Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
File: 7kDaG04w_7sypOSkt61zHAMeRCk.mft (raw, json)
Hash identifier: QhffKes72t5qPrksADuTPs6ieDbcYVgOqC698VzJ7dc=
Subject key identifier: 3E:F7:7D:F7:A9:97:16:86:F0:4B:2A:F2:0B:B1:FC:83:52:09:DC:9F
Authority key identifier: EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
Certificate issuer: /CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Certificate serial: 019D37F6F7661ADCC83C4A544C0C83F7FFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
Manifest number: 0722
Signing time: Sun 29 Mar 2026 05:00:25 +0000
Manifest this update: Sun 29 Mar 2026 05:00:25 +0000
Manifest next update: Mon 30 Mar 2026 05:00:25 +0000
Files and hashes: 1: 7kDaG04w_7sypOSkt61zHAMeRCk.crl (hash: wml+ebtmLPfaHD8T/PCSDlNiH0ThbWwT3wP3M7mleEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f7:66:1a:dc:c8:3c:4a:54:4c:0c:83:f7:ff:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Validity
Not Before: Mar 29 05:00:25 2026 GMT
Not After : Mar 30 05:00:25 2026 GMT
Subject: CN=3ef77df7a9971686f04b2af20bb1fc835209dc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9c:b2:f9:a0:41:bf:02:d6:f9:43:47:24:a7:
de:03:9b:f4:6a:92:d5:79:f5:74:c5:c5:c6:44:ab:
98:71:51:23:ad:51:c1:8a:01:33:8b:63:bd:ba:fe:
5e:9f:69:60:f3:81:81:42:c4:f4:2a:ba:26:62:50:
2f:93:29:ff:c5:c4:f8:f1:15:cb:1b:2c:69:0e:b0:
ec:af:ee:0b:70:cb:72:b4:52:db:28:07:ed:73:49:
e0:cc:dc:75:88:1b:48:29:f6:d9:4d:8e:5c:2d:fc:
0b:40:f2:ee:b8:99:39:13:d0:24:e5:43:cc:82:db:
6a:2a:dd:71:16:15:78:0e:15:dc:d8:5e:43:a7:04:
79:4c:e4:54:90:71:3c:a4:8f:48:fe:04:f9:f2:41:
f3:d2:43:00:74:1d:99:aa:db:e2:a7:d7:a6:7b:7c:
30:45:37:3e:af:c2:74:94:d1:87:87:56:5d:c9:17:
e7:29:27:a9:50:4e:d1:aa:1e:b7:07:f1:ce:11:6a:
d7:94:32:f7:ce:a4:e2:c2:f5:16:73:c4:e5:7a:4d:
88:ea:ec:35:8d:30:dd:bf:ca:0b:0a:e8:07:88:b9:
20:40:76:0d:ec:dd:17:17:dc:a2:0e:d5:a3:ff:ae:
91:40:77:46:43:17:0e:1f:06:c6:47:90:bc:ba:0e:
ec:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F7:7D:F7:A9:97:16:86:F0:4B:2A:F2:0B:B1:FC:83:52:09:DC:9F
X509v3 Authority Key Identifier:
keyid:EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:83:6e:55:5d:82:1a:eb:79:cc:03:b4:83:73:93:f0:0c:4b:
0c:ba:07:a4:88:ea:a7:f0:85:69:ad:df:45:56:df:23:48:89:
16:74:19:e8:ee:08:67:ee:c3:1a:9c:dd:2e:7a:a2:c6:99:97:
3d:ba:0c:ce:11:81:de:85:3d:82:87:b0:33:2d:a9:a6:92:9b:
9e:73:54:a5:ec:9b:4d:c4:9e:e6:e1:16:9f:15:f4:64:95:46:
7d:46:c7:45:1c:95:1f:03:cb:69:28:f6:e7:00:5d:78:9e:65:
bd:07:fb:6b:29:ae:10:d7:9f:ae:4e:b0:45:27:af:29:70:ab:
9a:9a:40:dc:87:5d:81:b9:53:0e:9c:e1:d8:b4:ce:ac:86:11:
b6:28:a5:8a:3c:1d:7c:cb:99:80:09:f9:41:42:c9:64:19:b7:
0e:93:f0:c9:9d:0f:bc:f4:48:0c:51:81:e4:b8:31:72:a6:5f:
2d:8d:5b:28:8f:15:92:f1:b4:df:f2:3b:cb:7c:e3:d7:27:d7:
b5:40:c5:60:2c:92:35:ab:f4:42:43:f8:1e:a1:fa:87:14:4c:
3c:16:7f:ee:42:21:a0:bf:fc:04:a6:06:82:c5:d3:73:29:44:
03:39:de:2a:6d:a4:e1:f5:d0:00:ca:85:e0:f8:dc:80:18:e9:
9f:00:fa:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:43 2026 by rpki-client