
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/7lOyfPFdNQRZRzp5DbXbdv60CkM.mft
File: 7lOyfPFdNQRZRzp5DbXbdv60CkM.mft (raw, json)
Hash identifier: OlW+MWwxtHTBC7WqD63YgHIZzU19ZfLu2zNu/x15iVg=
Subject key identifier: A2:36:C3:6A:95:15:28:5D:3B:D6:A1:4C:71:11:54:D4:F0:08:23:57
Authority key identifier: EE:53:B2:7C:F1:5D:35:04:59:47:3A:79:0D:B5:DB:76:FE:B4:0A:43
Certificate issuer: /CN=ee53b27cf15d350459473a790db5db76feb40a43
Certificate serial: 019D3865FEC2E1CD5167DA1610D1BCF16B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7lOyfPFdNQRZRzp5DbXbdv60CkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/7lOyfPFdNQRZRzp5DbXbdv60CkM.mft
Manifest number: 9C
Signing time: Sun 29 Mar 2026 07:01:41 +0000
Manifest this update: Sun 29 Mar 2026 07:01:41 +0000
Manifest next update: Mon 30 Mar 2026 07:01:41 +0000
Files and hashes: 1: 7lOyfPFdNQRZRzp5DbXbdv60CkM.crl (hash: HKjoBrGnCpFxg2i53mUquTJpKX9jKhrU6n8XP2o8OXg=)
2: L9Frwtp3y9J9orpf147yoe-Tyr0.roa (hash: POgvv3guoi89kV3dVMswqbK01pH72kXEXSFin0qGmsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/7lOyfPFdNQRZRzp5DbXbdv60CkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/7lOyfPFdNQRZRzp5DbXbdv60CkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7lOyfPFdNQRZRzp5DbXbdv60CkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:fe:c2:e1:cd:51:67:da:16:10:d1:bc:f1:6b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee53b27cf15d350459473a790db5db76feb40a43
Validity
Not Before: Mar 29 07:01:41 2026 GMT
Not After : Mar 30 07:01:41 2026 GMT
Subject: CN=a236c36a9515285d3bd6a14c711154d4f0082357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:0d:40:2e:03:04:21:c2:9c:64:9a:02:86:
65:20:d8:32:35:8d:42:b9:3b:0a:b0:15:5c:bc:b5:
e1:08:5e:bd:0f:64:2a:08:a7:95:bc:a3:71:10:1c:
81:e4:7f:95:5e:c5:ba:c5:63:4c:f5:f8:70:bb:f7:
55:3a:06:da:a7:fc:ca:5d:17:91:ca:b5:90:c5:5e:
c2:ee:24:f2:5d:88:dc:31:7f:80:79:b7:a7:c1:5d:
a2:f8:78:a9:32:02:0a:5e:7b:bc:d1:bc:0d:e9:fd:
10:23:02:41:00:0a:4e:56:ce:02:37:d2:61:23:b0:
4b:ba:fb:91:97:30:ec:c2:cc:4b:69:17:96:9d:8e:
ba:c5:94:4b:79:9c:b0:bf:d7:0d:2c:14:83:5d:5c:
a3:2b:a0:b9:d7:1e:5d:99:e6:06:fd:d5:e8:76:9b:
6d:3b:38:fb:19:a7:45:e2:49:ab:fe:fc:00:7d:51:
ee:14:03:9b:59:9c:6e:be:ab:ee:ad:46:33:1e:73:
d4:47:6b:76:3d:83:33:d4:51:93:35:97:3c:41:1b:
7f:64:34:c8:9c:e0:fb:88:33:0c:52:69:5b:dc:68:
9f:b8:3e:b3:03:8b:f8:46:d6:4f:51:17:bc:d5:3d:
e8:c7:01:92:47:62:6b:b0:7c:5e:bc:1d:a1:29:74:
be:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:36:C3:6A:95:15:28:5D:3B:D6:A1:4C:71:11:54:D4:F0:08:23:57
X509v3 Authority Key Identifier:
keyid:EE:53:B2:7C:F1:5D:35:04:59:47:3A:79:0D:B5:DB:76:FE:B4:0A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7lOyfPFdNQRZRzp5DbXbdv60CkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/7lOyfPFdNQRZRzp5DbXbdv60CkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/7lOyfPFdNQRZRzp5DbXbdv60CkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ba:fc:ca:03:99:29:83:c7:91:7a:ef:36:75:d3:e9:f8:80:
04:a5:e7:06:bd:e7:f5:16:fe:f0:72:fb:51:f3:38:9c:f9:c1:
0f:21:96:a9:80:cc:92:6a:32:f8:83:a6:2c:7e:c0:91:8b:bb:
40:33:b0:13:27:b8:f2:cf:22:0c:97:f6:d5:9d:d5:41:2a:51:
dd:76:f1:62:79:16:cf:b3:56:9c:d0:16:cd:bf:45:6e:05:80:
8d:be:cc:d3:04:8e:31:00:07:c5:ef:48:02:08:17:72:c0:11:
1b:f0:c7:04:2c:81:f7:d8:b2:4f:ce:d0:ca:e0:64:39:9e:18:
73:ad:90:5c:44:08:0d:79:3e:f3:a5:d8:5e:df:79:4a:2b:49:
93:bb:70:68:26:13:85:c9:1e:3c:a9:e2:d8:63:0a:c3:15:c0:
d0:d4:ff:b3:b6:e1:24:99:52:22:eb:34:c8:b4:07:9d:6e:06:
9c:43:44:55:24:b4:73:0f:e6:28:20:01:16:7f:a4:20:53:f9:
90:79:ae:4e:79:19:fa:ca:31:be:39:aa:5b:7d:81:19:9c:1f:
2b:8b:89:a0:4a:0b:26:ad:d9:dd:ab:6d:ca:f7:8e:06:63:fb:
d2:5d:00:09:f6:b0:55:fc:e8:9b:46:87:17:1f:a3:df:56:80:
1e:dd:a0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:13 2026 by rpki-client