Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
File: 7crL2itLMjHQi1HxbxsqfAgjetE.mft (raw, json)
Hash identifier: TkxkJCnwpEXUXxXMBUJeSdsUyepe7e4n9tjixV7Q/tk=
Subject key identifier: 1B:44:E6:6B:FA:AF:07:76:45:84:6C:B1:E7:A0:7F:8A:A6:D9:B0:FE
Authority key identifier: ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1
Certificate issuer: /CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
Certificate serial: 019D38D31451151283EFC6F197F0FDCFE453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
Manifest number: 04FB
Signing time: Sun 29 Mar 2026 09:00:50 +0000
Manifest this update: Sun 29 Mar 2026 09:00:50 +0000
Manifest next update: Mon 30 Mar 2026 09:00:50 +0000
Files and hashes: 1: 7crL2itLMjHQi1HxbxsqfAgjetE.crl (hash: vnot/bdvHAxdq6I5M2R72m4Jb5rqBNT0UY7BA1eKbrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:14:51:15:12:83:ef:c6:f1:97:f0:fd:cf:e4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
Validity
Not Before: Mar 29 09:00:50 2026 GMT
Not After : Mar 30 09:00:50 2026 GMT
Subject: CN=1b44e66bfaaf077645846cb1e7a07f8aa6d9b0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:61:6b:f7:fb:49:f7:5c:27:fa:11:75:34:
9a:4f:d3:46:e2:d5:5d:b6:a8:b8:84:a2:c9:fb:fb:
c7:b0:6d:58:16:79:db:90:bb:87:7e:f9:70:34:4c:
a6:79:90:43:60:41:b6:ad:67:78:5f:a1:e5:fc:1e:
9d:b8:72:13:e5:1b:ed:58:0b:6b:0e:f7:3b:43:ae:
24:f7:3e:27:24:41:47:89:65:ea:67:b1:ab:31:c3:
4a:37:92:49:5d:b7:dd:e3:89:07:23:93:a4:b5:66:
a2:ac:b2:59:d0:f6:b2:0d:24:86:ba:43:e6:be:0e:
6d:5b:69:84:d3:92:60:f9:e0:57:01:9d:d7:6c:7a:
4a:c0:70:7c:8b:2d:1a:63:47:35:4d:28:88:6c:7d:
08:08:db:82:ad:fb:1c:3e:d1:ae:a6:8f:b4:ec:73:
45:c4:35:fe:8c:d6:84:42:0e:c3:8c:5c:1a:de:0e:
94:54:e2:ce:13:87:cd:ad:5d:c0:fb:8d:ee:b3:bc:
e8:41:55:0e:0f:40:e8:ad:23:87:11:ca:a0:2b:22:
7d:84:15:2b:01:0e:08:f8:92:c5:90:73:a1:9b:60:
32:b3:d5:ac:f7:1b:69:fb:de:2d:2d:58:bc:b5:9f:
c0:51:05:5a:3b:6c:7b:17:c4:9f:ca:d5:31:81:0e:
29:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:44:E6:6B:FA:AF:07:76:45:84:6C:B1:E7:A0:7F:8A:A6:D9:B0:FE
X509v3 Authority Key Identifier:
keyid:ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a5:80:73:15:9c:f9:5f:b6:49:da:a3:72:22:8f:2f:ab:e1:
57:12:77:f6:78:98:54:4b:ec:da:df:86:46:6d:a8:fc:9e:3e:
4f:d1:5f:aa:46:df:b5:bd:2b:22:06:e8:3f:fb:8d:68:4f:c3:
b3:37:bb:2c:12:26:4b:de:18:11:94:92:87:e6:18:5a:44:67:
01:13:9f:0e:17:b9:1d:60:cb:e7:87:5d:25:bc:00:1e:0c:e3:
26:17:82:d7:fb:8b:e1:b1:6a:0a:5d:71:9c:d2:45:38:12:74:
5d:5b:05:21:35:60:6c:e0:c0:23:57:68:85:b3:5c:b8:27:1c:
89:8a:56:19:c7:bf:5a:38:b6:2f:c4:f1:57:af:71:c1:e6:a4:
3f:82:61:43:b1:ed:c8:fb:98:a8:e7:b9:fa:be:9c:5b:ab:5e:
a6:69:61:cd:bb:da:53:56:20:f8:e5:fd:38:7b:0c:5a:9c:aa:
f1:79:69:76:81:3d:f0:86:9e:a4:f3:3a:b2:77:53:67:f6:55:
10:f8:6f:18:1a:a3:05:2c:12:47:7b:30:9f:9b:11:3f:b9:15:
6e:c3:95:af:47:f8:20:9e:1d:e5:f8:f8:6e:12:78:23:66:dd:
fc:de:c4:7b:60:0c:be:63:7c:c8:ab:ba:a9:2c:9c:61:d3:cc:
91:4f:0b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:28 2026 by rpki-client