Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json)
Hash identifier: XDsAWWaCMdnjvPFwOnfRY1KYISTFj2c2HHqJUfYQE5g=
Subject key identifier: 64:9D:E3:E4:F3:FC:1E:DE:D8:49:E1:43:A6:4D:A4:AF:AF:DE:67:3B
Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
Certificate issuer: /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Certificate serial: 019E2F97772FE2B1861678ABD8C53562414A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
Manifest number: 0B82
Signing time: Sat 16 May 2026 07:01:56 +0000
Manifest this update: Sat 16 May 2026 07:01:56 +0000
Manifest next update: Sun 17 May 2026 07:01:56 +0000
Files and hashes: 1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: 8OUobq2wWIEhC79qxEcgrDfXET9SQIdRWHGksZwO9M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:77:2f:e2:b1:86:16:78:ab:d8:c5:35:62:41:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Validity
Not Before: May 16 07:01:56 2026 GMT
Not After : May 17 07:01:56 2026 GMT
Subject: CN=649de3e4f3fc1eded849e143a64da4afafde673b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7f:7e:33:28:aa:12:07:f4:19:e8:5c:5f:d0:
64:8b:97:85:99:3b:6b:cf:61:28:e6:f9:9e:00:0f:
50:44:83:ec:09:2e:df:95:2c:07:56:73:cf:72:39:
78:6b:57:ff:dc:1b:ed:95:f6:0e:ed:1b:6e:9f:48:
53:4a:8b:f3:92:fd:fa:cc:02:81:8b:93:fb:e4:f9:
5c:0e:c1:1c:f1:cc:51:29:f8:36:98:5c:1f:66:56:
f8:5b:3e:a6:3c:eb:13:40:b1:85:58:31:16:15:39:
74:91:95:b3:a4:6a:40:dd:0b:93:e1:18:0c:40:1f:
bb:a2:60:4e:f7:22:67:d3:b6:75:63:07:8e:22:bc:
20:11:87:bf:e2:e4:4d:c7:62:69:0a:f6:7a:bf:b2:
14:62:66:9e:f3:0e:43:7c:08:d0:db:c9:38:1b:c8:
7e:b2:4f:a5:4a:26:1c:e9:8f:87:1a:99:21:cd:1b:
11:08:82:bf:d9:fc:ce:56:ff:45:b5:c9:35:67:c8:
b9:c6:bf:d3:1b:b6:f8:b4:68:7a:35:f2:4d:13:75:
c8:21:d6:10:c8:c2:8d:4f:86:77:04:68:b7:99:02:
70:c8:9b:e0:c3:a4:8b:b3:a9:d7:0c:18:e4:4f:fa:
df:21:80:d0:9f:38:73:f1:9b:d2:a0:ac:a3:b9:32:
e5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9D:E3:E4:F3:FC:1E:DE:D8:49:E1:43:A6:4D:A4:AF:AF:DE:67:3B
X509v3 Authority Key Identifier:
keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5b:55:b8:89:81:b2:dc:d1:d1:7e:3f:42:ef:55:0d:8e:ee:
90:ba:f0:99:01:ef:49:72:03:7c:86:5c:b7:c5:91:e8:8d:23:
c3:81:52:d1:5a:5b:ab:b5:2c:bf:11:37:aa:11:b7:d9:25:78:
0a:c6:a1:98:8f:af:b3:92:56:06:33:e8:9b:69:cc:14:38:46:
aa:0a:9c:fa:ef:fb:e5:a0:d1:a2:43:7b:7b:0d:e2:16:61:54:
d6:7b:51:a4:ca:6c:65:f5:5b:23:9a:83:f4:c4:4a:0a:55:df:
2c:95:96:9a:37:63:8b:92:d7:e0:34:30:25:3b:37:e0:46:b5:
5c:2f:92:4b:ae:e6:aa:d8:36:47:5b:59:14:f6:33:f5:22:53:
40:d3:be:62:6f:1c:a1:21:84:10:0c:17:76:c1:9b:f6:ce:44:
3d:ac:22:9f:a5:11:ec:7f:e3:0a:e8:d5:52:c0:ef:94:d7:94:
cf:48:07:47:fb:84:3c:e1:58:cb:46:c1:12:21:5f:f4:9b:18:
f9:00:20:2e:35:66:fd:49:83:76:15:5d:2d:33:7f:34:b8:f9:
66:40:18:16:14:ff:04:91:a3:34:c5:bb:f7:95:c8:7d:51:74:
d2:90:a4:ab:6c:ed:11:d4:c5:12:ba:ce:86:8b:ba:e4:2e:55:
f6:e0:ac:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:51 2026 by rpki-client