Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
File: 7oAELqPLNIc97Q6wZJWU4v8jkIE.mft (raw, json)
Hash identifier: wOAPlVff6tQvj3VLyaa+q8/4nKIpYvGmlU8CGM8hxOA=
Subject key identifier: CA:4E:22:67:5F:97:DE:DE:5B:1B:64:C0:22:19:4E:80:AD:D9:F7:EB
Authority key identifier: EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
Certificate issuer: /CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Certificate serial: 019E2F9774AED4437C532C42BC67872B593F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
Manifest number: 0D1B
Signing time: Sat 16 May 2026 07:01:55 +0000
Manifest this update: Sat 16 May 2026 07:01:55 +0000
Manifest next update: Sun 17 May 2026 07:01:55 +0000
Files and hashes: 1: 7oAELqPLNIc97Q6wZJWU4v8jkIE.crl (hash: eHwJlnhcuDmhtSxueMOW+SAlvNlhHrOG7Lq4uWFzUQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:74:ae:d4:43:7c:53:2c:42:bc:67:87:2b:59:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Validity
Not Before: May 16 07:01:55 2026 GMT
Not After : May 17 07:01:55 2026 GMT
Subject: CN=ca4e22675f97dede5b1b64c022194e80add9f7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:80:c5:ef:77:23:b3:07:e9:1e:e2:78:43:
ca:d3:93:72:ec:fc:4a:7f:fc:a2:2c:d0:ca:5b:cf:
1d:a4:e1:1c:2e:29:38:48:32:f8:1a:aa:80:12:f1:
a8:12:6f:98:e3:80:1f:81:b7:67:b2:e8:49:c6:6e:
7b:d2:f7:39:63:82:d5:25:01:b2:ab:1c:d0:dc:22:
eb:ed:b7:28:ef:b2:35:90:2c:c1:7d:76:72:d4:f6:
54:eb:8c:52:b4:20:61:13:ee:8f:2d:7b:54:14:08:
be:4c:32:11:f6:46:cc:fd:ca:4e:50:11:e2:24:14:
17:a0:59:2b:22:db:64:6a:25:3d:1a:55:f3:6a:3e:
5b:f6:bc:6b:be:47:48:a2:da:3e:ef:8a:29:ee:d0:
6d:4e:d6:e4:9a:60:8f:cc:fa:3a:60:82:5e:ee:e9:
d1:15:1f:fc:b3:11:9f:f2:f7:1a:80:20:f9:d5:82:
cf:75:41:48:3a:01:1d:da:22:92:14:bc:64:b4:53:
1f:9b:76:5e:92:78:0d:67:fe:c6:f9:50:1e:ba:6a:
4e:cd:c4:db:6d:50:27:c2:22:74:8e:3c:c4:d3:f7:
02:c1:4e:34:cc:06:a2:4e:e9:46:25:7f:d9:7a:f9:
b3:d5:48:5d:7f:29:35:7f:be:ae:8f:d0:54:3d:43:
31:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4E:22:67:5F:97:DE:DE:5B:1B:64:C0:22:19:4E:80:AD:D9:F7:EB
X509v3 Authority Key Identifier:
keyid:EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:20:bb:08:e4:eb:f8:32:69:8c:31:5f:db:19:f0:11:8a:7e:
24:4f:74:ed:d8:fb:94:ba:d7:a1:be:2d:ea:c3:ad:14:34:b6:
81:f0:d3:72:a4:4c:d3:f6:90:bd:09:09:3e:74:a6:8c:01:1e:
6f:97:56:27:42:e3:0b:64:f8:5a:9a:e1:c1:e5:b1:07:84:26:
a6:19:ec:40:ef:80:b3:de:0b:37:23:c8:81:52:c7:2f:82:2b:
2d:f7:a9:56:89:9a:b0:12:a8:73:d3:06:bd:11:7b:b9:5a:a5:
1e:1a:2d:35:0f:17:e8:1a:4c:f3:c9:87:a6:fb:af:9d:ce:9f:
70:24:65:09:61:cb:34:85:22:38:86:85:f3:1b:ad:5f:1b:9f:
ec:47:84:11:20:a5:c2:08:64:b0:58:be:d9:1b:72:60:01:7b:
72:d6:ab:02:ee:40:5b:b3:5c:3b:72:eb:0f:a0:1f:28:6a:81:
81:b4:87:df:cc:df:76:aa:f0:82:f2:e9:5a:6f:e4:cd:e3:bc:
5c:67:23:30:6a:49:3a:f3:79:3d:02:55:00:fb:43:8b:a9:d3:
9b:8e:c0:67:82:c7:1c:73:c4:12:1b:42:e1:39:e1:8d:56:ee:
27:47:3e:b5:49:73:74:8f:ea:c6:05:68:17:c0:d9:03:1c:5b:
2a:d1:2c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:42 2026 by rpki-client