
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
File: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft (raw, json)
Hash identifier: 0CUcI2gEwscnYpqqOO4FjE8nE19Rfde7BKdurdQ5Psc=
Subject key identifier: F4:B8:B4:34:4C:D5:B7:58:92:CF:F7:E0:3A:BC:52:DA:8A:7F:10:FC
Authority key identifier: EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
Certificate issuer: /CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Certificate serial: 01A001DD846A8521A02F40744D8BBF1E362D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
Manifest number: 10E0
Signing time: Fri 14 Aug 2026 20:01:29 +0000
Manifest this update: Fri 14 Aug 2026 20:01:29 +0000
Manifest next update: Sat 15 Aug 2026 20:01:29 +0000
Files and hashes: 1: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl (hash: PuQP+6nEDGNQruT/NoyzCK2UQbHlu5pCUBp5XRzTgww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:84:6a:85:21:a0:2f:40:74:4d:8b:bf:1e:36:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Validity
Not Before: Aug 14 20:01:29 2026 GMT
Not After : Aug 15 20:01:29 2026 GMT
Subject: CN=f4b8b4344cd5b75892cff7e03abc52da8a7f10fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:c0:2b:8d:7d:1d:7b:71:a3:61:6d:ee:85:
5a:c9:b2:10:a3:d4:47:79:f9:13:23:e1:7a:01:f0:
1f:37:cc:2c:67:57:08:62:f8:f4:95:7d:30:72:84:
bd:1e:a8:be:85:f8:52:31:a6:4f:ba:ba:de:4b:91:
24:78:5d:e6:e0:97:d1:d9:49:a8:e1:9e:17:36:03:
62:43:a6:a1:b8:a8:03:ff:3f:14:38:b3:54:7f:61:
2d:61:80:7e:20:c4:00:93:d9:4f:ec:54:a6:0f:bd:
ae:7b:5b:58:e9:3e:0e:be:c4:03:90:14:7a:d9:fc:
9b:bc:91:31:e5:57:a3:b6:e4:a4:62:51:b7:f7:74:
17:bc:b1:f4:f1:2e:83:7f:28:78:5a:d5:4b:37:e4:
61:9b:da:a1:ca:bd:53:b9:e3:95:ec:7b:3e:43:e2:
e4:77:4d:05:46:00:f9:84:b1:a8:cb:fd:1a:76:d7:
73:dc:0c:0b:e8:62:5f:b4:5c:a8:fd:03:77:2f:e5:
41:e5:f9:00:c0:67:b6:f3:2a:84:7c:4f:80:f2:fe:
7a:67:c9:5c:b0:7d:9e:0e:0d:4c:ce:78:d1:c4:be:
b5:d0:ad:7d:b1:29:70:e5:83:b8:ea:06:37:52:3a:
a3:24:70:39:d5:27:5b:e9:a3:2b:25:52:e8:3e:c0:
d8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B8:B4:34:4C:D5:B7:58:92:CF:F7:E0:3A:BC:52:DA:8A:7F:10:FC
X509v3 Authority Key Identifier:
keyid:EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:cb:fc:71:0e:6c:df:29:3f:21:57:c2:15:7d:2d:d0:47:80:
95:fe:e6:5b:9f:ec:6b:37:2b:2a:23:f8:10:14:fa:2f:78:14:
30:25:34:01:03:b6:65:e3:d3:6a:95:9a:97:3f:b1:52:ad:e7:
35:9b:b1:2d:2e:69:59:58:26:14:5c:2e:0b:f4:54:f5:81:1a:
5e:b9:1c:e1:fb:69:d3:13:ef:6c:50:89:fb:38:36:b0:54:3b:
3a:db:45:d6:29:f6:d0:bc:7d:71:d6:df:12:88:66:ff:09:0c:
ec:6a:f0:1d:f7:bb:82:b3:bf:a1:88:95:43:c6:1e:66:0a:eb:
33:fd:42:9f:5f:80:f3:54:eb:16:09:1d:70:a8:18:02:cb:55:
8c:41:a9:05:52:b9:bf:e8:54:dc:a1:b8:4b:61:ac:53:85:15:
25:e3:a5:dc:26:4d:df:e7:90:7e:6e:32:68:12:74:c8:49:ae:
dd:be:2b:74:bf:c6:a2:fb:a3:a9:e9:6b:d0:83:c2:a1:4b:c4:
9d:c5:23:3c:77:2f:78:18:fd:b8:74:19:55:82:b0:60:f5:8f:
20:a2:bc:aa:b0:c7:be:4d:df:a1:91:f6:50:bf:34:e2:aa:a2:
dd:d0:86:29:a1:b2:a7:00:69:6a:ea:4d:b9:9b:09:a4:ce:b0:
5f:38:e8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:14 2026 by rpki-client