
98:7c:b6:35:b8:b7:7c:2e:3e:66:5b:16:4b:0b:4b:7e:5d:3d:
c2:c0:92:fb:25:c3:c0:a9:0c:08:7a:25:60:69:29:f8:a8:14:
78:78:26:da:71:08:2a:c3:ef:19:e7:30:fd:a9:6b:e5:b3:e9:
5b:c3:c1:84:57:78:90:32:b8:80:6a:86:fc:cc:00:59:dd:81:
75:f5:9b:7a:5e:b1:d5:ea:c3:ca:8b:69:90:1c:ca:68:86:e1:
d5:a7:39:0a:8f:d6:a1:b0:dd:08:27:19:cf:b5:4d:96:96:d1:
f6:d5:e3:4c:a4:1f:e5:af:50:23:a1:cb:d7:36:1c:4b:26:3a:
7b:15:df:e2:97:00:e5:b6:fa:ef:26:3f:82:62:f3:88:d1:c2:
4f:57:89:96:2d:13:34:27:d2:c9:f0:c4:b1:d9:0d:45:c5:49:
78:ca:5a:36:a3:61:20:5e:17:de:20:50:9f:b0:ba:4e:2d:7f:
93:6e:c1:cc:0b:c6:8b:42:a9:6a:17:9a:d7:53:7b:a9:34:43:
69:23:39:89:1a:14:b2:c6:8e:02:5f:76:7c:36:5a:02:ce:44:
d9:53:ec:2f:02:d4:16:6b:a5:9a:4d:64:d8:58:b2:8a:26:ec:
7b:71:bb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:01:48 2026 by rpki-client