Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft
File: e7gN7MxW6zZrNswpZMgZuxtymts.mft (raw, json)
Hash identifier: Vi+TSnxgs6iPkCnsmFBRb4LAy8lkPh4+UDrIjxb4sWM=
Subject key identifier: 82:B4:27:12:4D:41:F4:2A:31:45:06:FD:E2:41:CC:87:F1:2A:4A:9C
Authority key identifier: 7B:B8:0D:EC:CC:56:EB:36:6B:36:CC:29:64:C8:19:BB:1B:72:9A:DB
Certificate issuer: /CN=7bb80deccc56eb366b36cc2964c819bb1b729adb
Certificate serial: 019D3865EB7E656F799585CF7A0EC5238BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e7gN7MxW6zZrNswpZMgZuxtymts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft
Manifest number: 0CF6
Signing time: Sun 29 Mar 2026 07:01:36 +0000
Manifest this update: Sun 29 Mar 2026 07:01:36 +0000
Manifest next update: Mon 30 Mar 2026 07:01:36 +0000
Files and hashes: 1: e7gN7MxW6zZrNswpZMgZuxtymts.crl (hash: RLCfBo1d6Bb8K8FgZ3wmbnIeZ9aIg7szvPE6JIU6qww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft
rsync://rpki.ripe.net/repository/DEFAULT/e7gN7MxW6zZrNswpZMgZuxtymts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:eb:7e:65:6f:79:95:85:cf:7a:0e:c5:23:8b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bb80deccc56eb366b36cc2964c819bb1b729adb
Validity
Not Before: Mar 29 07:01:36 2026 GMT
Not After : Mar 30 07:01:36 2026 GMT
Subject: CN=82b427124d41f42a314506fde241cc87f12a4a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8c:1d:d9:f4:20:0b:47:25:0d:b7:62:c7:15:
05:d8:7d:be:dc:04:38:1d:60:bd:04:62:d7:59:1a:
aa:a1:71:aa:30:b5:0f:7e:bc:15:d0:fb:55:9b:b7:
43:33:1c:0a:03:f8:8d:78:c4:4c:08:cc:12:35:02:
db:c1:65:35:27:3a:2c:9a:4e:ee:f7:e3:38:86:f9:
f8:7c:9c:19:18:96:29:98:87:28:4b:1d:e0:1c:6e:
c3:68:f6:d5:a8:32:d2:1a:7e:3d:8f:8a:12:db:f4:
65:f4:03:6a:0b:0e:90:ef:3b:50:bd:1e:26:ff:c8:
b6:44:dc:73:fe:97:3c:c4:c0:69:74:f2:32:53:42:
72:73:e5:8f:a4:9b:2c:ea:d7:0c:e2:b5:f3:2c:be:
51:82:fa:bc:d9:46:f9:81:ef:53:8a:0e:55:76:54:
51:01:bc:fc:32:d9:c0:e4:2f:df:b7:cb:8d:b9:c5:
e6:8b:f9:28:84:e3:a2:06:ce:c5:c5:11:83:2f:3b:
e9:53:09:c4:66:90:50:d9:49:90:03:4a:b3:8d:c5:
de:2c:0b:2f:4a:09:95:35:7b:b6:f4:64:89:3b:81:
57:c7:88:5e:10:c9:eb:d6:a0:6c:84:20:e8:9a:7e:
44:09:d9:e5:2c:35:88:90:6b:ee:06:da:5e:31:cc:
10:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B4:27:12:4D:41:F4:2A:31:45:06:FD:E2:41:CC:87:F1:2A:4A:9C
X509v3 Authority Key Identifier:
keyid:7B:B8:0D:EC:CC:56:EB:36:6B:36:CC:29:64:C8:19:BB:1B:72:9A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7gN7MxW6zZrNswpZMgZuxtymts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9c:fb:a8:75:3f:ec:e3:fd:ee:84:8d:7b:4e:8f:f6:72:e8:
41:96:71:bf:b7:d9:50:6c:d3:10:61:b2:0b:f6:be:97:09:0d:
d4:e8:4e:1b:0c:79:ae:21:b3:2d:74:71:36:f3:ec:1f:d3:6e:
7a:a2:57:f5:ba:77:5b:61:b3:6c:f3:c6:78:b9:55:37:8e:b3:
cd:d7:0a:ab:31:46:7e:35:f8:28:30:69:51:0a:33:2d:af:44:
6d:c1:d8:7a:2d:c7:d5:07:10:a1:61:70:9b:b5:24:61:44:6f:
b4:50:28:fc:f8:36:e3:36:6f:c1:18:a0:a7:49:55:c0:b9:66:
7b:81:22:97:4f:90:3e:7f:43:dd:41:e5:b1:46:b5:a0:5c:9f:
97:37:37:f9:5e:0f:3d:7b:9b:bd:47:24:4e:63:7d:dd:88:a4:
b5:c9:8b:d2:2c:cd:e0:c4:c5:b9:84:9b:1d:ff:13:92:fc:e8:
ec:3d:7e:64:49:ad:5c:47:53:3d:a2:56:ae:ba:27:63:1b:d9:
60:37:87:4d:15:26:20:87:f3:fa:67:5e:2a:04:59:76:af:06:
44:7c:3d:22:ce:5c:cc:13:b3:e0:ee:1e:67:b3:da:e1:2a:69:
82:52:bf:e2:6f:8a:ec:0f:38:e2:d7:46:bf:49:ce:59:57:e5:
0c:9d:0c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:22 2026 by rpki-client