Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
File: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft (raw, json)
Hash identifier: 3N7Oq7niPLxdJLoDlX02MFBOFVx+nl4vYj67s3B/7jI=
Subject key identifier: 9A:F4:7D:4F:2F:69:3B:52:FD:59:C6:80:FC:66:FE:9D:9D:DC:4D:0F
Authority key identifier: EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
Certificate issuer: /CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Certificate serial: 019F190D01ED9D0C1910D97307706CCA7BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
Manifest number: 11CB
Signing time: Tue 30 Jun 2026 15:01:50 +0000
Manifest this update: Tue 30 Jun 2026 15:01:50 +0000
Manifest next update: Wed 01 Jul 2026 15:01:50 +0000
Files and hashes: 1: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl (hash: 5Jc0KMN0Diey+XNGoZGlFrE7qem2P/MvdV75/FNJRAE=)
2: xkug34IJaWSwOfn5zGdas0MixZ4.roa (hash: IepgvoNLMpyof9xTWeZX3c1cPMLbQuZpVjyEywQxdwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0d:01:ed:9d:0c:19:10:d9:73:07:70:6c:ca:7b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Validity
Not Before: Jun 30 15:01:50 2026 GMT
Not After : Jul 1 15:01:50 2026 GMT
Subject: CN=9af47d4f2f693b52fd59c680fc66fe9d9ddc4d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:31:66:c8:33:67:89:f1:52:ad:9e:3f:0e:af:
04:54:27:00:46:e1:36:91:b9:8e:99:7a:90:ae:54:
05:f0:c1:02:43:7b:20:01:07:ef:b7:3b:c0:fb:84:
40:3c:5a:b8:4c:69:d9:b4:a0:47:2f:9a:81:61:17:
4b:05:d2:4a:ba:46:81:e3:a7:1c:0b:08:90:13:a6:
3e:6b:22:f5:9d:7c:26:25:e5:54:66:95:a3:11:d2:
4f:1e:8c:af:09:3b:e7:8d:20:e1:5a:fb:f9:3c:f2:
4e:8f:20:19:21:6a:fb:68:18:9f:9a:69:ae:3b:ab:
bc:e1:63:73:ff:72:29:d8:7f:2e:cd:83:a4:c6:52:
fd:ea:69:d7:e0:01:09:a1:65:91:6a:26:8d:bc:ca:
58:b4:c2:d2:14:a6:f6:e6:c8:92:11:54:99:b4:47:
4d:07:9a:fc:97:4e:07:8c:74:4b:73:fa:77:e4:60:
27:52:bd:1e:05:ac:a2:18:6d:60:c1:60:b5:d7:94:
df:02:1a:d4:ae:ea:19:e3:e6:37:ab:52:b1:90:1c:
22:c2:35:09:2c:c7:bf:4c:28:96:07:66:fb:d1:45:
a4:77:53:d3:c2:55:b0:bf:16:f1:f6:13:d0:2f:98:
ee:e2:e1:d7:94:13:f3:2d:71:7e:01:32:ff:d8:cf:
f3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F4:7D:4F:2F:69:3B:52:FD:59:C6:80:FC:66:FE:9D:9D:DC:4D:0F
X509v3 Authority Key Identifier:
keyid:EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f1:a8:ce:cc:2b:b4:07:75:50:89:12:0c:f4:fb:d0:67:d3:
10:dd:cd:f5:ac:92:4a:fc:51:68:56:6c:4e:3f:b6:84:72:e3:
65:80:32:50:47:e6:91:a1:06:3e:b7:26:85:05:d6:c0:ed:bc:
5c:f7:ff:2b:7f:5e:ee:c0:69:b8:18:4e:e7:f1:b2:f0:12:32:
5c:6d:42:11:26:ee:53:1f:5b:64:b9:bf:5a:11:32:36:25:22:
99:8b:7e:ff:d0:77:e2:6c:95:3c:a2:62:4c:20:66:0c:1b:e9:
3c:c6:bb:39:23:e7:92:90:b6:9d:a3:08:c6:d5:1d:7b:07:1b:
99:59:ed:9d:a4:10:d3:8f:18:c1:7b:f3:cb:04:86:4d:72:d6:
d2:61:d2:0e:05:2b:a7:e1:49:d4:d3:b3:60:86:22:11:5c:40:
91:a4:d0:48:62:cc:1b:b0:43:f4:f2:fe:9e:22:75:6e:c5:ca:
e3:1b:77:a4:e4:f9:13:e4:ba:a4:42:ef:54:8e:ee:97:55:b3:
fa:51:a8:81:8e:ce:f3:dc:24:9e:4d:0e:92:05:2f:a3:0e:09:
92:08:a0:fb:75:ff:bc:b3:47:e4:0a:a5:23:6d:6a:cc:e8:cc:
b7:bf:a7:a4:b1:72:fe:6a:91:f5:a5:76:23:5d:66:eb:71:26:
66:73:80:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:18 2026 by rpki-client