Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
File: 7kDaG04w_7sypOSkt61zHAMeRCk.mft (raw, json)
Hash identifier: JdqCx8tmq/mikOQZhHw2/kC79qRy4rB/WvdLtcHLpuI=
Subject key identifier: 95:87:3B:8C:30:7A:D0:BE:40:CA:0A:72:9C:48:6E:7F:6F:62:E6:1F
Authority key identifier: EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
Certificate issuer: /CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Certificate serial: 019F18D6E2751625840CDBB54A2880E50A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
Manifest number: 081B
Signing time: Tue 30 Jun 2026 14:02:43 +0000
Manifest this update: Tue 30 Jun 2026 14:02:43 +0000
Manifest next update: Wed 01 Jul 2026 14:02:43 +0000
Files and hashes: 1: 7kDaG04w_7sypOSkt61zHAMeRCk.crl (hash: CxR+8X/bAQbmIzppun0SbNlAZgBbGuL3nFgaVQ8akAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:e2:75:16:25:84:0c:db:b5:4a:28:80:e5:0a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Validity
Not Before: Jun 30 14:02:43 2026 GMT
Not After : Jul 1 14:02:43 2026 GMT
Subject: CN=95873b8c307ad0be40ca0a729c486e7f6f62e61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ee:ff:d3:62:91:d6:75:43:ba:dd:ad:f9:3d:
04:4a:c6:e2:79:08:a3:31:73:26:f9:5f:3f:08:f1:
45:cc:f1:74:14:21:0f:80:c5:d2:31:63:93:a5:dd:
d9:8f:02:13:c5:94:17:4b:53:97:bf:67:92:00:26:
7d:6b:f1:14:4f:75:1b:91:ec:da:a0:39:55:ce:31:
0b:9b:5a:a0:1a:ff:ea:f8:13:5c:7d:41:f4:03:f0:
62:7f:d3:c9:cd:86:c2:38:c2:f4:44:f7:f0:ed:97:
d0:f5:e8:ab:af:a6:6e:17:d1:e8:18:10:90:82:21:
fd:e0:23:a5:40:3a:63:c3:e4:ad:70:fe:f7:3c:84:
63:30:4e:a1:af:f8:fe:97:25:d3:e9:c4:64:97:df:
a5:74:a1:5d:ef:74:7f:11:1a:dc:9a:7e:db:d4:82:
7b:1c:19:10:e0:8e:07:38:66:12:43:58:4f:15:79:
7d:c9:49:24:1f:aa:2c:0f:a8:20:0e:25:6d:44:9f:
7c:f9:67:16:9d:a1:ed:3d:d6:9d:a3:6d:14:f5:6e:
63:31:dc:8e:c3:7f:4f:f2:28:b3:14:16:0a:de:82:
57:cf:4b:81:30:0c:66:07:f9:4e:cf:69:01:3a:fb:
a5:76:e7:c8:a9:8b:28:ed:59:e5:d6:58:30:23:2e:
56:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:87:3B:8C:30:7A:D0:BE:40:CA:0A:72:9C:48:6E:7F:6F:62:E6:1F
X509v3 Authority Key Identifier:
keyid:EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1d:b4:de:56:fe:73:30:40:e0:80:91:0f:ef:99:49:71:c9:
0a:a8:45:20:ad:2b:a0:f9:d6:65:3e:41:1f:85:01:7e:0b:97:
e7:1b:ee:59:e1:cc:00:70:c7:b7:24:83:37:f2:59:16:64:4e:
9b:ee:03:9b:58:65:60:bd:c8:fe:ba:b2:62:19:8c:4a:24:74:
f5:05:a7:d8:aa:8c:d1:cc:c8:24:a4:91:77:c9:0a:e8:21:47:
b0:d9:c1:43:b4:96:b6:80:ed:42:22:a2:27:60:60:f3:e2:5c:
8f:e6:da:e7:89:e3:6b:12:4b:fe:08:83:62:08:ce:e0:0f:cb:
0d:49:46:58:fb:c1:d5:d0:5c:02:ef:d3:64:6e:d1:58:1c:55:
2e:97:fd:de:c5:95:1f:d0:c5:da:f8:f6:d6:ec:fc:7f:62:9f:
61:9f:68:b3:c1:47:9a:90:bd:ba:6c:e3:f6:f4:4d:1f:29:8d:
f9:9b:3b:9c:0e:97:28:10:52:f9:22:db:70:77:3b:e1:c3:3e:
87:a4:5f:4a:57:31:f3:a0:bc:dd:ca:0d:a0:54:82:49:2e:09:
e3:98:92:3d:f5:49:e7:27:4d:41:2c:8a:2d:0c:41:7b:3e:41:
38:91:66:80:c5:37:9c:4a:6c:7a:f3:34:b9:2c:bf:9c:e1:63:
96:09:e6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:13 2026 by rpki-client