Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
File: 7N10boF0dtVXj7y-1XTXwa0mQfE.mft (raw, json)
Hash identifier: tIl+mllPg8fbV0/C4XJ/tNrC00g7Ykqsb43OJs5AvHc=
Subject key identifier: 90:D8:2C:FB:1C:86:DD:92:C8:F3:B1:F6:4D:FC:A7:1C:68:CC:B1:D4
Authority key identifier: EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
Certificate issuer: /CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Certificate serial: 019D38657F846A9D0D66D13C2870A5733484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 07:01:08 +0000
Manifest this update: Sun 29 Mar 2026 07:01:08 +0000
Manifest next update: Mon 30 Mar 2026 07:01:08 +0000
Files and hashes: 1: 7N10boF0dtVXj7y-1XTXwa0mQfE.crl (hash: o0RxPekDJmC4sHKE1FZCdqx3wwuafrPXVlug2Gbq8lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:7f:84:6a:9d:0d:66:d1:3c:28:70:a5:73:34:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Validity
Not Before: Mar 29 07:01:08 2026 GMT
Not After : Mar 30 07:01:08 2026 GMT
Subject: CN=90d82cfb1c86dd92c8f3b1f64dfca71c68ccb1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:a2:fd:eb:62:e8:d6:91:63:d4:cf:b1:c4:
c1:c7:c4:4f:c0:0b:a7:48:27:36:de:ec:de:0c:f7:
0e:a3:ee:3f:3f:a1:8d:b5:28:46:b6:55:9a:29:68:
55:a1:b8:65:84:3f:d6:87:ac:1e:9c:3e:8d:ef:f4:
8c:19:9e:22:e8:e3:56:3b:92:e3:b2:21:63:84:8f:
d0:cb:90:1e:87:df:8d:2d:eb:6f:34:6b:91:7c:ac:
87:d7:7f:ca:e2:8c:a6:e0:6d:16:3e:5f:45:48:44:
9b:1c:8b:3e:ee:44:27:b0:fe:c7:88:77:be:69:ac:
e8:f7:d1:9b:09:1b:8d:79:da:bd:14:2d:08:e3:2f:
25:1a:30:c8:94:c1:b4:ac:f4:25:21:23:a5:04:69:
3e:4f:52:4a:6f:83:23:54:2b:1e:42:40:65:c2:35:
6b:43:4b:f5:76:ad:cd:b6:e3:fb:2f:4d:86:99:3a:
79:80:fa:c6:06:06:bd:6b:09:8d:74:98:3b:8a:9f:
fc:5a:ef:21:55:85:28:3c:1a:90:ad:de:df:56:57:
c4:ba:11:1b:50:bb:37:65:4e:2a:4a:b9:2e:9a:b1:
83:73:27:63:25:24:65:6e:dd:0c:3f:ab:f7:17:13:
f8:b5:be:a1:1e:62:e3:d6:7e:29:e2:0d:1c:6f:9e:
1c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D8:2C:FB:1C:86:DD:92:C8:F3:B1:F6:4D:FC:A7:1C:68:CC:B1:D4
X509v3 Authority Key Identifier:
keyid:EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:67:12:c4:86:86:82:a2:84:94:29:4a:00:ed:59:6f:ca:48:
a5:10:af:d6:37:dc:bb:9b:c8:d5:d4:81:91:28:99:a1:c2:d3:
69:da:3b:ad:f5:0a:6f:db:85:8e:f2:0a:5a:9e:b2:2e:72:d9:
1c:2c:63:78:28:98:a9:d8:5b:17:c3:fc:90:dc:75:c4:26:de:
42:1d:4f:98:13:65:98:34:4a:b6:38:a4:51:7d:63:eb:68:dd:
26:c8:c4:d3:cb:59:49:81:42:ef:20:fc:42:52:dd:51:fb:2c:
4b:ef:12:cb:2e:a5:88:11:d0:58:53:52:b3:53:a3:37:76:3f:
57:a4:62:fc:a6:a2:bc:58:b1:e8:43:d0:a0:97:8f:92:a8:79:
40:bc:6d:a7:76:d6:7d:1c:ec:64:d9:b7:1f:4a:ee:65:6d:52:
14:e6:81:fc:5e:64:3d:5c:7a:a7:ef:c4:3f:ac:4f:9c:b7:4d:
c3:1c:2a:6a:30:99:11:55:83:c0:5e:8d:7a:64:b3:53:66:7b:
43:12:63:c9:b9:5d:6c:c0:8d:d4:d7:20:13:08:2f:f3:14:17:
0e:7a:b2:9c:ef:e5:1a:f8:bf:a9:8f:2e:f9:72:96:be:01:0f:
5a:80:9b:d3:fe:56:a5:78:89:b0:8b:2d:72:d6:0e:b1:14:93:
fe:b4:6f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:15:23 2026 by rpki-client