Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
File: 7lsNNqN0qzXENu4Awuyu-7KjVEg.mft (raw, json)
Hash identifier: EQ+uANjgPSgGN5RQU1O342TW5x+PPNNGt3V2e3Y+ZVA=
Subject key identifier: A0:09:6A:17:2C:85:16:38:7F:DB:87:13:1F:4F:48:E4:40:85:68:65
Authority key identifier: EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48
Certificate issuer: /CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
Certificate serial: 019D37C0D69952E6B517478029CEE6AE3B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
Manifest number: 02AD
Signing time: Sun 29 Mar 2026 04:01:17 +0000
Manifest this update: Sun 29 Mar 2026 04:01:17 +0000
Manifest next update: Mon 30 Mar 2026 04:01:17 +0000
Files and hashes: 1: 7lsNNqN0qzXENu4Awuyu-7KjVEg.crl (hash: jxuNytPpzkoBAg5mU49fXEg37FLF89gf/TyTnB2OMHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:d6:99:52:e6:b5:17:47:80:29:ce:e6:ae:3b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
Validity
Not Before: Mar 29 04:01:17 2026 GMT
Not After : Mar 30 04:01:17 2026 GMT
Subject: CN=a0096a172c8516387fdb87131f4f48e440856865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:24:05:0a:70:1d:84:fa:46:a3:0c:6d:a2:b7:
a2:50:59:50:56:b6:a3:0c:02:ba:5f:4e:fa:80:79:
8e:96:af:66:4d:70:ff:ba:87:c7:a9:1e:c2:9d:f0:
ab:6d:8c:55:55:a3:f4:14:3c:40:09:09:b0:ff:7e:
73:c3:7a:3f:60:3e:39:d1:e9:c8:9a:e5:26:be:3d:
9b:b2:46:34:10:fd:f1:00:d8:52:05:4b:b3:4c:37:
da:79:60:6c:cb:9b:19:ff:a1:85:95:96:5b:6a:1f:
f3:f0:e6:9c:31:dc:d2:d1:ce:89:55:41:96:b4:34:
70:14:bc:9d:02:59:54:96:6f:4f:0d:8d:e6:5c:45:
f3:a0:7e:94:be:77:02:8c:f5:68:5b:a1:26:ef:ad:
b4:49:f3:04:fa:d2:6d:b9:57:7d:33:03:50:3e:ba:
80:cb:fa:c9:0e:4d:fb:99:57:2b:41:46:03:e2:38:
70:8f:24:42:2c:cd:40:c1:30:94:9b:27:49:8f:c6:
a6:0d:4c:2e:4f:d6:02:8f:2b:8d:60:a7:e2:0e:01:
f8:bf:df:79:ca:bc:78:ef:c5:7a:60:ab:d3:df:fc:
9f:9d:13:fa:0a:4b:56:98:52:96:3b:a4:3d:ee:fd:
1d:3c:a6:53:7b:88:98:cc:13:19:dc:37:56:e0:83:
4c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:09:6A:17:2C:85:16:38:7F:DB:87:13:1F:4F:48:E4:40:85:68:65
X509v3 Authority Key Identifier:
keyid:EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:cb:bb:df:2c:5e:98:d8:cd:3a:36:f9:04:71:83:a6:52:ce:
9d:9a:2d:84:17:d3:ad:4f:98:e5:e8:c4:f7:b0:d3:9d:42:1b:
18:77:d0:f4:ed:7d:c8:9a:ab:ea:13:c6:6b:37:7f:78:81:b8:
d6:e1:b3:c4:f4:c4:79:05:00:36:95:13:2c:c4:08:0e:10:b7:
45:25:2b:86:c6:14:6f:7b:e2:00:62:7d:84:1e:7f:f1:47:e9:
71:a2:2e:e1:6a:2a:af:37:a1:f1:5e:c2:02:e7:20:5f:1d:7b:
20:80:97:7a:2e:0f:2f:85:08:af:4a:67:75:bd:c1:55:c5:63:
0f:9e:7e:a2:f8:54:de:f8:64:f6:1a:4e:69:a8:36:fa:54:5e:
ea:6b:50:bd:00:66:d3:a8:0f:87:42:ea:b2:67:d0:c0:51:63:
c4:63:a4:1e:c4:a5:78:17:8f:24:5f:a8:72:18:18:6c:3b:4c:
47:82:5a:e4:a0:31:2b:78:33:4f:af:ee:05:18:06:0e:5a:33:
00:4a:66:70:6a:f1:44:e1:ec:47:f3:80:ed:15:eb:c5:e3:3b:
c9:d7:7f:88:4c:d9:8a:b3:5b:3c:10:ce:91:4c:92:88:fd:a5:
61:09:78:1c:36:f9:19:59:e6:d1:48:88:19:b7:d8:44:2e:44:
d9:60:79:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:11 2026 by rpki-client