Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
File: 7ix0WZPMS28UcK6rRhTwhdSuQKk.mft (raw, json)
Hash identifier: LTYaDG8xsEy9RbCLvnv65T/36GI3GwgUuhFn7uywCeg=
Subject key identifier: 39:5B:38:E6:44:6B:2B:5D:DE:89:55:83:D3:EB:2E:5F:65:70:6C:BD
Authority key identifier: EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
Certificate issuer: /CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Certificate serial: 019F1831261D59C4AD7A4FB5F354EABFCD40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
Manifest number: 161A
Signing time: Tue 30 Jun 2026 11:01:41 +0000
Manifest this update: Tue 30 Jun 2026 11:01:41 +0000
Manifest next update: Wed 01 Jul 2026 11:01:41 +0000
Files and hashes: 1: 7ix0WZPMS28UcK6rRhTwhdSuQKk.crl (hash: EConRYzL9rPK9Pyjs//EUD/qe1W42n0xsaWYJIfs/H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:31:26:1d:59:c4:ad:7a:4f:b5:f3:54:ea:bf:cd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Validity
Not Before: Jun 30 11:01:41 2026 GMT
Not After : Jul 1 11:01:41 2026 GMT
Subject: CN=395b38e6446b2b5dde895583d3eb2e5f65706cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7f:e4:ed:3e:02:64:c3:94:6b:45:9e:19:b0:
44:24:87:99:6d:2e:57:01:87:bd:7a:06:9b:e1:06:
19:1d:80:93:84:b8:31:27:6a:e6:6a:3b:bb:8d:06:
f6:61:06:f9:c3:55:00:af:25:20:d5:5d:c2:6e:59:
55:c6:e6:13:dc:cb:ba:83:d8:44:59:9c:08:5a:1b:
6b:6e:41:1c:b3:e8:68:91:bc:a4:65:2c:ea:17:d4:
16:5a:38:a1:38:ce:2a:c8:4b:6b:02:90:79:f9:27:
0c:ed:eb:08:9d:29:9d:a4:f5:82:e3:5d:59:0e:21:
59:ea:49:06:7e:e3:80:29:d6:4a:2a:14:43:17:b1:
8b:24:81:e3:44:b1:34:e0:c4:13:56:af:c2:62:ef:
47:ce:7b:ed:fc:ca:ba:97:fe:8d:87:02:4f:e5:ab:
26:92:42:74:ab:ad:75:c6:5c:50:64:1b:2a:9b:52:
0e:da:ed:e6:cb:b4:23:cf:98:c8:13:80:7d:41:ba:
7b:e8:de:2f:9b:d8:fd:51:4c:41:27:e9:39:9b:50:
a6:f3:4e:27:17:73:d2:4e:a0:6b:84:13:60:90:a3:
6d:37:07:2d:4d:66:be:cf:b3:d8:b8:34:f6:32:5f:
d5:52:b9:99:ae:27:d2:34:ca:d3:f9:11:a2:7f:0d:
02:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5B:38:E6:44:6B:2B:5D:DE:89:55:83:D3:EB:2E:5F:65:70:6C:BD
X509v3 Authority Key Identifier:
keyid:EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2f:67:e5:b9:03:6e:86:32:47:39:4c:07:37:98:67:67:55:
b5:42:97:bd:70:90:cf:70:46:e4:24:8f:76:13:3a:33:cd:6e:
01:67:5d:e9:61:97:03:06:28:f5:f7:b9:7b:94:b0:b6:a5:31:
ae:d2:3e:e9:8a:7d:5f:cb:f2:16:d2:e1:f4:4b:ae:25:43:a1:
b8:3a:e7:5f:c1:37:4a:c7:66:57:a3:44:d9:6a:93:df:66:1f:
46:d2:64:6a:68:75:23:1f:21:25:a6:82:ed:b4:9e:8d:e6:3b:
d6:be:19:06:ea:92:71:6c:8f:cb:08:2e:c8:e3:72:09:f5:79:
84:b8:a4:03:02:ca:f2:29:f9:04:4d:c4:51:49:47:41:aa:e8:
e0:fd:29:1a:75:7c:7f:77:e1:6b:9f:d0:38:a3:31:5f:02:c2:
e7:1c:6e:4b:21:82:33:4c:8d:69:0a:b9:67:8f:f3:d3:c5:0a:
18:7e:f7:f8:43:d6:be:29:73:51:a3:61:34:15:b7:9e:71:45:
cc:94:2b:d5:fb:a1:49:0c:71:88:28:c2:67:e0:aa:5a:1c:96:
89:dd:e7:50:5e:e1:98:54:b9:67:06:8a:0d:ab:e8:d0:3e:e0:
70:83:7e:fb:32:bb:93:85:8d:02:87:89:7e:9e:f6:4a:92:03:
e7:1b:ad:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:50 2026 by rpki-client