Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
File: 7ix0WZPMS28UcK6rRhTwhdSuQKk.mft (raw, json)
Hash identifier: g5Fa8RDev+ebRNoMTD8UpNegMUZ+qMUCuAYGvKS8qoo=
Subject key identifier: 5D:64:11:42:7A:5E:2B:08:BA:FF:21:E7:66:E8:3E:8F:F6:7A:05:96
Authority key identifier: EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
Certificate issuer: /CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Certificate serial: 01A001DCF640CC631EF94C2ED76A53A75674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
Manifest number: 1693
Signing time: Fri 14 Aug 2026 20:00:53 +0000
Manifest this update: Fri 14 Aug 2026 20:00:53 +0000
Manifest next update: Sat 15 Aug 2026 20:00:53 +0000
Files and hashes: 1: 7ix0WZPMS28UcK6rRhTwhdSuQKk.crl (hash: Qf5527IWU1PlIkq8eyXrzXYHgpIHvrkX1spWGSpCa3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:f6:40:cc:63:1e:f9:4c:2e:d7:6a:53:a7:56:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Validity
Not Before: Aug 14 20:00:53 2026 GMT
Not After : Aug 15 20:00:53 2026 GMT
Subject: CN=5d6411427a5e2b08baff21e766e83e8ff67a0596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:92:3b:f2:11:0b:c3:01:bd:ce:a8:4a:51:
88:94:4c:fb:ba:91:80:21:b8:6b:dd:e6:23:29:69:
32:b7:ab:2d:be:ae:de:19:94:cf:8d:b1:b6:ab:88:
22:dc:4c:58:36:9e:52:92:dd:98:04:21:54:3c:5a:
5a:1d:38:03:93:b0:53:b6:cf:82:f3:d7:98:4a:c0:
54:d3:c1:47:91:80:db:47:2c:05:c1:8a:37:9d:0b:
5c:b2:23:f1:be:ff:74:39:3c:f5:d6:16:e5:eb:a9:
78:6c:69:28:5a:c6:f0:d5:0c:83:43:13:6c:c1:95:
73:35:1d:40:39:40:b4:cc:aa:d7:7d:b4:0a:3b:23:
c6:5c:09:26:e4:d1:9f:d5:d1:22:a6:75:68:54:27:
1b:a7:85:2f:3e:37:2d:91:a5:8a:43:60:aa:e1:9e:
93:c4:a2:f5:49:61:e5:62:d8:98:d0:cb:a7:5d:d7:
f5:3c:6c:83:0b:18:ec:06:d8:cd:af:68:f3:96:be:
8d:cf:f6:17:dc:16:39:57:d7:65:61:c8:4a:8a:06:
d9:31:66:40:8e:ec:67:0b:49:f4:9e:30:ca:0e:15:
b0:f8:50:8d:ca:93:6d:3f:1e:98:14:ee:40:4f:a7:
ff:06:02:3f:86:93:47:a5:b2:c7:27:d7:94:f8:47:
7b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:64:11:42:7A:5E:2B:08:BA:FF:21:E7:66:E8:3E:8F:F6:7A:05:96
X509v3 Authority Key Identifier:
keyid:EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b4:d0:48:04:fb:05:6e:f0:46:82:25:66:32:f3:3c:2f:20:
f4:45:38:43:f8:c1:98:87:9b:80:f3:ea:68:bf:d3:a8:8f:2a:
43:ae:f9:d7:04:b4:15:79:ad:63:e1:d5:22:37:8c:6b:c8:83:
a9:c9:a5:bc:98:68:7c:29:9a:01:f8:c1:96:74:54:e6:00:61:
76:8f:a2:6f:44:5e:2c:24:16:56:d8:af:36:49:b8:41:0b:59:
ff:02:af:18:2e:e3:16:c8:a4:df:11:51:4d:b6:5a:8f:c3:20:
75:c2:df:6b:e7:e6:54:60:06:89:1c:aa:be:7e:d8:8b:40:fe:
fc:f3:8e:c2:60:cf:1b:d3:82:95:f6:b1:df:12:f7:57:0a:e0:
9b:ec:ae:93:87:91:f4:24:de:8a:37:7f:c7:3c:f7:f8:4b:34:
15:c6:48:f2:71:a5:47:87:cb:1a:75:e3:8b:33:86:27:d7:82:
49:3b:fb:93:05:38:7c:17:27:70:60:f9:76:c5:73:c5:e6:c8:
3d:12:88:da:95:91:b4:0c:aa:7c:38:86:98:fd:24:3c:52:c9:
3e:f3:e8:04:9f:21:e0:70:1a:bc:2d:df:06:d0:b0:ab:5f:a4:
e5:70:35:27:26:f6:de:d3:02:1d:86:c8:18:c8:42:47:b9:96:
22:74:b4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:44 2026 by rpki-client