Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
File: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft (raw, json)
Hash identifier: VBQdEalb4GsrWHtNxqcjoUzQrOhCm3fvrYWlcqQVWYw=
Subject key identifier: 3F:F2:20:C4:0B:C2:78:C9:91:0D:70:B5:29:F0:78:5B:D4:7F:34:7F
Authority key identifier: EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
Certificate issuer: /CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Certificate serial: 019D37C01C2FA8F4C4566BDD0F5E04D23B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
Manifest number: 15EE
Signing time: Sun 29 Mar 2026 04:00:30 +0000
Manifest this update: Sun 29 Mar 2026 04:00:30 +0000
Manifest next update: Mon 30 Mar 2026 04:00:30 +0000
Files and hashes: 1: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl (hash: GXt8CcPQW0m+iZ9Vk754nSYPodUcIys3I69EEgmFBuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:1c:2f:a8:f4:c4:56:6b:dd:0f:5e:04:d2:3b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Validity
Not Before: Mar 29 04:00:30 2026 GMT
Not After : Mar 30 04:00:30 2026 GMT
Subject: CN=3ff220c40bc278c9910d70b529f0785bd47f347f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:42:22:a8:0a:95:44:c4:0a:55:f5:b1:70:d3:
a2:01:2d:b8:6e:64:f5:c1:0e:4d:a0:f9:6b:33:a6:
e6:99:ba:66:1d:99:64:81:98:1d:10:2e:6c:52:94:
be:6b:10:94:86:16:b9:50:06:e7:f2:4b:7e:4a:d9:
79:6e:6f:9a:5b:a9:25:3a:fa:95:18:6e:3f:e4:76:
f5:5f:ff:10:72:c4:41:29:fd:50:28:5c:b6:5f:06:
62:9d:1e:93:ac:8b:68:a8:f5:50:13:a0:60:07:66:
3d:1d:0d:7f:ad:87:5b:21:f2:11:0b:40:94:de:ea:
42:37:9a:14:11:9f:43:0d:c8:a7:c8:59:78:7a:de:
e5:3a:0b:b6:66:c8:7a:64:c7:3c:79:bb:34:5c:f1:
2d:fb:c8:81:d8:e8:bb:3e:d6:e0:55:ee:fe:93:23:
9c:f6:2e:bf:e7:3e:c4:60:94:a5:e0:03:b8:cb:2f:
ba:db:9f:e2:5c:78:f8:15:9b:29:ee:3e:49:59:06:
8e:f6:b5:3b:2b:7f:58:d9:8a:f0:6f:2f:97:99:63:
d3:df:ca:d0:3b:3b:4a:be:b6:7c:98:e0:6f:a5:47:
5c:3d:fa:1a:fe:61:4a:99:57:ff:15:47:3d:24:99:
45:31:57:62:4f:69:bb:53:8a:5a:12:69:e5:0e:4a:
c4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F2:20:C4:0B:C2:78:C9:91:0D:70:B5:29:F0:78:5B:D4:7F:34:7F
X509v3 Authority Key Identifier:
keyid:EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:73:c7:38:ca:31:90:f4:eb:df:f4:cc:25:dc:19:ce:2c:12:
0c:f5:df:66:d0:e8:80:2b:a3:5d:bc:22:81:f8:cb:e2:b8:30:
57:fc:16:32:3a:ca:cc:f2:90:43:ff:d6:b4:e1:2e:39:29:f5:
fa:5d:3f:3e:19:37:ea:58:19:44:a5:14:27:af:5e:d1:37:3f:
a2:d9:9f:4b:a2:c9:19:3c:b1:0c:89:84:cb:66:8c:8e:86:a6:
9c:01:a7:52:eb:6a:99:32:d2:3c:ab:e8:aa:d6:b8:7d:a0:0c:
4a:05:2a:51:d1:1f:9d:fb:fe:0d:0a:82:64:c3:85:d8:8d:ed:
62:90:e0:b6:b5:e8:08:e1:59:a9:c7:54:cc:7b:9f:c3:7f:be:
a3:27:d9:10:7e:69:7f:8f:08:66:95:15:57:7d:8b:77:d4:52:
eb:ee:9e:a9:10:30:19:de:b6:ce:40:12:f5:8c:e2:08:69:af:
c5:f4:23:5e:7a:dc:87:01:a3:6c:93:ca:5a:96:74:3d:f2:f4:
f0:af:03:25:8f:a2:27:e3:a7:4b:d9:3f:79:cd:f5:ae:24:c7:
8c:ea:4b:a5:ea:68:86:2d:92:33:71:2e:1b:28:de:ac:1b:d9:
1d:7e:3f:dd:c7:79:8f:9d:d9:3a:0c:91:d8:b8:6a:0f:10:8b:
04:86:a9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:28 2026 by rpki-client