Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json)
Hash identifier: gI/MXlLK2xuRUFR7WFeQpVYHfsNJSC7ejuR71LzgTbg=
Subject key identifier: 62:D1:48:8E:CA:30:5B:56:18:F5:13:82:D4:B4:FA:5D:0C:CC:AA:8B
Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
Certificate issuer: /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Certificate serial: 019D386657F7BEAC46C101A9B3C9A601FB9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
Manifest number: 0B02
Signing time: Sun 29 Mar 2026 07:02:04 +0000
Manifest this update: Sun 29 Mar 2026 07:02:04 +0000
Manifest next update: Mon 30 Mar 2026 07:02:04 +0000
Files and hashes: 1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: vPjkkXktLV7Yj48TE15AU9CRhsEJUDuMuh1IKtNK7y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:57:f7:be:ac:46:c1:01:a9:b3:c9:a6:01:fb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Validity
Not Before: Mar 29 07:02:04 2026 GMT
Not After : Mar 30 07:02:04 2026 GMT
Subject: CN=62d1488eca305b5618f51382d4b4fa5d0cccaa8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:c6:80:1c:bf:ad:dc:76:f2:a1:97:d8:9b:
09:3d:41:fc:70:fc:8c:14:59:f9:9c:e3:11:35:0b:
3d:a1:b9:26:f8:be:7e:86:d9:dd:e0:61:76:78:bd:
96:ec:50:81:0f:04:30:63:0f:fc:e2:51:7e:1a:ca:
ab:05:88:1f:b4:65:4f:32:4f:ee:02:1b:b7:57:cb:
28:1e:6d:99:33:fb:55:80:ee:79:d0:04:25:b9:cf:
a8:17:7e:06:37:d5:e5:99:72:9b:8d:d6:52:83:15:
b3:a7:0d:90:e2:e9:df:4c:f9:ec:ba:19:51:21:d4:
a9:f9:ff:77:2f:fc:94:9d:40:e5:80:22:f2:41:f7:
59:c3:05:52:56:e0:5d:4a:34:21:29:19:89:a7:25:
cc:ec:e0:60:69:24:a0:c9:de:97:70:7d:12:3f:73:
d5:e1:2f:e1:a9:79:b5:bc:69:a0:6a:4b:06:9d:b4:
6b:9a:36:8d:c4:a3:7a:3e:bd:ac:45:f3:d7:83:fb:
a0:af:f2:de:a5:2c:7d:8b:6f:4c:1e:e7:fc:a1:fd:
31:d5:50:7c:36:d8:bf:57:9a:77:b4:a1:c4:d0:b4:
b8:ed:22:26:0e:54:9c:5c:89:6f:c9:ff:e5:c8:3c:
3f:ef:fc:31:27:66:c8:ca:6d:2c:1e:00:9f:a5:28:
6a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D1:48:8E:CA:30:5B:56:18:F5:13:82:D4:B4:FA:5D:0C:CC:AA:8B
X509v3 Authority Key Identifier:
keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e3:cb:64:5b:49:4a:95:58:f4:9e:d7:d6:73:21:8f:6b:85:
f5:4c:7c:87:af:a7:ca:49:39:bf:f5:9c:8a:8f:de:21:fe:f5:
c9:3a:30:58:44:35:aa:18:bb:72:63:90:ed:d5:da:fd:93:16:
a2:f6:8f:6e:de:0e:37:1e:de:cb:20:28:a6:ea:b6:a4:be:17:
92:fd:f2:87:c9:6f:20:88:ca:e8:97:99:ac:bd:cf:c0:5d:39:
42:9f:af:69:91:05:12:f4:10:72:43:f6:4d:b6:e4:b1:1d:d4:
6e:1e:fa:c0:bd:3d:d9:b9:cf:a3:15:a5:57:3a:cc:13:a3:a6:
81:71:6d:09:f4:47:79:db:b0:22:83:09:41:d8:bb:40:39:d5:
cf:87:66:2a:4d:27:d1:d7:62:0d:a0:52:9f:6f:74:49:81:61:
65:f7:9f:d0:7f:e2:dc:ca:12:e6:c0:d2:99:dd:f0:df:42:16:
d8:28:47:44:2c:db:54:8e:c2:80:c9:42:b1:97:eb:f1:94:a3:
a5:26:50:a4:f6:1c:66:79:dd:fc:2b:db:90:46:6a:db:50:71:
9f:7f:66:a1:7e:d2:b1:37:7c:7b:8e:e8:b3:7e:87:2a:5f:27:
90:c7:b1:26:8d:56:8e:8b:bc:a3:69:b7:2f:a1:03:d8:d1:d6:
3f:0e:c6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:13 2026 by rpki-client