Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
File: 7ix0WZPMS28UcK6rRhTwhdSuQKk.mft (raw, json)
Hash identifier: Ez6Q4lxYGsQ+J2BGKuZetJHHHdfifVOZud+hg03m9mE=
Subject key identifier: 45:27:F1:34:EE:7F:06:CA:AF:35:57:43:90:41:64:50:4D:AA:65:29
Authority key identifier: EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
Certificate issuer: /CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Certificate serial: 019D37530BF8A73D581CE49464B71426CCC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
Manifest number: 1521
Signing time: Sun 29 Mar 2026 02:01:22 +0000
Manifest this update: Sun 29 Mar 2026 02:01:22 +0000
Manifest next update: Mon 30 Mar 2026 02:01:22 +0000
Files and hashes: 1: 7ix0WZPMS28UcK6rRhTwhdSuQKk.crl (hash: WjFqRWgQym7loPd8yRnVbtbAosXfVsGz8eeu+E4gcZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:0b:f8:a7:3d:58:1c:e4:94:64:b7:14:26:cc:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Validity
Not Before: Mar 29 02:01:22 2026 GMT
Not After : Mar 30 02:01:22 2026 GMT
Subject: CN=4527f134ee7f06caaf355743904164504daa6529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f5:ac:b9:1f:78:60:c6:ef:49:74:f0:97:ee:
56:05:51:b8:cb:a7:3b:3c:01:56:c4:d2:e9:28:5a:
7e:a5:2e:b6:10:91:ff:2b:8c:35:6e:cb:35:4e:74:
b2:1d:a4:c2:4a:c3:2f:f7:54:ac:94:c6:ea:8b:47:
40:76:ac:40:8d:1d:2f:26:62:08:9d:24:66:72:93:
3b:e8:60:06:97:ce:08:c9:2f:10:dd:92:fa:e7:55:
9b:77:14:7d:5f:8d:02:c6:c5:15:38:86:4f:3d:0c:
4f:34:81:24:f6:12:a0:ee:e1:eb:98:97:90:d3:fe:
f9:23:2d:bd:9d:cf:01:17:97:a3:c0:38:94:5a:58:
ca:ed:13:b4:a5:e5:29:be:13:c7:a2:8b:e0:3e:31:
de:bf:ca:7a:4e:ac:8c:42:05:7e:c5:cc:6a:fc:a4:
8c:4d:c2:d9:61:4b:94:f0:79:f2:a1:fe:2a:71:b4:
c6:8a:06:c7:fd:18:a1:73:8b:8f:f8:c7:d4:b0:c7:
80:99:aa:e8:3e:b9:93:d8:15:87:5e:27:0f:fd:60:
7f:ea:a5:a3:d6:91:b1:e4:74:ec:1b:fe:39:a1:c1:
25:48:64:36:64:4d:48:b1:64:08:f9:cd:4f:1f:5c:
d1:b0:d0:cb:45:22:e6:4b:96:43:f4:76:56:a2:ca:
42:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:27:F1:34:EE:7F:06:CA:AF:35:57:43:90:41:64:50:4D:AA:65:29
X509v3 Authority Key Identifier:
keyid:EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:2d:61:71:59:18:70:e7:ed:67:b2:41:0f:32:5a:07:10:a3:
dc:a6:36:3a:6e:a0:e6:d5:df:37:63:14:df:3f:95:ec:01:ca:
b0:7b:95:cc:b8:8b:e8:e9:b7:7d:4d:29:04:85:29:88:18:c1:
f9:ba:31:3a:18:ac:77:34:c8:73:36:e5:60:81:04:0e:ce:ec:
26:e2:e7:05:cd:66:da:30:75:14:66:9a:c9:11:17:55:a7:97:
11:da:80:83:ce:69:af:b2:82:05:f6:36:1d:b1:41:59:37:eb:
eb:e4:33:0d:2d:e7:18:e8:3b:c5:60:5c:a9:91:e2:74:ed:71:
00:6f:b8:11:9a:e8:5f:33:c4:5a:27:16:b4:5b:80:f1:1f:24:
c5:75:24:c3:90:c9:ee:0f:93:4f:1a:27:24:39:76:53:ec:97:
8d:a3:d2:eb:6e:dc:4e:85:a1:b6:ab:69:59:80:7c:23:bb:e9:
c2:30:1b:ee:b1:85:b8:14:fd:90:cd:ad:fd:d9:ff:d3:43:5b:
0c:fe:0d:f8:68:41:10:4e:b6:2c:d4:79:69:c5:17:aa:21:27:
ed:bc:7f:2f:32:dd:22:cb:8c:eb:09:cf:05:c4:d0:b7:b0:d8:
fb:04:e5:bd:e5:fc:5a:7f:44:94:c7:9c:33:e3:8f:b2:4e:31:
9a:84:d7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:02 2026 by rpki-client