Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
File: 7oAELqPLNIc97Q6wZJWU4v8jkIE.mft (raw, json)
Hash identifier: b7oh6NozaFBlmvSMr672eGJPDExOqV1sDhv+U+U5Odk=
Subject key identifier: 39:53:04:C1:55:FD:A9:5E:7A:91:A3:A2:7B:C0:9D:4C:CD:85:80:2A
Authority key identifier: EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
Certificate issuer: /CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Certificate serial: 019D3866567651361ECC1394D9E7FCE0F398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
Manifest number: 0C9B
Signing time: Sun 29 Mar 2026 07:02:04 +0000
Manifest this update: Sun 29 Mar 2026 07:02:04 +0000
Manifest next update: Mon 30 Mar 2026 07:02:04 +0000
Files and hashes: 1: 7oAELqPLNIc97Q6wZJWU4v8jkIE.crl (hash: brsxdKKVZGGt0NhJDv8A1l/hWN3cwrTBDQreDszBVmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:56:76:51:36:1e:cc:13:94:d9:e7:fc:e0:f3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Validity
Not Before: Mar 29 07:02:04 2026 GMT
Not After : Mar 30 07:02:04 2026 GMT
Subject: CN=395304c155fda95e7a91a3a27bc09d4ccd85802a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:43:42:3a:b0:5a:03:3b:3a:8c:e7:92:98:1d:
35:e6:ce:62:6f:42:f6:6c:8b:9e:cf:16:80:f2:20:
53:fa:0e:80:62:85:16:88:e1:bd:06:0d:64:b3:86:
75:ed:b5:c5:32:95:9c:1b:77:a9:2f:49:09:d7:49:
ff:63:25:af:12:22:00:d0:53:64:ff:2f:06:98:ce:
26:d7:ba:45:b5:8b:a5:c7:26:73:a5:12:cb:24:ee:
f8:ff:24:c7:d8:78:a3:3c:49:c9:8b:b1:14:22:ba:
1a:0d:4a:f8:d1:6d:c4:0e:d5:bc:f2:83:ee:4d:a7:
8c:e6:35:e5:85:9f:b2:b8:fe:98:6d:df:9e:e9:00:
a1:20:ae:01:ae:b4:64:bf:64:18:12:ff:20:f0:40:
30:3c:9b:85:6f:7a:43:68:33:1c:0e:9c:6e:9e:90:
55:22:fc:fa:21:cd:e8:ab:41:64:08:f7:c8:f1:7c:
0e:a8:c4:4c:bc:27:52:02:14:c4:b8:9e:eb:94:af:
5c:58:e7:9c:a1:9d:81:5c:f3:86:b3:e5:cb:9c:25:
04:5e:3d:dc:26:3d:7f:bf:12:a6:b9:a7:0a:cb:1a:
74:05:0c:fc:49:e0:84:89:40:c8:e4:12:a7:05:4a:
bc:5d:d1:fc:76:6c:ac:46:8f:a3:69:94:ce:eb:68:
98:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:53:04:C1:55:FD:A9:5E:7A:91:A3:A2:7B:C0:9D:4C:CD:85:80:2A
X509v3 Authority Key Identifier:
keyid:EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:f2:4f:76:cc:e5:84:e1:7b:ca:89:70:1a:14:30:ad:74:27:
3e:51:d8:23:9c:c9:3d:c1:5c:61:4c:e5:99:48:04:04:9e:de:
b5:ba:91:0d:9f:d0:c7:52:a3:a1:63:0e:fa:83:2f:cc:6f:25:
fd:9f:c2:7f:e7:74:c3:c3:76:76:cb:e0:af:54:87:c1:6f:74:
03:c0:e6:c1:55:c9:42:d7:3c:70:ab:05:cf:a9:2c:75:f6:9b:
f8:ad:f0:71:02:7f:f8:1a:90:50:d8:e2:47:0e:41:e5:9c:93:
89:8e:a8:96:e7:35:c1:76:fa:0c:da:50:64:30:8d:06:21:5f:
06:d3:c5:7b:dc:f0:b1:b1:ae:c7:91:c0:e4:77:7a:7a:3b:02:
61:20:67:fc:4c:b2:bc:60:f4:20:4b:d0:74:37:a4:31:53:5d:
2a:cb:a7:44:53:f8:16:82:d2:f7:16:5e:d7:2e:a7:e3:7c:e1:
cc:ac:aa:15:41:45:06:2d:14:bf:92:f9:6a:3c:ee:65:d5:af:
df:c5:e5:c1:f6:e0:dd:c8:b2:e2:43:0c:49:3f:08:0a:5d:5f:
d8:32:81:26:fd:99:d6:0c:c1:12:05:ec:23:17:3c:26:54:a9:
04:3f:5a:0a:2d:dc:33:47:18:a6:08:c2:b3:6a:56:e4:6f:14:
81:28:40:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZlZ2UTYezBOU2ef84POYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlODAwNDJlYTNjYjM0ODczZGVkMGViMDY0OTU5NGUyZmYy
MzkwODEwHhcNMjYwMzI5MDcwMjA0WhcNMjYwMzMwMDcwMjA0WjAzMTEwLwYDVQQD
EygzOTUzMDRjMTU1ZmRhOTVlN2E5MWEzYTI3YmMwOWQ0Y2NkODU4MDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0NCOrBaAzs6jOeSmB015s5ib0L2
bIuezxaA8iBT+g6AYoUWiOG9Bg1ks4Z17bXFMpWcG3epL0kJ10n/YyWvEiIA0FNk
/y8GmM4m17pFtYulxyZzpRLLJO74/yTH2HijPEnJi7EUIroaDUr40W3EDtW88oPu
TaeM5jXlhZ+yuP6Ybd+e6QChIK4BrrRkv2QYEv8g8EAwPJuFb3pDaDMcDpxunpBV
Ivz6Ic3oq0FkCPfI8XwOqMRMvCdSAhTEuJ7rlK9cWOecoZ2BXPOGs+XLnCUEXj3c
Jj1/vxKmuacKyxp0BQz8SeCEiUDI5BKnBUq8XdH8dmysRo+jaZTO62iYGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlTBMFV/aleepGjonvAnUzNhYAqMB8GA1UdIwQY
MBaAFO6ABC6jyzSHPe0OsGSVlOL/I5CBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9mNWUyYTctNWRiYi00YjM2LTk2MTQt
ZDUxNjE3ZTAyOTgzLzEvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9mNWUyYTctNWRiYi00YjM2LTk2MTQtZDUxNjE3ZTAyOTgz
LzEvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvPJPdszl
hOF7yolwGhQwrXQnPlHYI5zJPcFcYUzlmUgEBJ7etbqRDZ/Qx1KjoWMO+oMvzG8l
/Z/Cf+d0w8N2dsvgr1SHwW90A8DmwVXJQtc8cKsFz6ksdfab+K3wcQJ/+BqQUNji
Rw5B5ZyTiY6oluc1wXb6DNpQZDCNBiFfBtPFe9zwsbGux5HA5Hd6ejsCYSBn/Eyy
vGD0IEvQdDekMVNdKsunRFP4FoLS9xZe1y6n43zhzKyqFUFFBi0Uv5L5ajzuZdWv
38Xlwfbg3ciy4kMMST8ICl1f2DKBJv2Z1gzBEgXsIxc8JlSpBD9aCi3cM0cYpgjC
s2pW5G8UgShADA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:15 2026 by rpki-client