Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json)
Hash identifier: gcZ2f7QdVyMtpEpygFh1CzYxLeFRibSDOlvncKwoOqM=
Subject key identifier: 7F:75:0C:D5:DF:4C:B2:64:EA:42:73:E9:A3:45:1B:C6:6A:68:98:8D
Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
Certificate issuer: /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Certificate serial: 01A00100EC3E46B5203BF3A09B0910655425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
Manifest number: 0C73
Signing time: Fri 14 Aug 2026 16:00:32 +0000
Manifest this update: Fri 14 Aug 2026 16:00:32 +0000
Manifest next update: Sat 15 Aug 2026 16:00:32 +0000
Files and hashes: 1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: O7nnq+3yjOBwNPQEEIuz5kN/YYEOnqLodxeyT8SFc0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:00:ec:3e:46:b5:20:3b:f3:a0:9b:09:10:65:54:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Validity
Not Before: Aug 14 16:00:32 2026 GMT
Not After : Aug 15 16:00:32 2026 GMT
Subject: CN=7f750cd5df4cb264ea4273e9a3451bc66a68988d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:00:99:ae:56:c9:c1:4a:dc:8d:51:65:93:
9a:c3:d2:48:8b:8e:41:85:4e:75:ff:d0:fc:64:56:
97:0c:30:2b:7e:bf:d2:b5:f1:6d:b9:6c:a3:23:12:
3f:1e:8a:c6:c5:94:0c:52:e7:9e:e3:c4:33:02:12:
4f:a1:d8:7e:ff:84:85:e3:c4:37:ce:1f:cc:22:7f:
f8:6c:36:2f:85:fb:61:46:db:70:f9:73:a1:07:0e:
3f:39:6c:39:f3:42:17:90:93:0a:14:f9:e5:53:91:
cb:65:39:2a:42:5c:5d:43:d6:b7:f7:d7:20:7f:0f:
d7:88:5a:fc:15:ed:bc:3e:a3:36:5f:c2:d2:b4:3b:
38:f4:6f:97:b2:82:02:11:75:76:18:9f:84:fe:ee:
c7:4c:fa:ee:65:3b:a8:59:fd:73:78:88:8b:69:fe:
f3:e1:e5:95:b9:ec:e1:86:6d:6d:bb:6b:d9:71:0c:
b5:84:2a:68:e3:4f:a7:f0:5c:fa:0f:37:78:b1:a2:
80:89:d2:7a:6d:b9:d7:9e:f7:3e:c6:f2:21:fe:69:
21:e2:fb:91:68:c2:0d:95:63:fa:0c:40:ce:76:dc:
b2:5b:7a:91:3e:4d:17:1b:fd:f1:2b:4e:26:2f:7a:
a0:22:1c:5a:55:25:fe:5a:6a:ea:fd:e8:35:8b:6d:
fc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:75:0C:D5:DF:4C:B2:64:EA:42:73:E9:A3:45:1B:C6:6A:68:98:8D
X509v3 Authority Key Identifier:
keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fd:a4:66:b4:64:48:db:33:48:18:48:94:8b:fe:d2:50:0a:
7e:a0:9b:ca:00:b9:54:03:6c:1c:8b:a8:9d:39:1e:d3:68:49:
54:2e:59:ee:aa:28:3a:ad:9e:26:92:b5:b3:9d:13:59:50:34:
c4:11:9d:84:76:0f:19:c8:cc:e7:3e:56:5b:19:77:4d:36:ab:
83:84:25:1d:47:37:e4:a3:38:73:0b:af:5b:1a:97:12:c8:69:
36:fd:9f:d1:31:cf:12:b9:23:aa:b0:1b:9b:af:8d:cd:a8:c4:
0c:d7:ac:71:b3:bc:59:3a:e9:04:37:cc:f1:fd:00:4a:40:05:
2a:0f:a0:94:51:21:f7:9f:89:af:78:1b:00:59:3f:a1:74:0a:
e0:26:a0:da:c2:e2:8c:bc:26:56:cc:08:ce:c3:ec:3d:81:fd:
0c:b9:20:04:ee:ea:be:bf:ab:f8:3c:bc:8d:f4:28:59:56:63:
9d:3a:21:71:f6:19:c9:22:b8:17:6b:17:45:34:98:11:ad:97:
25:65:56:a4:23:09:0e:e1:f2:ea:05:10:26:45:d4:16:4e:a9:
05:96:94:e4:3c:d4:09:d1:f1:f7:29:f1:d4:41:b4:fd:de:2c:
5a:cc:39:c0:b7:37:5b:69:a9:59:26:5a:20:e1:3c:f4:fe:fe:
04:47:58:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:26 2026 by rpki-client