Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
File: 7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft (raw, json)
Hash identifier: Fte+VrO/zK/pexwC4rpPemeZ9Ke5re4gp4HJLfzLofk=
Subject key identifier: E6:DF:9D:2B:B6:33:94:3A:0C:34:02:67:84:8C:A5:C7:F3:3A:96:46
Authority key identifier: EE:68:B6:64:CC:D5:0C:A7:67:D4:6F:FB:34:F5:3A:06:D1:20:B5:23
Certificate issuer: /CN=ee68b664ccd50ca767d46ffb34f53a06d120b523
Certificate serial: 019D3B2F3F244D42ABC2BA90049E9F2CCAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
Manifest number: 0CB7
Signing time: Sun 29 Mar 2026 20:00:45 +0000
Manifest this update: Sun 29 Mar 2026 20:00:45 +0000
Manifest next update: Mon 30 Mar 2026 20:00:45 +0000
Files and hashes: 1: 7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl (hash: mTm/5z/ePizwtLhFKLwODhYf6fCpsAREc+WYfzJJShs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3b:2f:3f:24:4d:42:ab:c2:ba:90:04:9e:9f:2c:ca:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee68b664ccd50ca767d46ffb34f53a06d120b523
Validity
Not Before: Mar 29 20:00:45 2026 GMT
Not After : Mar 30 20:00:45 2026 GMT
Subject: CN=e6df9d2bb633943a0c340267848ca5c7f33a9646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:3b:9d:81:47:8a:40:84:51:8e:bb:3f:01:
c7:be:e8:da:ca:23:4a:8d:68:d1:5c:0c:cf:23:31:
69:ff:18:1d:4b:a0:eb:b9:0d:21:f6:c8:e4:a4:38:
6e:be:24:5d:83:10:8d:38:c2:dc:18:b7:bd:b8:9b:
82:d8:73:e9:b8:82:74:79:04:2b:c0:f8:f0:73:dc:
0a:83:6f:73:65:33:a9:84:d0:fd:bb:b8:4c:98:ae:
8c:4a:91:6e:72:94:b0:ff:fb:f9:db:bf:aa:12:80:
21:87:1e:61:05:52:69:96:f7:29:88:7e:24:3a:04:
5b:d9:10:7e:d2:9e:f4:df:47:e0:55:f4:07:bd:6b:
26:1b:38:d1:7d:d5:2e:d1:2f:f1:32:99:4c:b0:89:
b4:73:cb:7f:ba:b0:76:21:80:3a:87:32:87:23:d3:
05:1b:95:c2:c6:20:fd:6d:14:60:91:ff:2b:d7:48:
b6:3f:74:24:df:e3:bb:f2:2c:c2:73:44:68:90:04:
f6:b1:6a:b4:d8:06:2e:0b:b2:70:a2:14:e4:03:21:
3f:64:aa:75:e6:6d:ac:a3:74:35:f8:d3:44:b5:c4:
12:62:63:09:cf:6b:1a:4c:1a:78:0d:fa:fa:de:5d:
4e:c3:d4:42:06:14:25:60:e5:0c:34:8c:bd:bf:70:
35:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DF:9D:2B:B6:33:94:3A:0C:34:02:67:84:8C:A5:C7:F3:3A:96:46
X509v3 Authority Key Identifier:
keyid:EE:68:B6:64:CC:D5:0C:A7:67:D4:6F:FB:34:F5:3A:06:D1:20:B5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:aa:c4:6d:a5:44:34:a3:d8:bf:39:2a:1b:03:44:5f:2d:c9:
7a:95:67:0e:aa:66:aa:37:c5:c3:d2:79:c0:d6:22:3a:f8:f5:
a6:ec:bd:42:d1:1b:19:04:81:71:34:02:ce:db:39:0f:c4:61:
4f:a5:cd:c6:fa:fa:4a:9b:1c:e8:90:13:f3:cc:d2:45:b9:fb:
c0:6a:9a:e1:53:c1:14:49:b7:89:96:be:7b:87:8d:44:a6:bd:
db:1c:2f:b6:77:8c:66:2f:ba:46:78:62:52:17:b1:d1:54:a4:
3e:bc:eb:63:2e:c7:18:98:96:13:39:e8:29:d7:db:13:6f:8e:
f4:22:da:36:84:d8:dc:c6:08:f5:49:c1:39:15:5a:e4:ee:c4:
7c:88:04:0a:02:25:99:80:06:01:ec:1a:5d:1a:09:ee:47:27:
24:ae:86:1f:5e:ac:de:5e:af:b1:dc:85:f4:4f:b8:76:aa:7b:
89:9d:f7:fc:ae:68:7e:47:78:ca:06:28:98:d4:0a:72:74:65:
63:c4:d0:3f:1f:53:a4:16:50:d6:ab:eb:0a:7f:c1:8f:dd:e9:
94:6e:6a:ed:9d:bc:7f:50:37:8a:8e:da:26:4c:0a:56:4f:20:
e8:3d:8d:5e:d6:fe:48:80:6b:7e:99:04:67:b6:bd:e5:59:4a:
ab:56:62:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:31:58 2026 by rpki-client