Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
File: A-7ifdtJC7lmnuug4RaUFkyi6Og.mft (raw, json)
Hash identifier: 8H/W7fzb4yhYf++syxOLaPZVBOMIUE0c60quBurhh5A=
Subject key identifier: A8:0D:E4:6F:5A:7E:72:86:B8:6F:DC:A8:3C:2B:9E:EE:82:F2:5D:AF
Authority key identifier: 03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
Certificate issuer: /CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Certificate serial: 019F178B98D47FDAA85610E9A3BABE75A86A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
Manifest number: 0643
Signing time: Tue 30 Jun 2026 08:00:52 +0000
Manifest this update: Tue 30 Jun 2026 08:00:52 +0000
Manifest next update: Wed 01 Jul 2026 08:00:52 +0000
Files and hashes: 1: A-7ifdtJC7lmnuug4RaUFkyi6Og.crl (hash: Nn4f81VGeMxgY286QdvgazKHqMtrlRXKdqrUVlHetlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8b:98:d4:7f:da:a8:56:10:e9:a3:ba:be:75:a8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Validity
Not Before: Jun 30 08:00:52 2026 GMT
Not After : Jul 1 08:00:52 2026 GMT
Subject: CN=a80de46f5a7e7286b86fdca83c2b9eee82f25daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2a:41:37:b1:48:82:ac:2d:79:43:00:c4:e8:
56:7e:a9:32:04:b5:53:71:ac:bc:72:16:07:92:12:
6e:00:f3:47:ea:c1:bb:22:57:18:4c:d5:75:ef:57:
ea:ae:2f:2f:5e:e4:df:b0:d6:e9:b6:38:6d:a2:9d:
35:60:ad:17:90:73:9e:e6:14:b5:8f:74:42:73:51:
0e:07:b0:cf:b3:e2:ef:f6:98:55:72:fb:4d:f9:16:
9d:0a:41:c6:99:79:df:79:d9:76:5b:c5:ac:8a:c4:
98:14:b2:55:ef:cb:94:3f:0e:09:33:25:73:95:c1:
92:e1:68:d0:33:20:3a:eb:17:37:6d:61:0d:2b:7b:
12:e4:fd:e3:69:ef:f7:ab:be:33:ff:5f:d6:0f:cd:
02:fa:91:89:b2:72:c1:9a:3e:21:b4:85:8c:f0:e5:
93:53:2b:c9:6c:18:a9:38:b6:e4:cc:b6:f7:e3:a8:
c2:27:c9:1f:44:12:15:8d:e3:32:8b:13:2c:04:67:
e0:43:71:50:ac:63:2a:f8:09:ae:2d:c6:5b:11:d6:
82:d3:01:dc:2c:8b:47:5b:f4:d1:89:10:7e:39:af:
51:3c:e0:77:0d:2f:b2:c0:8e:d1:e3:0f:e8:4b:5a:
f1:27:3b:8f:2c:fa:39:e7:3e:a6:3b:29:e8:ea:21:
d9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0D:E4:6F:5A:7E:72:86:B8:6F:DC:A8:3C:2B:9E:EE:82:F2:5D:AF
X509v3 Authority Key Identifier:
keyid:03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:7d:0c:f1:7a:bf:3c:9e:c8:80:8f:16:de:e9:72:07:99:42:
e2:7e:bb:1d:ee:f2:17:6a:48:e5:db:7c:19:47:80:b4:9d:da:
c3:7a:51:1c:91:f3:97:81:8d:66:3f:4b:0e:a0:7b:bc:f9:07:
56:39:ad:ed:f7:97:59:0a:22:bf:65:97:c4:97:42:02:17:a5:
20:d8:b2:a0:48:b1:9d:1d:64:79:08:0e:64:22:1a:0e:9b:44:
1a:ee:5b:50:cd:bf:1f:e9:91:42:01:fa:19:78:8f:a0:01:57:
58:54:1d:d7:98:07:77:c0:65:9b:42:35:b9:44:64:83:5a:f1:
50:a6:b6:fe:6d:66:6f:d3:cc:43:12:0e:b3:af:b7:6c:11:6f:
e0:d5:6c:19:97:d6:45:23:c3:e1:e8:b1:9a:9e:97:83:2e:4c:
cb:86:2f:5e:3e:2e:fe:fe:2a:14:e5:69:13:c6:f9:d0:ba:94:
fe:f4:5f:78:24:e0:b6:35:b9:2d:1b:af:4e:39:84:28:d6:78:
73:59:7f:c8:a4:f8:cd:c2:32:e3:8b:7b:c5:84:f1:a1:c7:ee:
cd:9e:68:a5:6d:63:54:d1:34:0a:10:51:95:96:73:8e:07:36:
a5:98:02:61:36:c2:dd:63:20:91:a2:22:e9:46:45:77:a4:8d:
7b:33:aa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:28 2026 by rpki-client