Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json)
Hash identifier: Vrl7tgI7CG6IXOTRHUpchekV4ns9IQBa3P53JQHYz1c=
Subject key identifier: C7:3F:B9:C2:2E:CB:ED:D0:74:0C:4D:72:63:71:8C:1B:F6:E0:0E:7F
Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
Certificate issuer: /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Certificate serial: 019F19438847D1CA8C0FF0E709502C961897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
Manifest number: 0BFB
Signing time: Tue 30 Jun 2026 16:01:23 +0000
Manifest this update: Tue 30 Jun 2026 16:01:23 +0000
Manifest next update: Wed 01 Jul 2026 16:01:23 +0000
Files and hashes: 1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: wuItNQg5mjaxFx4xBUnSGmblgta+muQT6bBS2e/qR3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:88:47:d1:ca:8c:0f:f0:e7:09:50:2c:96:18:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Validity
Not Before: Jun 30 16:01:23 2026 GMT
Not After : Jul 1 16:01:23 2026 GMT
Subject: CN=c73fb9c22ecbedd0740c4d7263718c1bf6e00e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:02:e9:e9:6c:8f:d5:c2:34:f3:a7:6f:ae:
62:d0:26:0f:11:5d:30:f3:aa:53:66:5b:02:ee:b6:
5b:c0:24:6d:15:f2:3f:e9:8d:48:93:ae:91:8c:61:
a6:b0:1f:c3:fd:59:00:61:c9:a4:74:1d:6e:66:58:
e5:b2:bd:db:5c:1e:04:0e:fd:ec:b9:04:1a:65:c6:
03:89:83:3a:4f:2f:c8:d7:12:e7:c9:02:4d:a8:31:
06:bb:4f:6b:1b:be:ca:e4:9a:1b:1d:4d:e7:37:4f:
52:c9:ad:43:2d:3b:df:65:4e:05:c4:ff:e1:af:0e:
78:1b:31:18:d2:96:10:d4:13:b2:ae:c1:dc:38:91:
3e:3c:22:71:7d:3c:a4:e5:b5:98:b7:b2:31:fb:f7:
af:b5:ad:76:b7:e2:c8:ea:fb:d1:5f:6b:df:12:7d:
ff:4f:67:1b:df:38:86:6b:ae:d5:9a:ad:e0:c5:9e:
b5:67:b8:9d:29:b5:aa:74:01:46:a4:fc:1a:41:37:
28:5d:9a:dc:b7:6b:0c:74:cd:ff:13:5d:9d:d5:37:
b8:5d:5b:f6:ff:39:31:92:c8:a0:4d:16:d5:a4:6d:
d9:3c:db:98:f5:ff:4e:1f:e9:44:ed:b2:1f:44:fb:
b3:75:1d:2b:0e:c0:46:4a:d2:02:61:a7:1a:23:14:
fb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3F:B9:C2:2E:CB:ED:D0:74:0C:4D:72:63:71:8C:1B:F6:E0:0E:7F
X509v3 Authority Key Identifier:
keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3a:04:c7:51:e1:1b:67:f5:df:87:7c:75:d6:d3:e8:9f:b8:
e7:b6:d3:3b:47:be:67:4d:62:11:eb:61:d1:1c:6d:10:62:4b:
b5:22:0b:03:7f:fe:b8:bf:cd:bf:f5:3a:41:cf:9f:77:49:6b:
73:e1:74:db:41:b0:3d:7e:7a:48:66:0b:9e:65:c3:20:66:df:
94:d9:6f:49:60:b6:d1:8b:67:67:b7:ad:0b:d2:fc:3e:19:ac:
d5:bd:dd:bf:b4:d0:dc:9d:30:8f:03:b6:35:2c:3b:a6:99:f1:
3f:42:da:d2:3b:be:7e:ea:9f:85:00:90:53:31:d3:d7:8d:d8:
70:ac:f9:21:01:98:c4:a1:db:fb:8d:3f:e6:81:b9:1a:17:7c:
43:8c:35:f7:2f:4f:3d:fd:13:4e:4e:0d:9a:e6:d4:9b:29:0a:
09:15:a0:20:d7:0b:18:c0:b8:52:e5:9c:c5:9a:da:f0:d7:2e:
9f:2e:c4:dc:46:6b:20:23:44:74:da:42:31:e7:52:62:c6:cf:
3c:83:08:e9:4b:09:07:27:05:63:77:26:ea:be:ab:e7:7e:9f:
e5:51:06:be:69:22:49:9c:ba:c8:58:1a:35:f1:39:3e:e3:53:
9c:c0:3a:40:58:bf:83:52:40:50:11:0e:87:d8:d8:4c:fd:5d:
3b:b5:79:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:30 2026 by rpki-client